---
title: "Get subscription from store by ID"
method: GET
path: "/smartfolder/{id}"
tags: ["Subscriptions"]
---

# Get subscription from store by ID

`GET /smartfolder/{id}`

## Request

- Base URL: `https://asm.cloud.tenable.com/api/1.0`
- URL: `https://asm.cloud.tenable.com/api/1.0/smartfolder/{id}`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/tenable/apis/attack-surface-management/docs/smartfolder/:id/get.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `id` integer, required

## Query parameters

- `offset` integer
- `limit` integer, required
- `after` string
- `sortby` string
- `sortorder` boolean
- `columns` string

## Response `200`

OK

- object
  - `sortAfter` string
  - `sortBefore` string
  - `freeLimitReached` boolean
  - `assets` Asset[]: The selected source's assets
    - `app_updates` object: Date when data with the given namespace (<namespace>.<key>, e.g. own_body.html) was last queued for update.
      - `domaininfo` string
      - `ipgeo` string
      - `own_body` string
      - `own_header` string
      - `ports` string
      - `rbls` string
      - `screenshot` string
      - `ssl` string
      - `wtech` string
    - `bd.addedtoportfolio` number: Timestamp of date when the Asset was added to the current inventory.
    - `bd.domain` string: Domain name of Asset.
    - `bd.hostname` string: It has been deprecated. Please use bd.record_value instead of it.
    - `bd.ip_address` string: IP address of the Asset.
    - `bd.original_hostname` string: Hostname of the Asset in case of CNAME records.
    - `bd.record_type` string: DNS record type of Asset.
    - `bd.record_value` string: DNS record value of Asset.
    - `bd.subdomain` boolean: Whether the hostname of the Asset is a subdomain or not.
    - `bd.tags` number[]: IDs of simple Tags associated with the Asset. Corresponds with the Tag column on the UI.
    - `bd.tag_<tag_id>_<type>` string: User-entered value of a specific Custom Column.
    - `bd.string_custom_columns` unknown[]: List of all string custom columns associated with the Asset.
      - unknown
    - `bd.custom_columns` unknown[]: List of all number custom columns associated with the Asset.
      - unknown
    - `bd.sources` number[]: The list of source ids that the asset belongs to.
    - `bd.severity_ranking` 'critical' | 'high' | 'medium' | 'low' | 'none': The severity ranking of the asset.
    - `bd.last_metadata_change` string, date-time: The last time the asset metadata changed.
    - `domaininfo.administrativecontact_email` string, email: Administrative contact email of the Asset
    - `domaininfo.administrativecontact_name` string: Administrative contact name of the Asset
    - `domaininfo.administrativecontact_organization` string: Administrative contact organization of the Asset
    - `domaininfo.billingcontact_email` string, email: Billing contact email of the Asset
    - `domaininfo.contactemail` string, email: Contact email of the Asset
    - `domaininfo.expiresdate` string, date-time: Expire date of the Asset
    - `domaininfo.fdns_nameservers` string[]: Nameservers
    - `domaininfo.registrant_city` string: Registrant city of the Asset"
    - `domaininfo.registrant_country` string: Registrant country / region of the Asset
    - `domaininfo.registrant_email` string, email: Registrant email of the Asset
    - `domaininfo.registrant_fax` string: Registrant fax of the Asset
    - `domaininfo.registrant_name` string: Registrant name of the Asset
    - `domaininfo.registrant_postalcode` string: Registrant postal code of the Asset
    - `domaininfo.registrant_state` string: Registrant state of the Asset
    - `domaininfo.registrant_street1` string: Registrant street 1 of the Asset
    - `domaininfo.registrant_street2` string: Registrant street 2 of the Asset
    - `domaininfo.registrant_street3` string: Registrant street 3 of the Asset
    - `domaininfo.registrant_street4` string: Registrant street 4 of the Asset
    - `domaininfo.registrarname` string: Registrar name of the Asset
    - `domaininfo.status` string: Status of the Asset
    - `domaininfo.technicalcontact_email` string, email: Technical contact email of the Asset
    - `domaininfo.zonecontact_email` string, email: Zone contact email of the Asset
    - `domaininfo.registrant_organization` string: Registrant organization of the Asset
    - `domaininfo.registrant_telephone` string: Registrant telephone of the Asset
