---
title: "Get the current or historical overall, domain and criteria ratings for a given TOE and a given risk dimension."
method: GET
path: "/v1/toes/{toe_id}/ratings"
tags: ["Target Of Evaluation TOE"]
---

# Get the current or historical overall, domain and criteria ratings for a given TOE and a given risk dimension.

`GET /v1/toes/{toe_id}/ratings`

## Request

- Base URL: `https://api.sandbox.riskrecon.com`
- URL: `https://api.sandbox.riskrecon.com/v1/toes/{toe_id}/ratings`
- Auth: HTTP bearer

Get the current or historical overall, domain and criteria ratings for a given TOE and a given risk dimension. Privacy can only be returned if privacy is enabled for your customer and you have a privacy license for the given TOE.

## Path parameters

- `toe_id` string, required

## Query parameters

- `risk_dimensions[]` string[]
- `current_rating_only` boolean
- `page` integer
- `per_page` integer

## Response `200`

OK

- ToeRatings
  - `meta` PaginationMeta
    - `current_page` integer: The current page of paginated responses.
    - `next_page` integer, nullable: The next page of paginated responses if applicable.
    - `prev_page` integer, nullable: The previous page of paginated responses if applicable.
    - `total_count` integer: The total count of items.
    - `total_pages` integer: The total number of pages for paginated responses.
  - `data` object[]: Data associated with response object.
    - `attributes` ToeRating
      - `analysis_id` string, required: The unique identifier for analysis.
      - `updated_at` string, required: The date a data loss event was updated.
      - `cyber_rating` string, nullable, required: The rating label of an analysis or of some domain or criteria of the analysis.
      - `cyber_rating_numeric` number, nullable, required: The numeric rating of an analysis or of some domain or criteria of the analysis.
      - `cyber_trend` number, nullable: Increase or decrease from the previous analysis rating.
      - `privacy_rating` string, nullable: The rating label of an analysis or of some domain or criteria of the analysis.
      - `privacy_rating_numeric` number, nullable: The numeric rating of an analysis or of some domain or criteria of the analysis.
      - `privacy_trend` number, nullable: Increase or decrease from the previous analysis rating.
      - `security_domain_ratings` object[], required: array of security_domain_ratings
        - `security_domain` string: The security_domain category rating
        - `rating` string, nullable: The rating label of an analysis or of some domain or criteria of the analysis.
        - `rating_numeric` number, nullable: The numeric rating of an analysis or of some domain or criteria of the analysis.
        - `risk_dimension` string: Category of security domain or criteria. Can currently be cyber or privacy.
        - `display_name` string, nullable: The display name seen on RiskRecon portal site.
        - `rated` boolean, nullable: Is this domain or criteria rated?
        - `trend` number, nullable: Increase or decrease from the previous analysis rating.
      - `security_criteria_ratings` object[], required: array of security_criteria_ratings
        - `security_domain` string: The security_domain category for the criterion.
        - `security_criteria` string: The security_criteria associated with the rating.
        - `rating` string, nullable: The rating label of an analysis or of some domain or criteria of the analysis.
        - `rating_numeric` number, nullable: The numeric rating of an analysis or of some domain or criteria of the analysis.
        - `risk_dimension` string: Category of security domain or criteria. Can currently be cyber or privacy.
        - `display_name` string, nullable: The display name seen on RiskRecon portal site.
        - `rated` boolean, nullable: Is this domain or criteria rated?
        - `trend` number, nullable: Increase or decrease from the previous analysis rating.
    - `id` string: The identifier associated with response object.
    - `type` string: The type of object returned.

## Other responses

- `400`: Something was wrong with the request
- `401`: Authentication information was missing or invalid or the user is not authorized to access resource or perform the associated action.
- `403`: FORBIDDEN

---

[API](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api.md) - [All operations](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api/revisions/212ef0eeee9b?raw)