Skip to main content
GET
List finding filter facets

Authorizations

Authorization
string
header
required

A Tolmo API token, sent as Authorization: Bearer <token>. Either a user token (usr_tok.*, minted by tolmo auth login, scoped to your own permissions) or an org API token created in the Tolmo app, for CI and automation.

Path Parameters

orgSlug
string
required

Query Parameters

status
enum<string>
Available options:
open,
in_review,
closed,
acknowledged,
false_positive,
canceled
severity
enum<string>
Available options:
critical,
high,
medium,
low,
info
statuses
Available options:
open,
in_review,
closed,
acknowledged,
false_positive,
canceled
statusExcluded
Available options:
open,
in_review,
closed,
acknowledged,
false_positive,
canceled
severities
Available options:
critical,
high,
medium,
low,
info
severityExcluded
Available options:
critical,
high,
medium,
low,
info
source
sourceExcluded
agent
agentExcluded
q
string
Maximum string length: 512
createdAfter
string
Pattern: ^\d{4}-\d{2}-\d{2}$
createdBefore
string
Pattern: ^\d{4}-\d{2}-\d{2}$
updatedAfter
string
Pattern: ^\d{4}-\d{2}-\d{2}$
updatedBefore
string
Pattern: ^\d{4}-\d{2}-\d{2}$
includeDrafts
boolean
draftsOnly
boolean

Response

Default Response

severities
object[]
required
statuses
object[]
required
sources
object[]
required
agents
object[]
required
createdBy
object[]
required
visibilities
object[]
required
categories
object[]
required
owasps
object[]
required
impactCategories
object[]
required
fixPriorities
object[]
required