---
title: "Get"
method: GET
path: "/api/v1/ssf-receiver-streams/{id}"
tags: ["SSF Receiver"]
---

# Get

`GET /api/v1/ssf-receiver-streams/{id}`

Get retrieves a single SSF receiver stream by its ID.

## Path parameters

- `id` string, required — The ID of the SSF receiver stream to retrieve.

## Response `200`

SSFReceiverStreamServiceGetResponse contains the requested SSF receiver stream.

- C1ApiSsfReceiverV1SSFReceiverStreamServiceGetResponse — SSFReceiverStreamServiceGetResponse contains the requested SSF receiver stream.
  - `ssfReceiverStream` C1ApiSsfReceiverV1SSFReceiverStream — SSFReceiverStream is the public API representation. Secrets (push_auth_token, outbound credentials) are write-only. This message contains a oneof named outbound_auth. Only a single field of the following list may be set at a time: - outboundAuthBearer - outboundAuthOauth2
    - `accountDisabledAction` 'SSF_REVOCATION_ACTION_UNSPECIFIED' | 'SSF_REVOCATION_ACTION_REVOKE_ALL' | 'SSF_REVOCATION_ACTION_LOG_ONLY' — Action to take when an account-disabled event is received.
    - `createdAt` string, date-time
    - `credentialChangeAction` 'SSF_REVOCATION_ACTION_UNSPECIFIED' | 'SSF_REVOCATION_ACTION_REVOKE_ALL' | 'SSF_REVOCATION_ACTION_LOG_ONLY' — Action to take when a credential-change event is received.
    - `credentialCompromiseAction` 'SSF_REVOCATION_ACTION_UNSPECIFIED' | 'SSF_REVOCATION_ACTION_REVOKE_ALL' | 'SSF_REVOCATION_ACTION_LOG_ONLY' — Action to take when a credential-compromise event is received.
    - `deletedAt` string, date-time
    - `deliveryMethod` 'SSF_DELIVERY_METHOD_UNSPECIFIED' | 'SSF_DELIVERY_METHOD_PUSH' | 'SSF_DELIVERY_METHOD_POLL' — Controls whether events are received via push (transmitter POSTs to C1) or poll (C1 fetches from transmitter).
    - `description` string — Optional description of the stream's purpose or source.
    - `displayName` string — Human-readable name for the stream shown in the UI.
    - `enabled` boolean — Controls whether this stream actively processes incoming events. When false, events are ignored.
    - `eventTypesEnabled` string[], nullable — SSF/CAEP/RISC event type URIs that this stream is configured to accept.
    - `expectedAudience` string — Expected audience (aud) claim in incoming SETs. Optional.
    - `id` string — The unique identifier of this SSF receiver stream.
    - `issuerUrl` string — Upstream IdP identification.
    - `jwksUrl` string — The jwksUrl field.
    - `lastErrorAt` string, date-time
    - `lastErrorMessage` string — The lastErrorMessage field.
    - `lastVerifiedAt` string, date-time
    - `outboundAuthBearer` C1ApiSsfReceiverV1SSFOutboundAuthBearer, nullable — SSFOutboundAuthBearer is a static bearer token for outbound auth. Token is write-only: accepted on create/update, never returned.
      - `token` string — The token field.
    - `outboundAuthOauth2` C1ApiSsfReceiverV1SSFOutboundAuthOAuth2, nullable — SSFOutboundAuthOAuth2 uses OAuth2 client credentials for outbound auth. client_secret is write-only: accepted on create/update, never returned.
      - `clientId` string — The clientId field.
      - `clientSecret` string — The clientSecret field.
      - `scopes` string[], nullable — The scopes field.
      - `tokenUrl` string — The tokenUrl field.
    - `pollEndpointUrl` string — URL of the transmitter's poll endpoint where C1 fetches events from.
    - `pollInterval` string, duration
    - `pushAuthToken` string — Push auth token: write-only. Accepted on create, never returned in get/list.
    - `pushEndpointUrl` string — Push delivery: C1 generates a unique endpoint URL.
    - `sessionRevokedAction` 'SSF_REVOCATION_ACTION_UNSPECIFIED' | 'SSF_REVOCATION_ACTION_REVOKE_ALL' | 'SSF_REVOCATION_ACTION_LOG_ONLY' — Per-canonical-type action configuration. Event types without a config here default to LOG_ONLY. Action to take when a session-revoked event is received.
    - `updatedAt` string, date-time

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)