# Get Paginated Findings of a TOE
source: https://developer.mastercard.com/riskrecon-api/documentation/testing/findings-samples/retrve-fnd-smpl/index.md

Allows you to retrieve the details of all open findings discovered during the most recent analysis of a TOE.

## Pre-requisites {#pre-requisites}

Refer to the [Retrieve Paginated Findings of a TOE](https://developer.mastercard.com/riskrecon-api/documentation/use-cases/risk-assessment/findings/retrve-fnd-for-toe/index.md) use case.

## Request URL for Sandbox environment {#request-url-for-sandbox-environment}

    GET https://api.sandbox.riskrecon.com/v1/findings_paginated/{toe_id}

## Request URL for Production environment {#request-url-for-production-environment}

    GET https://api.riskrecon.com/v1/findings_paginated/{toe_id}

## Test Cases {#test-cases}

### Test Case: Success - Retrieve paginated findings of a TOE {#test-case-success---retrieve-paginated-findings-of-a-toe}

**Request**

Here is an example of a request made using a `curl` command.

```bash
curl -X 'GET' \
  'https://api.sandbox.riskrecon.com/v1/findings_paginated/09918d09-8d52-4e86-a3ec-5ef4d461e2ba' \
  -H 'accept: application/json'
  -H 'Authorization: valid_JWT_token'
```

