---
title: "List Exposures"
method: GET
path: "/projects/{project_id}/exposures"
tags: ["Exposures"]
---

# List Exposures

`GET /projects/{project_id}/exposures`

Retrieve a deduplicated, project-wide list of exposure signatures with affected-asset counts.

## Path parameters

- `project_id` string, required

## Query parameters

- `cursor` string — Opaque string provided in `next_cursor` of previous results
- `limit` integer — The number of exposures
- `filter_cve_id` string — Filter for asset or exposure tied to a vulnerability with the provided CVE. Example `CVE-2024-6387`.
- `filter_cvss_score_gte` number — Filter for asset or exposure tied to a vulnerability with the provided CVSS score range. Example `7.5`. You will generally just use the 'low' end of the range.
- `filter_cvss_score_lte` number — Filter for asset or exposure tied to a vulnerability with the provided CVSS score range. Example `7.5`. You will generally just use the 'low' end of the range.
- `filter_cwe_id` string — Filter for asset or exposure tied to a vulnerability associated with the provided CWE (see: https://cwe.mitre.org/). Example `CWE-79`.
- `filter_severity` 'unknown' | 'informational' | 'moderate' | 'critical' — Exposure severity level.
- `filter_severity_exact` 'unknown' | 'informational' | 'moderate' | 'critical' — Exposure severity level.
- `filter_severity_min` 'unknown' | 'informational' | 'moderate' | 'critical' — Exposure severity level.

## Response `200`

Successful Response

- ApiListResponseExposureSummary — Paginated list of exposure summaries for a project.
  - `data` ExposureSummary[], required
    - `signature` ExposureSignatureResponse, required — Attributes: name (str): remediation_steps (Union['ExposureSignaturePublicRemediationStepsType0', None]): static_references (list[str]): id (str): slug (str): description (Union[None, Unset, str]): long_description (Union[None, Unset, str]): classification (Union[Unset, ClassificationEnum]): signature_type (Union[Unset, SignatureType]): updated_at (Union[None, Unset, datetime.datetime]): added_at (Union[None, Unset, datetime.datetime]): asi_risk_score (Union[None, Unset, int]): Base risk score for the signature. The actual risk score may be higher Default: 15. rf_risk_score (Union[None, Unset, float]): hidden (Union[Unset, bool]): Default: False. last_genai_update (Union[None, Unset, datetime.datetime]): is_enhanced (Union[None, Unset, bool]): Default: False.
      - `id` string, required
      - `name` string, required
      - `description` string, nullable, required
      - `severity` 'unknown' | 'informational' | 'moderate' | 'critical', required — Exposure severity level.
      - `remediation_steps` object, nullable
      - `added_at` string, date-time, nullable — Date when this signature was added to ASI
      - `references` string[], nullable, required
      - `vulnerabilities` VulnerabilityPublic[], nullable
        - `name` string, required
        - `cve_id` string, nullable — The Common Vulnerabilities and Exposures (CVE) identifier for this vulnerability.
        - `slug` string, required — The unique identifier for this vulnerability
        - `cwe_ids` string[] — Common Weakness Enumeration (CWE) IDs associated with this vulnerability
        - `cvss_score` number, nullable, required
        - `cvss_metrics` string, nullable, required
        - `epss_score` number, nullable — Exploit Prediction Scoring System (EPPS) score for this vulnerability. May be out of date.
        - `references` string[], required
    - `asset_count` integer, required
  - `meta` ApiMeta, required — Response metadata including pagination, counts, and request parameters.
    - `params` object, nullable
    - `counts` ApiCount — Result count metadata.
      - `total` integer, nullable
      - `returned` integer, required
    - `pagination` PaginationResponse — Cursor-based pagination data in responses.
      - `next_cursor` string, nullable — An opaque value which should be passed as the `cursor` to retrieve the next page of results. If None or not present there are no remaining pages. This value should not be interpreted by the client.
      - `limit` integer — The number of items returned
      - `total` integer, nullable
      - `sort` array[], nullable — The sort order of the results
        - unknown[]
          - unknown
    - `request_id` string, nullable

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.net/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)