---
title: "List org findings"
method: GET
path: "/experimental/orgs/{orgId}/findings-v2"
tags: ["Findings V2"]
---

# List org findings

`GET /experimental/orgs/{orgId}/findings-v2`

## Request

- Base URL: `https://api.tessl.io`
- URL: `https://api.tessl.io/experimental/orgs/{orgId}/findings-v2`
- Auth: none declared

Lists the org's own findings and those of every active project in the org whose workspace the caller can view, newest first. Each finding carries its project, null for an org finding, and the loop that found it.

## Path parameters

- `orgId` string, uuid, required

## Query parameters

- `sort` union
  - union[]
    - union
      - 'id'
      - '-id'
  - 'id'
  - '-id'
- `page[size]` number
- `page[after]` string
- `page[before]` string
- `loopId` string, uuid
- `runId` string, uuid
- `state` union
  - 'open'
  - 'in-progress'
  - 'resolved'
  - 'ignored'
  - union[]
    - union
      - 'open'
      - 'in-progress'
      - 'resolved'
      - 'ignored'
- `tag` union
  - string: A free-form label for what the finding is about. Surrounding whitespace is trimmed.
  - string[]
- `title` string

## Headers

- `Authorization` string

## Response `200`

Default Response

- object
  - `links` object, required
    - `self` string, uri, required
    - `next` string, uri, nullable, required
    - `prev` string, uri, nullable, required
  - `meta` object, required
    - `count` number, required
  - `data` object[], required
    - `id` string, uuid, required
    - `type` 'finding-v2', required
    - `attributes` object, required
      - `schemaVersion` 1, required
      - `observations` object[], required
        - `loopId` string, uuid
        - `runId` string, uuid
        - `scanId` string, uuid: The inventory scan that made this observation.
        - `observedAt` string, date-time, required
        - `evidence` string[], required
        - `locations` object[]: The files this observation covers, with line ranges where known.
          - `canonicalRepoUrl` string, required
          - `path` string, required
          - `startLine` integer
          - `endLine` integer
      - `links` object[], required
        - `id` string, uuid, required
        - `type` union, required
          - 'ticket'
          - 'pull_request'
        - `url` string, uri, required
      - `tags` string[], required
      - `title` string, required
      - `analysis` string, required
      - `recommendation` string, required
      - `expectedImprovement` string, required
      - `orgId` string, uuid, required
      - `projectId` string, uuid, nullable, required: The project the finding belongs to, or null for an org finding: an inventory finding that belongs to no single project.
      - `sourceKind` union, required
        - 'conformance'
        - 'inventory'
      - `state` union, required
        - 'open'
        - 'in-progress'
        - 'resolved'
        - 'ignored'
      - `createdAt` string, date-time, required
      - `updatedAt` string, date-time, required
      - `project` object, nullable, required: The finding's project. Null when the finding belongs to the org rather than one project.
        - `id` string, uuid, required
        - `name` string, required
        - `workspaceId` string, uuid, required
      - `loop` object, nullable, required: The loop that first observed the finding. Null when no loop in the org observed it.
        - `id` string, uuid, required
        - `name` string, required: The loop's label, else its skill.

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `500`: Internal Server Error
- `503`: Service Unavailable

## Changes

- **2026-10-29** `06d2142ed144`: 1 info
  - api operation id `listOrgFindingsV2` was added
- **2026-10-25** `d43514b95227`: 5 breaking, 1 info
  - response property `data/items/attributes/projectId` list-of-types was widened by adding types `null` to media type `application/json` of response `200`
  - the `data/items/attributes/project` response's property type changed from `object` to no type for status `200`
  - removed the required property `data/items/attributes/project/id` from the response with the `200` status
  - removed the required property `data/items/attributes/project/name` from the response with the `200` status
  - …2 more
- **2026-10-23** `9ad2b983af2e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/tessl/apis/tessl-api/changes/experimental/orgs/:orgId/findings-v2/get.md)

---

[API](https://skmtc.dev/tessl/apis/tessl-api.md) - [All operations](https://skmtc.dev/tessl/apis/tessl-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tessl/apis/tessl-api/revisions/4fa2a17154e4?raw)