Skip to main content
GET
Get an asset

Authorizations

Authorization
string
header
required

Access token from POST /oauth/token.

Path Parameters

id
string<uuid>
required

Response

Asset returned.

An inventory asset. Fields marked with a category are only set for assets in that category. For EMPLOYEE assets, id is the employee's id.

accountId
string

Cloud account id. CLOUD assets only.

Example:

"123456789012"

auditStatus
enum<string>
read-only

Audit status, as shown in the Secfix app: COMPLETE when every field the category needs for an audit is set, otherwise INCOMPLETE. Left out when Secfix hasn't computed it yet. Read-only.

Available options:
COMPLETE,
INCOMPLETE
Example:

"INCOMPLETE"

categoryKey
enum<string>

The asset's category key. For cloud assets it's the sub-type, such as CLOUD_QUEUE.

Available options:
CLOUD,
COMPUTER,
CUSTOM,
INFORMATION,
EMPLOYEE
Example:

"CLOUD"

classification
string

Data classification.

Example:

"CONFIDENTIAL"

createdAt
string<date-time>

When the asset was created (UTC).

Example:

"2026-01-15T09:30:00.000Z"

customIdentifier
string

Serial number or asset ID, shown in Secfix as ID/Serial No.: the provider's resource id for cloud assets, the serial number for computers, and free text for CUSTOM and INFORMATION assets. Not unique.

Example:

"i-0abc123def456"

dataStored
object

What data a CUSTOM or INFORMATION asset stores. Set it with dataStored on create or update.

description
string

Asset description.

Example:

"Primary production web server."

email
string

Employee's email address. Personal data. EMPLOYEE assets only.

Example:

"jane.doe@example.com"

externalAssetId
string

The asset's id in your system, as sent on create. Left out for other assets.

Example:

"CI-1042"

externalSource
string

The system the asset comes from, as sent on create. Only set on CUSTOM and INFORMATION assets created through the API.

Example:

"servicenow-cmdb"

id
string<uuid>

The asset's id (UUID).

Example:

"3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f"

lastCheckedAt
string<date-time>

When the asset was last checked for compliance (UTC). Left out for assets that aren't checked.

Example:

"2026-06-30T02:00:00.000Z"

name
string

Asset name.

Example:

"prod-web-01"

osVersion
string

Operating system and version. COMPUTER assets only.

Example:

"macOS 14.5"

ownerId
string<uuid>

Owner's employee id: the owner the Secfix app shows. The owner can be someone GET /v1/employees doesn't list, such as a service account or a person excluded from compliance, so looking them up there can return 404.

Example:

"a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d"

ownerSource
string

Where the owner assignment comes from.

Example:

"MANUAL"

ownerStatus
enum<string>
read-only

COMPLETE when the asset has an owner, otherwise INCOMPLETE. Set for every category. This isn't the audit status; see auditStatus. Read-only.

Available options:
COMPLETE,
INCOMPLETE
Example:

"COMPLETE"

region
string

Cloud region or location. CLOUD assets only.

Example:

"eu-central-1"

serialNumber
string

Hardware serial number. COMPUTER assets only.

Example:

"C02XY1234ABC"

tags
object[]

Tags on the asset.

type
string

Asset type within its category.

Example:

"SERVER"