---
title: "Get an Investigation"
method: GET
path: "/investigations/{investigation_token}"
tags: ["Investigations"]
---

# Get an Investigation

`GET /investigations/{investigation_token}`

Returns the details of an individual Investigation.

## Response `200`

Successfully retrieved Investigation Details

- object
  - `investigation_token` string
  - `closed_at` string, date-time
  - `created_at` string, date-time
  - `name` string, nullable
  - `type` string
  - `state` string
  - `source` string
  - `outcome` string
  - `updated_at` string, date-time
  - `archived_at` string, date-time
  - `_embedded` object
    - `assigned_agent` object
      - `first_name` string
      - `last_name` string
      - `email` string
      - `token` string
    - `entities` object
      - `P-KaKZxdSGnbxXfKXnXdyp` object
        - `type` string
        - `entity_token` string
        - `entity_name` string
        - `meta` string, nullable
        - `external_ingestion_identifier` string, nullable
        - `recent_action` string, nullable
        - `external_entity_identifier` string
        - `risk_score` number, nullable
    - `events` object[]
      - `event` string
      - `agent` object
        - `first_name` string
        - `last_name` string
        - `email` string
        - `token` string
      - `assigned_agent` object
        - `first_name` string, nullable
        - `last_name` string, nullable
        - `email` string, nullable
        - `token` string, nullable
      - `note` string, nullable
      - `meta` object, nullable
    - `evidences` object
      - `journey_alerts` object[]
        - `journey_application_token` string
        - `journey_token` string
      - `tags` object[]
        - `tag_color` string
        - `tag_name` string
        - `is_outcome_reason` boolean
        - `added_by` object
          - `email` string
          - `first_name` string
          - `last_name` string
          - `token` string
    - `documents` Items[] — unresolved $ref
    - `notes` object[]
      - `created_at` string
      - `created_by` object
        - `first_name` string
        - `last_name` string
        - `email` string
        - `token` string
      - `entity_name` string
      - `entity_token` string
      - `text` string
      - `is_investigation_level_note` boolean
    - `reviews` object[]
      - `new_investigation_state` string
      - `note` string, nullable
      - `outcome` string
      - `previous_investigation_state` string
      - `reason` string
      - `reviewed_at` string, date-time
      - `reviewed_by` object
        - `first_name` string
        - `last_name` string
        - `email` string
        - `token` string

## Other responses

- `401` — Authentication Failure
- `404` — Investigation Not Found
- `409` — Resource Conflict
- `500` — Unhandled Service Error
- `503` — Temporarily Offline for Maintenance

---

[API](https://skmtc.net/alloy/apis/alloy-api.md) · [All operations](https://skmtc.net/alloy/apis/alloy-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/alloy/alloy-api/revisions/405799de4d2a/schema)