# List findings

Endpoint: GET /v1/findings
Version: v1
Security: x-api-key

## Query parameters:

  - `state` (string)
    Filter by finding state.

  - `type` (string)
    Filter by the type of finding.

  - `employeeId` (string)
    Filter by the employee associated with the finding.

  - `appType` (string)
    Filter by the app that is associated with the finding.

  - `accountId` (string)
    Filter by the account that is associated with the finding.

  - `passwordId` (string)
    Filter by the password identifier that is associated with the finding.

  - `creationTimestampAfter` (string)
    Filter by when the finding was first observed - start time. This is a UNIX timestamp (in seconds).

  - `creationTimestampBefore` (integer)
    Filter by when the finding was first observed - end time. This is a UNIX timestamp (in seconds).

  - `limit` (integer)
    Used for pagination. Number of objects to return.

  - `offset` (integer)
    Used for pagination. Number of objects to skip. Cannot be set when `nextToken` is also set.

  - `nextToken` (string)
    Used for pagination. Token to be used for the next request. Cannot be set when `offset` is also set.

## Response 200 fields (application/json):

  - `result` (array)

  - `result.id` (string)
    Unique identifier for the finding
    Example: d6a32ba5-0532-4a66-8137-48cdf409c972

  - `result.type` (string)
    The type of finding
    Enum: "MFA_NOT_REGISTERED", "REUSED_PASSWORD", "SHARED_ACCOUNT", "UNUSED_THIRD_PARTY_APP", "WEAK_PASSWORD", "LEAKED_PASSWORD", "PASSWORD_MANAGER_NOT_USED", "STOLEN_CREDENTIALS"

  - `result.state` (string)
    The state of the finding
    Enum: "OPEN", "RESOLVED"

  - `result.employeeId` (string)
    ID of the employee this finding is linked to, `null` if finding is not linked to an employee.
    Example: 379ac7ea-ff2a-42ef-af37-06d2020dc46a

  - `result.passwordId` (string)
    ID of the password this finding is linked to, `null` if finding is not linked to a password.
    Example: c4a045a1-5331-4714-af83-6a361e98960d

  - `result.accountId` (string)
    ID of the account this finding is linked to, `null` if finding is not linked to an account.

  - `result.appType` (string)
    The type of app this finding is linked to, `null` if finding is not linked to an app.
    Example: PUSH_SECURITY

  - `result.appId` (string)
    ID of the app this finding is linked to, `null` if finding is not linked to an app.
    Example: 2a2197de-ad2c-47e4-8dcb-fb0f04cf83e0

  - `result.weakPasswordReasons` (array)
    Reasons a password is weak, `null` if not a WEAK_PASSWORD finding.

  - `result.creationTimestamp` (integer)
    When this finding was first observed, formatted as a UNIX timestamp (in seconds)
    Example: 1698064423

  - `paging` (object)

  - `paging.moreResults` (boolean)
    Whether there are more results available
    Example: true

  - `paging.next` (string)
    Start of the next page that can be used as the `offset` for the next request
    Example: 501

  - `paging.nextToken` (string)
    Start of the next page that can be used as the `nextToken` for the next request.
    Example: 0b9972aa-fe8d-4095-82d3-2e13cf3cfd43