Skip to main content
GET
List findings

Authorizations

Authorization
string
header
required

A Tolmo API token, sent as Authorization: Bearer <token>. Either a user token (usr_tok.*, minted by tolmo auth login, scoped to your own permissions) or an org API token created in the Tolmo app, for CI and automation.

Path Parameters

orgSlug
string
required

Query Parameters

q
string
Required string length: 1 - 512
origin
string
Required string length: 1 - 255
severity
string
Required string length: 1 - 64
state
string
Required string length: 1 - 512
retest
string
Required string length: 1 - 128
rule
string
Required string length: 1 - 512
status
string
Required string length: 1 - 256
providerStatus
string
Required string length: 1 - 64
verdict
enum<string>
Available options:
tolmo,
none
scope
enum<string>
default:all
Available options:
open,
all
includeInfo
boolean
draftsOnly
boolean
query
string
Required string length: 1 - 4096
page
integer
Required range: 1 <= x <= 500
pageSize
integer
Required range: 1 <= x <= 100
cursor
string
Required string length: 1 - 2048
limit
integer
Required range: 1 <= x <= 100

Response

Default Response

items
object[]
required
total
integer
required
Required range: 0 <= x <= 9007199254740991
page
integer
required
Required range: 0 < x <= 9007199254740991
pageSize
integer
required
Required range: 0 < x <= 9007199254740991
facets
object
required

Cross-filtered facets for page mode; all arrays are empty in cursor mode. The state/retest/status/providerStatus/verdict facets ignore scope, so the pickers still show what the default view is hiding.

scope
enum<string>
required
Available options:
open,
all
includeInfo
boolean
required
hiddenInformational
integer | null
required
Required range: 0 <= x <= 9007199254740991
nextCursor
string | null
required