---
title: "List access analyzer findings of the caller's organization"
url: https://hexelstudio.com/docs/api/ciam-iam/audit/findings
---

# List access analyzer findings of the caller's organization

**GET** `/audit/findings`

Needs iam:audit:read.

## Query parameters

- `status: optional string`

  Status filter

## Headers

- `Authorization: string`

  `Bearer <token>`.

## Returns

`200` OK (`array of AccessAnalyzerFinding`)

- `created_at: optional string`

- `description: optional string`

- `finding_type: optional string`

- `id: optional string`

- `metadata: optional array of integer`

- `organization_id: optional string`

- `recommendation: optional string`

- `resolved_at: optional string`

- `resolved_by_user_id: optional string`

- `resource_id: optional string`

- `resource_name: optional string`

- `resource_type: optional string`

- `scan_id: optional string`

- `severity: optional string`

- `status: optional string`

- `title: optional string`

## Example

```bash
curl --request GET \
  --url 'https://api.hexelstudio.com/v1/audit/findings' \
  --header "Authorization: Bearer $ACCESS_TOKEN"
```

### Response (200)

```json
[
  {
    "created_at": "2026-01-01T00:00:00Z",
    "description": "string",
    "finding_type": "string",
    "id": "string",
    "metadata": [
      0
    ],
    "organization_id": "string",
    "recommendation": "string",
    "resolved_at": "2026-01-01T00:00:00Z",
    "resolved_by_user_id": "string",
    "resource_id": "string",
    "resource_name": "string",
    "resource_type": "string",
    "scan_id": "string",
    "severity": "string",
    "status": "string",
    "title": "string"
  }
]
```