List remediation targets

GET

/v1/remediation-targets

Code sample: cURL

curl --request GET \
  --url 'https://api.furl.ai/v1/remediation-targets' \
  --header 'Authorization: Bearer YOUR_API_KEY'

Returns a paginated list of remediation targets in the organization.

Authorizations

• bearerAuth

Parameters

Query Parameters

limit

integer

default: 50 >= 1 <= 100

Maximum number of targets to return.

offset

integer

0

Number of targets to skip for pagination.

endpointId

string format: uuid

Filter by endpoint ID.

targetType

string

Allowed values: software managed_package dependency os_patch configuration service

Filter by target type.

status

string

Allowed values: active stale resolved

Filter by target status.

Responses

200

Paginated list of remediation targets.

Media typeapplication/json

object

data

required

Data

The list of remediation targets.

Array<object>

Remediation Target

An actionable remediation target discovered on an endpoint.

object

id

required

ID

Unique identifier for the remediation target.

string format: uuid

endpoint_id

required

Endpoint ID

The endpoint where this target was discovered.

string format: uuid

nullable

target_type

required

Target Type

The type of remediation target.

string

Allowed values: software managed_package dependency os_patch configuration service

vendor

Vendor

The vendor of the target (e.g., software vendor).

string

nullable

product

Product

The product name of the target.

string

nullable

version

Version

The version of the target.

string

nullable

install_path

Install Path

The installation path (for software targets).

string

nullable

package_name

Package Name

The package name (for package manager targets).

string

nullable

package_manager

Package Manager

The package manager (e.g., “brew”, “apt”, “winget”).

string

nullable

status

required

Status

The lifecycle status of the remediation target.

string

Allowed values: active stale resolved

source

required

Source

The source that discovered this target.

string

associated_cves

required

Associated CVEs

List of CVE identifiers associated with this target.

Array<string>

highest_cvss_score

required

Highest CVSS Score

The highest CVSS score from 0 to 10 among this target’s linked findings with a non-null finding reference. Closed findings and findings of any type contribute. Unlike highest_epss_score, this field is not restricted to open vulnerability findings. Null when no linked finding with a reference carries CVSS.

number format: double

nullable <= 10

highest_epss_score

required

Highest EPSS Score

The highest EPSS score among this target’s open vulnerability findings, as the published 0-1 probability. EPSS is the probability that a CVE is exploited in the wild. Null when no open finding’s CVE carries a published score, which is not the same as a score of 0. Unlike highest_cvss_score, closed findings and findings of other types do not contribute.

number format: double

nullable <= 1

highest_epss_percentile

required

Highest EPSS Percentile

The highest EPSS percentile among this target’s open vulnerability findings, as the published 0-1 rank against the rest of the scored corpus. A percentile of 0.9 means the CVE scores at or above 90% of all scored CVEs. Null when no open finding’s CVE carries a published percentile. This always comes from the same finding as highest_epss_score, because percentile is a rank of score. It uses the same open-vulnerability-finding population as highest_epss_score, not the wider population behind highest_cvss_score.

number format: double

nullable <= 1

created_at

required

Created At

When this target was created.

string format: date-time

updated_at

required

Updated At

When this target was last updated.

string format: date-time

total

required

Total

Total number of targets matching the filters.

integer

limit

required

Limit

Page size used.

integer

offset

required

Offset

Offset used.

integer

Example

{
  "data": [
    {
      "target_type": "software",
      "status": "active"
    }
  ]
}

401

Missing or invalid API key.

Media typeapplication/json

object

error

required

Human-readable error message.

string

Example^generated

{
  "error": "example"
}

500

Internal server error.

Media typeapplication/json

object

error

required

Human-readable error message.

string

Example^generated

{
  "error": "example"
}