# Retrieve Action Plan Vendor Status Summary Counts
source: https://developer.mastercard.com/riskrecon-api/documentation/use-cases/risk-mgmt-issue-rmdfn/actionplan/actpln-vend-sts-summ-cnts/index.md

## Overview {#overview}

Each issue in an [action plan](https://developer.mastercard.com/riskrecon-api/documentation/glossary/index.md#action-plan) has a status, for example, No Action, Investigating, Compensating Control, False Positive, Fixed, Fixing, and Not Fixed. The issues are automatically assigned the **No Action** status by default when you first share an action plan with your vendor.

Vendors can provide status updates while working through the issues in the action plan through their vendor portal. The `GET Vendor Status Summary Counts` endpoint allows you to track, at a glance, the current issue count for each status. This data provides a high level view of the vendor's status updates, for example, how many issues have been fixed, or will not be fixed. It, thus, helps to categorically measure the vendor's progress through various stages in addressing the issues and ensure that they are responding in a timely and correct manner.

You must provide the `toe_id` for a given action plan in the API request to retrieve the vendor status summary counts. The API returns the following in the response:

* **Investigating**: This gives a count of issues that are under investigation by the vendor.
* **Compensating Control**: This gives a count of issues that the vendor has marked as having adequate compensating controls in place.
* **False Positive**: This gives a count of issues that the vendor has identified as false positive.
* **Not Fixing**: This gives a count of issues that the vendor has decided to not fix in the action plan.
* **Fixing**: This gives a count of issues that the vendor is currently remediating.
* **Fixed**: This gives a count of issues that the vendor has marked as fixed.

<br />

A pictorial representation of the vendor status summary, similar to the following image, as seen in the \*\*Action Plan Issue Tracking\*\* tab of the \*\*RiskRecon web portal\*\* is shown here:

![](https://static.developer.mastercard.com/content/riskrecon-api/uploads/action-plan-vendor-status-summary1.png)

## Sequence Diagram {#sequence-diagram}

The following diagram shows how to retrieve an action plan vendor status summary counts for a TOE:
Diagram retrieve-vendor-status-summary-counts

## Execution Steps {#execution-steps}

The following steps describe how to retrieve an action plan vendor status summary counts for a TOE:

1. The user sends a `GET` request to retrieve the action plan vendor status summary counts and puts the `toe_id` as the input parameter.
2. RiskRecon provides the action plan vendor status summary counts.

## Sample Request and Response {#sample-request-and-response}

For a sample response for this API, visit [Get Action Plan Vendor Status Summary Counts](https://developer.mastercard.com/riskrecon-api/documentation/testing/actionplan-samples/actnpln-vend-sts-smpl/index.md).

## Use Case Example {#use-case-example}

The [Retrieve the statuswise counts of vendor issues](https://developer.mastercard.com/riskrecon-api/documentation/use-cases/risk-mgmt-issue-rmdfn/actionplan/actpln-vend-sts-summ-cnts/index.md#retrieve-the-statuswise-counts-of-vendor-issues) use case discusses how you can use the `GET Vendor Status Summary Counts` endpoint to retrieve the count of issues under each status.

### Retrieve the statuswise counts of vendor issues {#retrieve-the-statuswise-counts-of-vendor-issues}

The user has shared an action plan with 215 issues with a critical vendor, so the vendor may address and remedy the found security risks. The issues had the 'No Action' status by default when the vendor received them. The vendor has begun addressing the issues in the action plan and when the user executes the `GET Vendor Status Summary Counts` endpoint, it finds in the response that the vendor has already marked 20 issues as fixed since they are tagged with the 'Fixed' status. Similarly, the vendor is in the process of Fixing 20 issues and has decided to Not Fix 10 issues. Also, the vendor is now Investigating 20 issues and has marked Compensating Controls for another 20 more issues. The vendor has also analysed 30 issues as False Positive, which will be reviewed by the RiskRecon technical support team.

## Endpoint {#endpoint}


API Reference: `GET /v1/action_plan/vendor_status_summary_counts/{toe_id}`