**Response**

get:

```json
{
    "data": [
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "bednar.info",
                "finding_data_value": "admin login page",
                "finding_detail": "email",
                "finding_extra_data_value": "",
                "finding_id": "38c05ad57b6f4f7d99daa0d82c610e87",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "mcclure.com",
                "hosting_provider": "Frami, Hills and Konopelski",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "dns_hijacking_protection",
                "security_domain": "threat_intell",
                "severity": "high"
            },
            "id": "38c05ad57b6f4f7d99daa0d82c610e87",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "kohler.org",
                "finding_data_value": "software",
                "finding_detail": "email",
                "finding_extra_data_value": "",
                "finding_id": "b72f93bb097b46248558d264bd4d10cf",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "weimann.biz",
                "hosting_provider": "Marks-VonRueden",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "data_loss_6",
                "security_domain": "network_filtering",
                "severity": "high"
            },
            "id": "b72f93bb097b46248558d264bd4d10cf",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "kunde.com",
                "finding_data_value": "shared_hosting",
                "finding_detail": "external",
                "finding_extra_data_value": "",
                "finding_id": "320b450e74d748429384d70c964d3a2d",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "kohler.com",
                "hosting_provider": "Macejkovic-Hessel",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "data_loss_6",
                "security_domain": "web_app_security",
                "severity": "high"
            },
            "id": "320b450e74d748429384d70c964d3a2d",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "bradtke.name",
                "finding_data_value": "external",
                "finding_detail": "dns",
                "finding_extra_data_value": "",
                "finding_id": "5fb7b006c38948fd832c345f1f0e6f9c",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "mueller.info",
                "hosting_provider": "Harvey, Langworth and Osinski",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "unencrypted_sensitive_communications",
                "security_domain": "network_filtering",
                "severity": "high"
            },
            "id": "5fb7b006c38948fd832c345f1f0e6f9c",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "daugherty.name",
                "finding_data_value": "external",
                "finding_detail": "internal",
                "finding_extra_data_value": "",
                "finding_id": "936d22a80a2c4769899e297353efb921",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "douglas.org",
                "hosting_provider": "Murazik and Sons",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "patching_app_server",
                "security_domain": "web_encryption",
                "severity": "high"
            },
            "id": "936d22a80a2c4769899e297353efb921",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "conroy.com",
                "finding_data_value": "web",
                "finding_detail": "email",
                "finding_extra_data_value": "",
                "finding_id": "9fade06c241c4bebaad0bec0ca158116",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "ernser.net",
                "hosting_provider": "Reynolds, Ruecker and Smith",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "unencrypted_sensitive_communications",
                "security_domain": "governance",
                "severity": "high"
            },
            "id": "9fade06c241c4bebaad0bec0ca158116",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "zulauf.info",
                "finding_data_value": "software",
                "finding_detail": "external",
                "finding_extra_data_value": "",
                "finding_id": "cb36e147f23f46b2a89be08d48373cf7",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "macejkovic.info",
                "hosting_provider": "Deckow Inc",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "patching_os",
                "security_domain": "system_hosting",
                "severity": "high"
            },
            "id": "cb36e147f23f46b2a89be08d48373cf7",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "stark.biz",
                "finding_data_value": "software",
                "finding_detail": "network services",
                "finding_extra_data_value": "",
                "finding_id": "4b408b44fc504c4faed8e7b290e94cf3",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "mosciski.name",
                "hosting_provider": "Reilly LLC",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "data_loss_36plus",
                "security_domain": "governance",
                "severity": "high"
            },
            "id": "4b408b44fc504c4faed8e7b290e94cf3",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "strosin.com",
                "finding_data_value": "web",
                "finding_detail": "software",
                "finding_extra_data_value": "",
                "finding_id": "2898a127ee214702a433579e2ebd8c20",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "zboncak.biz",
                "hosting_provider": "Bode-Halvorson",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "threatintel_hostile_host_hacking",
                "security_domain": "dns_security",
                "severity": "high"
            },
            "id": "2898a127ee214702a433579e2ebd8c20",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "bailey.com",
                "finding_data_value": "network services",
                "finding_detail": "external",
                "finding_extra_data_value": "",
                "finding_id": "dbc2f778b57f49ac895acd8a16e6171f",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "robel.org",
                "hosting_provider": "Bins and Sons",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "iot_devices",
                "security_domain": "dns_security",
                "severity": "high"
            },
            "id": "dbc2f778b57f49ac895acd8a16e6171f",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "oberbrunner.net",
                "finding_data_value": "email",
                "finding_detail": "software",
                "finding_extra_data_value": "",
                "finding_id": "a0703b7d53114653814cbd67542c4c80",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "koepp.com",
                "hosting_provider": "Jaskolski, Dare and White",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "web_encryption_subject",
                "security_domain": "system_hosting",
                "severity": "high"
            },
            "id": "a0703b7d53114653814cbd67542c4c80",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "ernser.info",
                "finding_data_value": "dns",
                "finding_detail": "external",
                "finding_extra_data_value": "",
                "finding_id": "cc5d4eb1ada643dd9853c4fa2b5d2adc",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "bashirian.info",
                "hosting_provider": "Kuhlman Ltd",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "data_loss_36",
                "security_domain": "email_security",
                "severity": "high"
            },
            "id": "cc5d4eb1ada643dd9853c4fa2b5d2adc",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "farrell.biz",
                "finding_data_value": "email",
                "finding_detail": "certificate",
                "finding_extra_data_value": "",
                "finding_id": "a956e0c37df84a2da2b8a981fc5c8ae8",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "kessler.com",
                "hosting_provider": "Zemlak, Kris and Stroman",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "email_encryption_enabled",
                "security_domain": "software_patching",
                "severity": "high"
            },
            "id": "a956e0c37df84a2da2b8a981fc5c8ae8",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "muller.name",
                "finding_data_value": "internal",
                "finding_detail": "dns",
                "finding_extra_data_value": "",
                "finding_id": "2f37a67e73e2404882484dbd6ba54dac",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "bosco.org",
                "hosting_provider": "Nienow Ltd",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "shared_hosting",
                "security_domain": "governance",
                "severity": "high"
            },
            "id": "2f37a67e73e2404882484dbd6ba54dac",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "huel.info",
                "finding_data_value": "dns",
                "finding_detail": "admin login page",
                "finding_extra_data_value": "",
                "finding_id": "95551b2cf02140319b463f35a2e5d588",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "thompson.net",
                "hosting_provider": "Trantow LLC",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "threatintel_cc_server",
                "security_domain": "system_hosting",
                "severity": "high"
            },
            "id": "95551b2cf02140319b463f35a2e5d588",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "satterfield.com",
                "finding_data_value": "certificate",
                "finding_detail": "web",
                "finding_extra_data_value": "",
                "finding_id": "ad43ce546e6b4b14aa99d9553cd2da73",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "lockman.biz",
                "hosting_provider": "Bosco, D'Amore and Spencer",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "hosting_countries",
                "security_domain": "email_security",
                "severity": "high"
            },
            "id": "ad43ce546e6b4b14aa99d9553cd2da73",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "quigley.net",
                "finding_data_value": "admin login page",
                "finding_detail": "software",
                "finding_extra_data_value": "",
                "finding_id": "ecc640e4fbc648059410807fb5f809cc",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "dickens.info",
                "hosting_provider": "Gulgowski Inc",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "threatintel_cc_server",
                "security_domain": "web_app_security",
                "severity": "high"
            },
            "id": "ecc640e4fbc648059410807fb5f809cc",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "lockman.name",
                "finding_data_value": "email",
                "finding_detail": "internal",
                "finding_extra_data_value": "",
                "finding_id": "61627c6603474d5c9f141964d31a006b",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "west.name",
                "hosting_provider": "Kerluke-Schaden",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "threatintel_hostile_host_hacking",
                "security_domain": "defensibility",
                "severity": "high"
            },
            "id": "61627c6603474d5c9f141964d31a006b",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "deckow.biz",
                "finding_data_value": "software",
                "finding_detail": "internal",
                "finding_extra_data_value": "",
                "finding_id": "b662679255564750bc7c0771978575e3",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "zulauf.name",
                "hosting_provider": "Hahn, Stracke and Zemlak",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "threatintel_other",
                "security_domain": "system_hosting",
                "severity": "high"
            },
            "id": "b662679255564750bc7c0771978575e3",
            "type": "finding"
        },
        {
            "attributes": {
                "analysis_id": "9420400",
                "asset_value": "high",
                "domain_name": "fahey.name",
                "finding_data_value": "network services",
                "finding_detail": "network services",
                "finding_extra_data_value": "",
                "finding_id": "51c4b20801a246d78079ce0e346ec1f6",
                "first_seen": "2022-07-08T19:02:24",
                "host_name": "bayer.org",
                "hosting_provider": "Barton Inc",
                "ip_address": "178.17.172.146",
                "last_seen": "2022-07-08T19:02:24",
                "priority": 2,
                "security_criteria": "patching_app_server",
                "security_domain": "software_patching",
                "severity": "high"
            },
            "id": "51c4b20801a246d78079ce0e346ec1f6",
            "type": "finding"
        }
    ],
    "meta": {
        "current_page": 1,
        "next_page": 2,
        "prev_page": null,
        "total_count": 28595,
        "total_pages": 1430
    }
}
```

