SpecifyDocs

Security decision summary

/v1/security/decision-summary

Signed-in sessionLaunch key product.securityOperation security_decision_summary

People see the devices that run their agents, their security posture and the events those devices report.

Query parameters

expectedAuthorizationVersionstring
scope"organization" | "self"
deviceIdstring
basis"occurred" | "received"Required
startAtnumberRequired
endAtnumberRequired
receivedThroughnumber
cursorstring
limitnumber

Returns

contextobjectRequired
permission"not_permitted" | "permitted"Required
itemsnull | object[]Required
countobjectRequired
pagenull | objectRequired
freshnessobjectRequired

Errors

400, 401, 403, 404, 409, 429 and 503 return {"error": {"code", "message", "correlationId"}}. A call without a valid credential gets 401 before its input is checked, and so does an address that is not an operation: 404 and 400 come only once the credential is accepted. Public operations answer without one.