---
title: "Get scan findings"
method: GET
path: "/api/scans/{scan_id}/findings"
tags: ["scans"]
---

# Get scan findings

`GET /api/scans/{scan_id}/findings`

Get vulnerability findings for a scan with severity/type filtering and pagination.

## Path parameters

- `scan_id` integer, required

## Query parameters

- `severity` 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO' — Vulnerability severity level
- `vuln_type` string
- `page` integer
- `per_page` integer

## Response `200`

Paginated findings

- FindingsResponse
  - `findings` FindingItem[]
    - `finding_id` integer
    - `type` string — Vulnerability type (XSS, SQLi, SSRF, etc.)
    - `severity` 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO' — Vulnerability severity level
    - `details` string
    - `payload` string, nullable
    - `url` string
    - `parameter` string, nullable
    - `validated` boolean
    - `status` 'PENDING_VALIDATION' | 'VALIDATED_CONFIRMED' | 'VALIDATED_FALSE_POSITIVE' | 'MANUAL_REVIEW_RECOMMENDED' | 'SKIPPED' | 'ERROR' — Finding validation status
    - `confidence` number, nullable
  - `total` integer
  - `page` integer
  - `per_page` integer
  - `scan_id` integer

## Other responses

- `400` — Invalid filter or pagination parameters
- `404` — Scan not found

---

[API](https://skmtc.net/bugtraceai/apis/bugtraceai-cli-api.md) · [All operations](https://skmtc.net/bugtraceai/apis/bugtraceai-cli-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bugtraceai/bugtraceai-cli-api/versions/312bfc1148dc/schema)