### Test Case: Fail - Page number provided in words in pagination filter {#test-case-fail---page-number-provided-in-words-in-pagination-filter}

**Request**

Here is an example of a request using a `curl` command where the page number in the pagination filter is provided in words instead of as an integer value.

```bash
curl -X 'GET' \
  'https://api.sandbox.riskrecon.com/v1/findings_paginated/09918d09-8d52-4e86-a3ec-5ef4d461e2ba?page=ten' \
  -H 'accept: application/json' \
  -H 'Authorization: valid_JWT_token'
```

**Response**

HTTP Error response 400

```json
{
    "Errors": {
        "Error": [
            {
                "Description": "Bad Request",
                "Details": "page: is invalid",
                "ReasonCode": "BAD_REQUEST",
                "Recoverable": false,
                "Source": "RISKRECON_API"
            }
        ]
    }
}
```

### Test Case: Fail - Negative per page value in pagination filter {#test-case-fail---negative-per-page-value-in-pagination-filter}

**Request**

Here is an example of a request using a `curl` command where the per page value in the pagination filter is -15.

```bash
curl -X 'GET' \
  'https://api.sandbox.riskrecon.com/v1/findings_paginated/09918d09-8d52-4e86-a3ec-5ef4d461e2ba?per_page=-15' \
  -H 'accept: application/json' \
  -H 'Authorization: valid_JWT_token'
```

**Response**

HTTP Error response 400

```json
{
    "Errors": {
        "Error": [
            {
                "Description": "Bad Request",
                "Details": "per_page: must be greater than 1",
                "ReasonCode": "BAD_REQUEST",
                "Recoverable": false,
                "Source": "RISKRECON_API"
            }
        ]
    }
}
```