docs

List assets

GET /assets

Scope asset:read

Requires the asset:read scope.

Example

curl "https://api.autociso.io/api/v1/assets" \
  -H "Authorization: Bearer <your-api-token>"

Response 200

{
  "data": [
    {
      "assetName": "Google Workspace",
      "createdAt": "2026-02-11T10:20:00Z",
      "criticality": "HIGH",
      "dataClassification": "CONFIDENTIAL",
      "id": "ast_1hfz2k8w0c7d",
      "kind": "SAAS",
      "ownerId": "empl_1hgyun41rx48",
      "supplierId": "sup_1hd8c2x7q0wn",
      "updatedAt": "2026-09-28T14:03:00Z"
    },
    {
      "assetName": "GitHub",
      "createdAt": "2026-02-11T10:21:00Z",
      "criticality": "CRITICAL",
      "id": "ast_1hfz2m3r9t5b",
      "kind": "SAAS",
      "ownerId": "empl_1hgyv08q3k2m",
      "updatedAt": "2026-10-02T08:47:00Z"
    }
  ],
  "error": null,
  "meta": {
    "limit": 25,
    "offset": 0,
    "total": 37
  }
}

Query parameters

  • limit integer
    Page size. minimum 1, maximum 100, default 25
  • offset integer
    Rows to skip (offset mode). Cannot be combined with cursor. minimum 0, maximum 10000, default 0
  • cursor string
    An opaque cursor taken from meta.nextCursor of the previous page (cursor mode). Valid for 24 hours and bound to the token and the query; do not parse or construct it.
  • sort[id] string
    Sort direction for id.
    "asc" | "desc"
  • sort[updatedAt] string
    Sort direction for updatedAt.
    "asc" | "desc"
  • filter[assetName][eq] string
    Filter assetName (eq).
  • filter[assetName][in] string
    Filter assetName (in). Comma-separated, at most 50 values.
  • filter[createdAt][gte] string (date-time)
    Filter createdAt (gte).
  • filter[createdAt][lt] string (date-time)
    Filter createdAt (lt).
  • filter[criticality][eq] string
    Filter criticality (eq).
  • filter[criticality][in] string
    Filter criticality (in). Comma-separated, at most 50 values.
  • filter[dataClassification][eq] string
    Filter dataClassification (eq).
  • filter[dataClassification][in] string
    Filter dataClassification (in). Comma-separated, at most 50 values.
  • filter[id][eq] string
    Filter id (eq).
  • filter[id][in] string
    Filter id (in). Comma-separated, at most 50 values.
  • filter[kind][eq] string
    Filter kind (eq).
  • filter[kind][in] string
    Filter kind (in). Comma-separated, at most 50 values.
  • filter[updatedAt][gte] string (date-time)
    Filter updatedAt (gte).
  • filter[updatedAt][lt] string (date-time)
    Filter updatedAt (lt).

Returns

The data field of the standard { data, error, meta } envelope:

An array of object:

  • assetName string required
    Asset name.
  • createdAt string (date-time) required
    Creation time (UTC).
  • criticality string required
    Business criticality.
  • dataClassification string
    Data classification, when set.
  • id string required
    Asset id (ast_).
  • kind string required
    COTS, IN_HOUSE, SAAS, OSS, HARDWARE or DOMAIN.
  • legacyId string
    Stored legacy id (24 hex), only on assets created before ast_ ids.
  • ownerId string
    Owning employee id (empl_), when set.
  • supplierId string
    Supplier id (sup_), when set.
  • updatedAt string (date-time) required
    Last modification time (UTC); the incremental-sync field.
  • No other fields.

Errors

Status Code Retry Meaning
400 - no The request is invalid.
401 - no The token is missing, malformed, expired or revoked.
402 - no The organisation’s plan does not include the feature this route needs.
403 - no The token may not use this route.
429 - yes Rate limit or row budget exceeded; retry after the time in Retry-After.
500 - no Unexpected server error.
503 - yes A dependency is temporarily unavailable; retry later.
Last reviewed: 2026-10-13

Was this page helpful?

Esc