UPupguard
userrisk

List permission apps

Retrieve a list of applications that were granted a specific permission.

Required API key permissions: User Risk (select when creating API key in Account Settings)

get/user_risk/permissions/apps/list

Request

Query parameters

page_sizeinteger

The page size of results to return. If not supplied, default is 100.

page_tokenstring

The page_token from a previous request, use this to get the next page of results.

sort_by'name' | 'first_detected' | 'num_users' | 'exposure_level'

The field to sort results by. Default is name.

sort_dir'asc' | 'desc'

The direction to sort results. Default is asc.

idstring required

The unique identifier of the permission.

Response

A list of apps that were granted the permission

next_page_tokenstring

The token to be used to retrieve the next page of results. Will not be returned if there are no more results.

Example response

{
  "apps": [
    {
      "category": "Team Communication",
      "description": "Microsoft Teams is a cloud-based communication and collaboration service that combines chat, video conferencing, and meeting recording into a single experience.",
      "domain": "teams.microsoft.com",
      "exposure_level": "elevated",
      "first_detected": "2025-12-01T00:00:00Z",
      "metadata": {
        "entra_app_id": "12345678-9abc-def0-1234-56789abcdef0"
      },
      "name": "Microsoft Teams",
      "num_current_users": 100,
      "sources": [
        "browser",
        "microsoft"
      ],
      "summary": "Microsoft Teams is a cloud-based communication and collaboration service that combines chat, video conferencing, and meeting recording into a single experience.",
      "usage_policy": {
        "base_rule": "tolerate",
        "source": "org_default"
      },
      "vendor_id": 1234567890,
      "vendor_monitored": true,
      "vendor_name": "Microsoft",
      "vendor_security_rating": 900,
      "vendor_security_rating_trend": 100,
      "vendor_using_ai": true
    }
  ],
  "next_page_token": "acbd18db4cc2f85cedef654fccc4a4d8"
}

Changes

No recorded changes to this operation across all 1 revision of this API.