---
title: "POST /ListThreats"
method: POST
path: "/ListThreats"
---

# POST /ListThreats

`POST /ListThreats`

Returns a paginated list of threats for a threat model job.

## Request body

- object
  - `threatJobId` string, required — The unique identifier of the threat model job to list threats for.
  - `agentSpaceId` string, required — The unique identifier of the agent space.
  - `nextToken` string — Pagination token.
  - `maxResults` integer — Maximum results for pagination.

## Response `200`

Success

- ListThreatsOutput — Output for the ListThreats operation.
  - `threats` ThreatSummary[] — The list of threat summaries.
    - `threatId` string — The unique identifier of the threat.
    - `threatJobId` string — The unique identifier of the threat model job that produced the threat.
    - `title` string — A short title summarizing the threat.
    - `statement` string — The natural-language threat statement.
    - `severity` 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO' — The severity level of the threat.
    - `status` 'OPEN' | 'RESOLVED' | 'DISMISSED' — The current status of the threat.
    - `stride` StrideCategory[] — The STRIDE categories applicable to this threat.
    - `createdBy` 'CUSTOMER' | 'AGENT' — Who created this threat.
    - `updatedBy` 'CUSTOMER' | 'AGENT' — Who last updated this threat.
    - `createdAt` string, date-time — The date and time the threat was created, in UTC format.
    - `updatedAt` string, date-time — The date and time the threat was last updated, in UTC format.
  - `nextToken` string — A token to use for paginating results that are returned in the response.

---

[API](https://skmtc.net/aws/apis/securityagent.md) · [All operations](https://skmtc.net/aws/apis/securityagent/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityagent/versions/cad56717d636/schema)