Skip to main content
GET
List Praxis Shield threat incidents for the caller's managed institutions

Authorizations

x-access-token
string
header
required

JWT token passed in x-access-token header

Query Parameters

accountId
string

Filter incidents to the institutions belonging to this account. For non-super callers the account's institutions are intersected with the caller's managed (RAP-scoped) set — no overlap returns 403. For super callers the account's institutions are used directly (no overlap → empty result, not 403).

institutionId
string

Narrow to one institution (must be one the caller manages, else 403). When combined with accountId, the institution must belong to that account (else 403).

status
enum<string>

Filter by incident status. all shows everything (incl. terminal statuses); a specific status matches exactly; omitted hides terminal statuses (resolved, false_positive) by default.

Available options:
all,
open,
reviewing,
resolved,
false_positive,
escalated
severityMin
integer

Minimum severity (0-4)

Required range: 0 <= x <= 4
page
integer
default:0
limit
integer
default:50
Required range: 1 <= x <= 200

Response

Paginated incident list

success
boolean
total
integer
page
integer
limit
integer
incidents
object[]