---
title: "List Finding Settings"
method: GET
path: "/api/v1/findings/settings"
tags: ["Finding Settings"]
---

# List Finding Settings

`GET /api/v1/findings/settings`

List every configurable finding type and whether detection is enabled.

## Response `200`

Successful response

- C1ApiFindingV1ListFindingSettingsResponse — The ListFindingSettingsResponse message.
  - `configured` boolean — True once the tenant has explicitly saved their finding-type settings at least once, regardless of whether any value differs from default. False means the tenant has never saved, so every entry in `list` is the shipped default, unconfirmed by the tenant.
  - `list` C1ApiFindingV1FindingTypeSetting[], nullable — One entry per configurable finding type, in FindingType declaration order. Custom findings are excluded: they arrive over CreateFinding rather than from a detector, so there is nothing to switch off.
    - `enabled` boolean — Whether the system detects this finding type. Types never configured read back their shipped default, which is per type rather than uniformly on.
    - `findingType` 'FINDING_TYPE_UNSPECIFIED' | 'FINDING_TYPE_SIMILAR_USERNAME_MATCH' | 'FINDING_TYPE_SERVICE_ACCOUNT_MISCLASSIFICATION' | 'FINDING_TYPE_NHI_UNOWNED' | 'FINDING_TYPE_SERVICE_ACCOUNT_UNOWNED' | 'FINDING_TYPE_DECOY_CREDENTIAL_USED' | 'FINDING_TYPE_CUSTOM' | 'FINDING_TYPE_CONNECTOR_ANOMALY_DETECTION_DISABLED' | 'FINDING_TYPE_DEACTIVATED_OWNER' | 'FINDING_TYPE_UNUSED_SECRET' | 'FINDING_TYPE_CREDENTIAL_PUBLICLY_EXPOSED' | 'FINDING_TYPE_DECOY_PUBLICLY_EXPOSED' | 'FINDING_TYPE_CREDENTIAL_EXPIRING' — The findingType field.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)