---
title: "Get list of Investigations"
method: GET
path: "/investigations"
tags: ["Investigations"]
---

# Get list of Investigations

`GET /investigations`

Retrieves a filterable paginated list of investigations

## Query parameters

- `q` object — Object to hold the investigations filters
  - `statuses` string — Listed by [Get Investigation filters](https://developer.alloy.com/public/reference/get_investigations-filters). E.g. `["alert_review"]`.
  - `types` string — Listed by [Get Investigation filters](https://developer.alloy.com/public/reference/get_investigations-filters). E.g. `["Fraud"]`.
  - `assignedAgents` string — Listed by [Get Investigation filters](https://developer.alloy.com/public/reference/get_investigations-filters). E.g. `["AG-L83m6iTwcXdNg3CHndS4"]`
  - `entityTokens` string — E.g. `["P-KaKZxdSGnbxXfKXnXdyp"]`
  - `investigationTokens` string — E.g. `["INV-EAx2xoAsqF1ibKTQzkXV"]`
  - `externalEntityIds` string — E.g. `["external_entity_id"]`
  - `deviceIds` string — E.g. `["device_vendor_identifier"]`
  - `programNames` string — E.g. `["program_name"]`
  - `includeClosed` boolean
  - `archived` boolean — E.g. `false`
  - `createdAtFrom` number — E.g. `1737742979`
  - `createdAtTo` number — E.g. `1737742979`
  - `updatedAtFrom` number — E.g. `1737742979`
  - `updatedAtTo` number — E.g. `1737742979`
- `pageNum` number — Which page number to return. Default is 1
- `numRowsPerPage` number — Limits results per page. Up to 100.
- `sortColumn` 'updated_at' | 'created_at' | 'total_alerts' | 'risk_score'
- `sortOrder` 'DESC' | 'ASC'

## Response `200`

Success

- object
  - `_embedded` object
    - `pagination` object
      - `total_investigations` number
      - `total_pages` number
      - `page` number
      - `per_page` number
    - `sorting` object
      - `column` string
      - `order` string
  - `error` object
  - `investigations` object[]
    - `investigation_token` string
    - `name` string
    - `total_alerts` number
    - `type` string
    - `state` string
    - `source` string
    - `outcome` string
    - `created_at` string, date-time
    - `updated_at` string, date-time
    - `closed_at` string, date-time
    - `archived_at` string, date-time
    - `_embedded` object
      - `entities` object
        - `P-KaKZxdSGnbxXfKXnXdyp` object
          - `entity_name` string
          - `entity_type` string
          - `entity_token` string
          - `risk_score` number
      - `assigned_agent` object
        - `first_name` string
        - `last_name` string
        - `email` string
        - `token` string
    - `device_ids` string[]
    - `program_names` string[]
    - `alert_assignees` string[]

## Other responses

- `401` — Authentication Failure

---

[API](https://skmtc.net/alloy/apis/alloy-api.md) · [All operations](https://skmtc.net/alloy/apis/alloy-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/alloy/alloy-api/revisions/405799de4d2a/schema)