---
title: ":: Legacy Route :: This resource returns a list of findings for latest analysis for a given TOE."
method: GET
path: "/v1/findings/{toe_id}"
tags: ["Findings"]
---

# :: Legacy Route :: This resource returns a list of findings for latest analysis for a given TOE.

`GET /v1/findings/{toe_id}`

::Legacy Route please use findings_paginated:: This use case describes how the Findings API is used to retrieve a list of findings for the latest analysis for a TOE. The toe_id is passed in the API request. In this scenario, all findings for that TOE are returned in the response.
To limit or filter the data returned in the response, you can use various parameters in the API request:
* Filter by an asset value: You can use the asset_value parameter to search for findings with high, medium, or low asset value.
* Filter by severity: You can use the severity parameter to search for findings with high, medium, or low severity.
* Filter by asset value and severity: You can use asset_value and severity parameters to search for findings with high, medium, or low asset value and severity.
* Filter by multiple asset values: You can use the asset_value parameter multiple times to search for findings with multiple asset values.

## Path parameters

- `toe_id` string, required

## Query parameters

- `risk_policy` boolean
- `security_domain` string
- `security_criteria` string
- `asset_value[]` string[]
- `asset_value_numeric[]` string[]
- `priority[]` integer[]
- `severity[]` string[]

## Response `200`

OK

- Finding[] — A collection of Findings for a given analysis. For V2, this schema is a bit misleading since swagger doesn't currently provide a way to describe streaming Newline delimited JSON responses. However, that is what all of these responses are. We were having issues with timeouts and streaming made more sense for various reasons on larger analyses.
  - `country_iso_code` string
  - `first_seen` string
  - `tech_country` string
  - `shared_ip` string
  - `registrant_street` string
  - `security_criteria` string
  - `continent_code` string
  - `registrar_expire_date` string
  - `registrar_abuse_phone` string
  - `tech_street` string
  - `state_name` string
  - `finding_extra_data_value` string
  - `toe_id` string
  - `finding_data_value` string
  - `service` string
  - `is_web` string
  - `admin_org` string
  - `industry` string
  - `longitude` string
  - `registrar` string
  - `severity` string
  - `hosting_type` string
  - `admin_phone_ext` string
  - `admin_country` string
  - `registrant_email` string
  - `record_load_timestamp` string
  - `admin_name` string
  - `asset_value` string
  - `admin_zip` string
  - `auto_status` string
  - `finding_context` string
  - `tech_zip` string
  - `form_field_types_detected` string
  - `admin_city` string
  - `finding_id` string
  - `registrant_country` string
  - `analysis_id` string
  - `host_name` string
  - `registrar_iana` string
  - `finding` string
  - `registrar_abuse_email` string
  - `expires_on` string
  - `registrar_id` string
  - `tech_org` string
  - `analyst_status` string
  - `ip_address` string
  - `tech_email` string
  - `finding_detail` string
  - `state_abbrev` string
  - `admin_phone` string
  - `domain_name` string
  - `postal_code` string
  - `vendor` string
  - `security_domain` string
  - `registrant_phone` string
  - `registrant_name` string
  - `finding_type` string
  - `latitude` string
  - `hosting_provider` string
  - `priority` string
  - `last_seen` string
  - `country_name` string
  - `false_positive` string
  - `registrant_org` string
  - `registrant_phone_ext` string
  - `finding_auto_comments` string
  - `scan` string
  - `tech_phone` string
  - `name_server` string
  - `tech_city` string
  - `tech_name` string
  - `admin_street` string
  - `auth_detected` string
  - `admin_email` string
  - `continent_name` string
  - `finding_subtype` string
  - `finding_data_description` string
  - `severity_numeric` string
  - `registry_tech_id` string
  - `metro_code` string
  - `asset_value_numeric` string
  - `registrant_zip` string
  - `city_name` string
  - `registrant_city` string
  - `who_should_fix_it` string
  - `support_site` string
  - `how_to_fix_it` string

## Other responses

- `401` — Authentication information was missing or invalid or the user is not authorized to access resource or perform the associated action.
- `404` — The URI didn't match an existing resource.

---

[API](https://skmtc.net/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.net/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)