    - `domaininfo.administrativecontact_telephone` string: Administrative contact telephone of the Asset
    - `domaininfo.technicalcontact_organization` string: Technical contact organization of the Asset
    - `domaininfo.technicalcontact_name` string: Technical contact name of the Asset
    - `hidden` boolean: Whether the Asset has been archived or not.
    - `id` string: The unique id of the Asset.
    - `ipgeo.asn` string: The Autonomous System Organization of the Asset.
    - `ipgeo.postal` string: Postal code of the Asset.
    - `ipgeo.asn_number` number: The Autonomous System Number of the Asset.
    - `ipgeo.city` string: Location of the Asset.
    - `ipgeo.cloud` string: Cloud provider of the Asset.
    - `ipgeo.cloudhosted` boolean: Whether the Asset is cloud-hosted or not.
    - `ipgeo.continent` string: Location of the Asset.
    - `ipgeo.country` string: Location of the Asset.
    - `ipgeo.insideeu` boolean: Whether the Asset is located in the EU or not.
    - `ipgeo.latitude` number: Location of the Asset.
    - `ipgeo.longitude` number: Location of the Asset.
    - `ipgeo.registered_country` string: Country / region where the Asset was registered.
    - `ipgeo.subdivisions` string[]: Location of the Asset.
    - `ipgeo.time_zone` string: Location of the Asset.
    - `own_body.contentlength` number: Length of the content served by the Asset in bytes.
    - `own_body.html` string: Raw response body returned by the Asset.
    - `own_body.canonical` string: Canonical URL found in the HTML body returned by the Asset.
    - `own_header.content-type` string: The type of content served by the Asset.
    - `own_header.content-language` string: The language of content served by the Asset.
    - `own_header.names` string[]: Names of HTTP headers set by the Asset.
    - `own_header.secnames` string[]: Names of HTTP security headers set by the Asset.
    - `own_header.responsecode` number: HTTP status code returned by the Asset.
    - `own_header.server` string: Web server running on the Asset based on HTTP response headers.
    - `own_header.setsCookies` boolean: Whether the Asset sets cookies or not.
    - `own_header.vary` string: The value of HTTP header Vary set by the Asset.
    - `own_header.values` string[]: HTTP header values returned by the Asset.
    - `own_header.secvalues` string[]: HTTP security header values returned by the Asset.
    - `ports.banners` string[]: Banners returned by services running on the Asset.
    - `ports.ports` number[]: Ports open on the Asset.
    - `ports.verified_ports` number[]: Ports that are open AND have non-empty banners.
    - `ports.lastseen` string[]: Date of last scan for each individual port open on the Asset.
    - `ports.services` string[]: Service running on the Asset.
    - `ports.cpes` string[]: Services running on the Asset in CPE format.
    - `ports.cves` string[]: IDs of CVEs that apply to the Asset.
    - `ports.cvss3_scores` number[]: Unique CVSS3 scores that apply to the Asset.
    - `ports.cvss3_vectors` string[]: Unique CVSS3 vector strings that apply to the Asset.
    - `rbls.rbls` string[]: Realtime Blackhole Lists that contain the Asset.
    - `rbls.sampledate` string[]: Last check of each RBL the Asset appears on.
    - `screenshot.finalhtml` string: Raw final response body returned by the Asset.
    - `screenshot.finalurl` string: The final URL the Asset redirects to.
    - `screenshot.final_response_code` integer: The response code returned from the final URL the Asset redirects to.
    - `screenshot.screenshot` string: URL of a screenshot taken of the Asset.
    - `screenshot.redirect_chain` string[]: The chain of HTTP or client-side redirects that navigated the system to screenshot.finalurl
    - `ssl.available_suites` string[]: Cypher suites available on the Asset.
    - `ssl.bits` number: Peer certificate RSA bit size
    - `ssl.ev_cert` boolean: True, if the SSL / TLS certificate of the Asset is an EV cert.
    - `ssl.fingerprint` string: SSL fingerprint of the Asset.
    - `ssl.issuer_C` string: SSL certificate issuer country / region.
    - `ssl.issuer_CN` string: SSL certificate issuer common name.
    - `ssl.issuer_O` string: SSL certificate issuer organization.
    - `ssl.jarm` string: JARM hash of the SSL / TLS data of the Asset. Use this property to group assets by similar SSL / TLS configuration.
