Skip to main content
GET
List threat events

Authorizations

X-API-Key
string
header
required

Domain-scoped API key. Generate and manage keys from the API Keys page in Settings.

Accepted in two forms:

  • X-API-Key: <key> header (preferred)
  • Authorization: Bearer <key> header (also accepted)

Query Parameters

email
string

Filter by user email or UPN.

tuid
string<uuid>

Filter by TOTAL user identifier. If combined with email, both must refer to the same user.

event_id
string<uuid>
category
string

Filter when the stored category array contains this value.

source
string

Exact match on stored source identifier (freeform).

created_after
string<date-time>
created_before
string<date-time>
page_size
integer
default:50
Required range: x <= 200
next_cursor
string<uuid>

Threat event id from the last item of the previous page.

Response

Cursor-paginated list of threat events

next_cursor
string | null
data
object[]