Skip to main content
GET
Get a finding

Authorizations

Authorization
string
header
required

A Tolmo API token, sent as Authorization: Bearer <token>. Either a user token (usr_tok.*, minted by tolmo auth login, scoped to your own permissions) or an org API token created in the Tolmo app, for CI and automation.

Path Parameters

orgSlug
string
required
findingId
string
required

Response

Default Response

id
string
required
orgId
string
required
agentId
string | null
required
sourceAgentName
string | null
required
isManual
boolean
required
shownVerbatim
boolean
required
severity
string
required
title
string
required
description
string
required
resourceType
string | null
required
resourceName
string | null
required
resourceArn
string | null
required
resourceKey
string | null
required
targetUrl
string | null
required
category
string | null
required
tags
string[]
required
cwe
string | null
required
owasp
string | null
required
status
string
required
visibility
string
required
taskIds
any
required
tickets
object[]
required
acknowledgedAt
string | null
required
acknowledgedBy
string | null
required
falsePositiveReason
string | null
required
closedReason
string | null
required
sourceName
string
required
ingestionStatus
string | null
required
ingestedAt
string | null
required
createdAt
string
required
updatedAt
string
required
attachmentCount
integer
Required range: 0 <= x <= 9007199254740991
sourceSecret
object | null