---
title: "Get external score history for one supplier"
method: GET
path: "/public/v1/scores/externals"
tags: ["Scores - Externals"]
---

# Get external score history for one supplier

`GET /public/v1/scores/externals`

Returns score history per event type for one supplier. Identify the supplier using query parameters such as supplier ID, customer ID, own site ID, or Prewave ID — the same identifiers you use elsewhere in the public supplier APIs.

**When to use this**
- Auditing what scores are stored for one supplier after an integration run.
- Showing score history in a customer-facing report or internal dashboard.
- Verifying that an upload landed as expected for a given supplier.

**Optional filters**
- `perspectiveId` — limit results to a specific perspective (defaults to your account’s default).
- `groupId` — narrow results to a score group when needed.

**If something goes wrong**
- **400** — No supplier identifier was provided, or more than one supplier matched. Add or refine identifiers (for example include `source`).
- **404** — No supplier matched the identifiers you sent.

**Required permission:** `access_public_internal_score`

## Query parameters

- `supplierId` string — Supplier ID of the target. Can be combined with customerId, ownId, and/or prewaveId.
- `customerId` string — Customer ID of the target. Can be combined with supplierId, ownId, and/or prewaveId.
- `ownId` string — Own site ID of the target. Can be combined with supplierId, customerId, and/or prewaveId.
- `prewaveId` integer — Prewave ID of the target. Can be combined with supplierId, customerId, and/or ownId.
- `source` string — Optional source system to filter by. Applies to supplierId, customerId, and ownId (not prewaveId).
- `perspectiveId` integer
- `groupId` integer

## Response `200`

Score history for the supplier that matched your identifiers.

- PublicExternalScoreResponse
  - `identifier` PublicExternalTargetIdentifier, required — Supplier site identifier. At least one lookup key (`supplierId`, `customerId`, `ownId`, or `prewaveId`) should be set; `source` optionally narrows text identifiers.
    - `supplierId` string, nullable — Supplier ID of the target. Can be combined with customerId, ownId, and/or prewaveId.
    - `customerId` string, nullable — Customer ID of the target. Can be combined with supplierId, ownId, and/or prewaveId.
    - `ownId` string, nullable — Own site ID of the target. Can be combined with supplierId, customerId, and/or prewaveId.
    - `prewaveId` integer, nullable — Prewave ID of the target. Can be combined with supplierId, customerId, and/or ownId.
    - `source` string, nullable — Optional source system to filter by. Applies to supplierId, customerId, and ownId (not prewaveId).
  - `scores` PublicExtScoreHistory[], required
    - `group` PublicInfotagGroup, required
      - `id` integer, required — Id of the infotag group
      - `name` string, required — Name of the infotag group
      - `sname` string, required — Short name/code of the infotag group
    - `eventTypeKey` string, required
    - `score` Score, required
      - `value` integer, required
      - `risk` 'NA' | 'No' | 'Low' | 'Mid' | 'High' | 'Critical', required
    - `comment` string, nullable
    - `updatedAt` string, date-time, required — Last update. Timestamp (ISO 8601 UTC)
    - `validFrom` string, date-time, nullable — Start of validity period. Timestamp (ISO 8601 UTC)
    - `validTo` string, date-time, nullable — End of validity period. Timestamp (ISO 8601 UTC)
    - `history` PublicExtScoreHistory[], required

## Other responses

- `400` — Supplier could not be identified uniquely — provide at least one identifier or narrow the match (for example with `source`).
- `403` — 403 Forbidden - Authentication or authorization failure. This status code is returned when: (1) the request lacks valid authentication credentials (missing or invalid X-Auth-Token header), or (2) the authenticated user does not have the required permission to access this resource.
- `404` — No supplier found for the identifiers provided, or you do not have access to that supplier.
- `429` — 429 Too Many Requests - API rate limit exceeded. The request has been rejected because the rate limit for this endpoint has been exceeded. Default rate limits: GET requests - 100 per 10 seconds, 500 per minute; POST/PUT/PATCH/DELETE requests - 20 per 10 seconds, 100 per minute. For increased access, please contact customer success.
- `500` — 500 Internal Server Error - An unexpected error occurred on the server. The request may or may not have been processed.

---

[API](https://skmtc.net/prewave/apis/public-prewave-api.md) · [All operations](https://skmtc.net/prewave/apis/public-prewave-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/prewave/public-prewave-api/revisions/466169815b78/schema)