    - `ssl.protocol` string[]: SSL protocols used by the Asset.
    - `ssl.subjectaltname` string[]: SSL subject alt names of the Asset.
    - `ssl.valid_from` string: Date from which the SSL certificate of the Asset is valid.
    - `ssl.valid_to` string: Date until the SSL certificate of the Asset is valid.
    - `ssl.sslerror` string: SSL errors produced by the Asset.
    - `ssl.serial_number` string: SSL serial number of the Asset.
    - `wtech.Content Management Systems` string[]: CMSs used by the Asset.
    - `wtech.Message Boards` string[]: Message boards used by the Asset.
    - `wtech.Database Managers` string[]: Database managers used by the Asset.
    - `wtech.Documentation Tools` string[]: Documentation tools used by the Asset.
    - `wtech.Widgets` string[]: Javascript widgets used by the Asset.
    - `wtech.Ecommerce` string[]: Ecommerce solutions used by the Asset.
    - `wtech.Photo Galleries` string[]: Photo galleries used by the Asset.
    - `wtech.Wikis` string[]: Wiki software used by the Asset.
    - `wtech.Hosting Panels` string[]: Hosting panels used by the Asset.
    - `wtech.Analytics` string[]: Analytics software used by the Asset.
    - `wtech.Blogs` string[]: Blogging software used by the Asset.
    - `wtech.JavaScript Frameworks` string[]: JavaScript frameworks used by the Asset.
    - `wtech.Issue Trackers` string[]: Issue trackers used by the Asset.
    - `wtech.Video Players` string[]: Video players used by the Asset.
    - `wtech.Comment Systems` string[]: Comment systems used by the Asset.
    - `wtech.CAPTCHAs` string[]: CAPTCHA software used by the Asset.
    - `wtech.Font Scripts` string[]: Font scripts used by the Asset.
    - `wtech.Web Frameworks` string[]: Web frameworks used by the Asset.
    - `wtech.Miscellaneous` string[]: Misc software used by the Asset.
    - `wtech.Editors` string[]: Editor software used by the Asset.
    - `wtech.Learning Management Systems` string[]: Learning management systems used by the Asset.
    - `wtech.Web Servers` string[]: Web servers running on the Asset.
    - `wtech.Web Application Firewall` string[]: Web application firewalls used by the Asset.
    - `wtech.Cache Tools` string[]: Cache tools used by the Asset.
    - `wtech.Rich Text Editors` string[]: Rich text editors used by the Asset.
    - `wtech.JavaScript Graphics` string[]: JavaScript graphics used by the Asset.
    - `wtech.Mobile Frameworks` string[]: Mobile frameworks used by the Asset.
    - `wtech.Programming Languages` string[]: Programming languages used by the Asset.
    - `wtech.Operating Systems` string[]: Operating systems used by the Asset.
    - `wtech.Search Engines` string[]: Search engines used by the Asset.
    - `wtech.Web Mail` string[]: Web mail used by the Asset.
    - `wtech.Content Delivery Networks` string[]: CDNs used by the Asset.
    - `wtech.Marketing Automation` string[]: Marketing automation software used by the Asset.
    - `wtech.Web Server Extensions` string[]: Web server extensions used by the Asset.
    - `wtech.Databases` string[]: Databases used by the Asset.
    - `wtech.Maps` string[]: Maps software used by the Asset.
    - `wtech.Advertising Networks` string[]: Advertising networks used by the Asset.
    - `wtech.Network Devices` string[]: Network devices used by the Asset.
    - `wtech.Media Servers` string[]: Media servers used by the Asset.
    - `wtech.Webcams` string[]: Webcam software used by the Asset.
    - `wtech.Printers` string[]: Printer libraries used by the Asset.
    - `wtech.Payment Processors` string[]: Payment processors used by the Asset.
    - `wtech.Paywalls` string[]: Paywalls used by the Asset.
    - `wtech.Tag Managers` string[]: Tag managers used by the Asset.
    - `wtech.Build/Continuous Integration Systems` string[]: Build CI systems used by the Asset.
    - `wtech.Control Systems` string[]: Control systems used by the Asset.
    - `wtech.Remote Access` string[]: Remote access software used by the Asset.
    - `wtech.Reverse Proxy` string[]: Reverse proxies used by the Asset.
    - `wtech.Development Tools` string[]: Development tools used by the Asset.
    - `wtech.Network Storage` string[]: Network storage software used by the Asset.
    - `wtech.Feed Readers` string[]: Feed readers used by the Asset.
    - `wtech.News Readers` string[]: Feed readers used by the Asset.
    - `wtech.Document Management Systems` string[]: Document management systems used by the Asset.
