---
title: "Get security remediation plan"
method: GET
path: "/api/clusters/{clusterName}/security/remediation-plan"
tags: ["ClusterSecurity"]
---

# Get security remediation plan

`GET /api/clusters/{clusterName}/security/remediation-plan`

## Path parameters

- `clusterName` string, required

## Headers

- `Authorization` string, required

## Response `200`

OK

- ClusterRemediationPlan
  - `cluster` string
  - `generated_at` string
  - `open_findings` integer
  - `remediations` ClusterRemediationEntry[]
    - `auto_fixable` boolean — true when POST /security/fix-state/{err_key} is supported
    - `description` string
    - `err_key` string
    - `fixes` ClusterRemediationFix[]
      - `description` string
      - `file_name` string — cnf_template
      - `my_cnf` string — suggested file content
      - `risk` string — "safe", "moderate", "disruptive"
      - `tag` string — add_tag / drop_tag
      - `type` string
      - `url` string — settings_switch
    - `server` string

## Other responses

- `404` — Cluster not found

## Changes

- **2026-07-17** `7465ea0ee21a` — 1 info
  - endpoint added
- **2023-03-31** `b57fc7b9446e` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/signal18/apis/untitled-api/changes/api/clusters/:clusterName/security/remediation-plan/get.md)

---

[API](https://skmtc.dev/signal18/apis/untitled-api.md) · [All operations](https://skmtc.dev/signal18/apis/untitled-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/signal18/untitled-api/revisions/7465ea0ee21a/schema)