---
title: "Request a specific phishing config"
method: GET
path: "/organizations/{organizationId}/configs/{configId}"
tags: ["Phishing Configs"]
---

# Request a specific phishing config

`GET /organizations/{organizationId}/configs/{configId}`

## Request

- Base URL: `https://api.xfa.tech`
- URL: `https://api.xfa.tech/organizations/{organizationId}/configs/{configId}`
- Auth: HTTP bearer

## Path parameters

- `organizationId` string, required
- `configId` string, required

## Response `200`

Returns the phishing config

- Config
  - `config_id` string, required: ID of the phishing config
  - `organization_id` string, required: ID of the organization
  - `send_response` boolean, required: Whether to send a response to phishing attempts
  - `domains` string[], required: List of domains for phishing config
  - `fwd_address` string, nullable: Forward address for phishing emails
  - `phishing_inbox_name` string, nullable: Name of the phishing inbox

## Other responses

- `400`: Missing config id
- `403`: User is not authorized for this organization
- `500`: Internal server error

---

[API](https://skmtc.dev/xfa/apis/xfa-api.md) · [All operations](https://skmtc.dev/xfa/apis/xfa-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfa/apis/xfa-api/revisions/1a1be0e8972b?raw)