    - `wtech.Landing Page Builders` string[]: Landing page builders used by the Asset.
    - `wtech.Live Chat` string[]: Live chat software used by the Asset.
    - `wtech.socialurls` string[]: Social profiles used by the Asset.
    - `wtech.gakeys` string[]: Google analytics keys used by the Asset.
    - `wtech.adsensekeys` string[]: Google adsense keys used by the Asset.
    - `wtech.mixedcontent` string[]: Mixed content returned by the Asset.
    - `wtech.Customer Relationship Management Systems` string[]: Customer relationship management systems used by the Asset.
    - `wtech.Search Engine Optimization` string[]: Search engine optimization software used by the Asset.
    - `wtech.Accounting Systems` string[]: Accounting systems used by the Asset.
    - `wtech.Cryptomining` string[]: Cryptomining software used by the Asset.
    - `wtech.Static Site Generators` string[]: Static site generators used by the Asset.
    - `wtech.User Onboarding` string[]: User onboarding software used by the Asset.
    - `wtech.JavaScript Libraries` string[]: JavaScript libraries used by the Asset.
    - `wtech.Containers` string[]: Container software used by the Asset.
    - `wtech.SaaS` string[]: SaaS solutions used by the Asset.
    - `wtech.PaaS` string[]: PaaS solutions used by the Asset.
    - `wtech.IaaS` string[]: IaaS solutions used by the Asset.
    - `wtech.Load Balancer` string[]: Load Balancers used by the Asset.
    - `wtech.Cookie compliance` string[]: Cookie compliances used by the Asset.
    - `wtech.Accessibility` string[]: Accessibility libraries used by the Asset.
    - `wtech.Social logins` string[]: Social logins used by the Asset.
    - `wtech.Affiliate programs` string[]: Affiliate programs used by the Asset.
    - `wtech.Appointment scheduling` string[]: Appointment scheduling libraries used by the Asset.
    - `wtech.Email` string[]: Emails used by the Asset.
    - `wtech.secretkeys` string[]: secretkeys used by the Asset.
    - `wtech.has_login` boolean: Whether the Asset redirects to or contains a login page.
    - `wtech.document_title` string
    - `wtech.Browser fingerprinting` string[]: Browser fingerprinting tools
    - `wtech.Buy now pay later` string[]: Buy now pay later tools
    - `wtech.Cart abandonment` string[]: Cart abandonment tools
    - `wtech.Content curation` string[]: Content curation tools
    - `wtech.Customer data platform` string[]: Customer data platform tools
    - `wtech.Digital asset management` string[]: Digital asset management tools
    - `wtech.Feature management` string[]: Feature management tools
    - `wtech.Geolocation` string[]: Geolocation tools
    - `wtech.Hosting` string[]: Hosting info
    - `wtech.Loyalty & rewards` string[]: Loyalty & rewards tools
    - `wtech.Performance` string[]: Performance tools
    - `wtech.Referral marketing` string[]: Referral marketing tools
    - `wtech.Reservations & delivery` string[]: Reservations & delivery platforms
    - `wtech.Reviews` string[]
    - `wtech.RUM` string[]: RUM tools
    - `wtech.Segmentation` string[]: Segmentation tools
    - `wtech.Shipping carriers` string[]: Shipping carriers tools
    - `wtech.Translation` string[]: Translation tools
    - `wtech.WordPress plugins` string[]: WordPress plugins tools
    - `wtech.WordPress themes` string[]: WordPress themes tools
    - `wtech.Shopify apps` string[]: Shopify apps tools
    - `wtech.Recruitment & staffing` string[]: Recruitment & staffing tools
    - `wtech.Returns` string[]: Returns technologies
    - `wtech.Livestreaming` string[]: Livestreaming tools
    - `wtech.Ticket booking` string[]: Ticket booking tools
    - `wtech.Augmented reality` string[]: Augmented reality tools
    - `wtech.Cross border ecommerce` string[]: Cross border ecommerce tools
    - `wpscan.vulnerabilities` string[]: WPScan Vulnerability Database IDs.
    - `wpscan.plugins` string[]: Wordpress plugin IDs found through scraping.
    - `wpscan.wpversion` string: Wordpress core version.

## Other responses

- `401`: Unauthorized
- `404`: The specified resource was not found
- `500`: Internal server error

---

[API](https://skmtc.dev/tenable/apis/attack-surface-management.md) - [All operations](https://skmtc.dev/tenable/apis/attack-surface-management/llms.txt) - [OpenAPI document](https://skmtc.dev/tenable/apis/attack-surface-management/revisions/465c06285e48?raw)
