curl --request GET \
--url https://api.secfix.com/v1/inventory/assets \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.secfix.com/v1/inventory/assets"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.secfix.com/v1/inventory/assets', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.secfix.com/v1/inventory/assets",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.secfix.com/v1/inventory/assets"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.secfix.com/v1/inventory/assets")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.secfix.com/v1/inventory/assets")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"pageInfo": {
"endCursor": "eyJjIjoiMjAyNi0wNi0zMFQwMjowMDowMFoiLCJyIjoiM2YxYzlhMmUifQ..",
"hasNextPage": true,
"totalCount": 137
},
"results": [
{
"accountId": "123456789012",
"categoryKey": "CLOUD",
"classification": "CONFIDENTIAL",
"completeStatus": "COMPLETE",
"createdAt": "2026-01-15T09:30:00.000Z",
"dataStored": {
"containsPatientData": false,
"containsUserData": true,
"userDataInfo": "Customer contact records"
},
"description": "Primary production web server.",
"email": "jane.doe@example.com",
"externalId": "i-0abc123def456",
"id": "3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"lastCheckedAt": "2026-06-30T02:00:00.000Z",
"name": "prod-web-01",
"osVersion": "macOS 14.5",
"ownerId": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
"ownerSource": "MANUAL",
"region": "eu-central-1",
"serialNumber": "C02XY1234ABC",
"tags": [
{
"key": "environment",
"readOnly": false,
"value": "production"
}
],
"type": "SERVER"
}
]
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}List assets (cursor-paginated, all categories).
Requires read access (all:read). HIDDEN and soft-deleted assets are excluded. Pass categoryKey to restrict to a single top-level category, subKey to restrict to a single granular sub-type (e.g. a CLOUD sub-type), hasOwner/hasDescription to filter on governance completeness, classification to restrict to one data classification, and completeStatus (COMPLETE/INCOMPLETE) as a friendly alias for hasOwner.
curl --request GET \
--url https://api.secfix.com/v1/inventory/assets \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.secfix.com/v1/inventory/assets"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.secfix.com/v1/inventory/assets', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.secfix.com/v1/inventory/assets",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.secfix.com/v1/inventory/assets"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.secfix.com/v1/inventory/assets")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.secfix.com/v1/inventory/assets")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"pageInfo": {
"endCursor": "eyJjIjoiMjAyNi0wNi0zMFQwMjowMDowMFoiLCJyIjoiM2YxYzlhMmUifQ..",
"hasNextPage": true,
"totalCount": 137
},
"results": [
{
"accountId": "123456789012",
"categoryKey": "CLOUD",
"classification": "CONFIDENTIAL",
"completeStatus": "COMPLETE",
"createdAt": "2026-01-15T09:30:00.000Z",
"dataStored": {
"containsPatientData": false,
"containsUserData": true,
"userDataInfo": "Customer contact records"
},
"description": "Primary production web server.",
"email": "jane.doe@example.com",
"externalId": "i-0abc123def456",
"id": "3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"lastCheckedAt": "2026-06-30T02:00:00.000Z",
"name": "prod-web-01",
"osVersion": "macOS 14.5",
"ownerId": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
"ownerSource": "MANUAL",
"region": "eu-central-1",
"serialNumber": "C02XY1234ABC",
"tags": [
{
"key": "environment",
"readOnly": false,
"value": "production"
}
],
"type": "SERVER"
}
]
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}{
"code": "not_found",
"detail": "No asset found for the given id.",
"instance": "/v1/inventory/assets/3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f",
"requestId": "req_01HZY8Q3M4N5P6R7S8T9V0W1X2",
"status": 404,
"title": "Not Found",
"type": "https://api.secfix.com/problems/not_found"
}Authorizations
Bearer access token obtained from /oauth/token.
Query Parameters
Restrict to a single top-level inventory category. Omit for all categories.
CLOUD, COMPUTER, CUSTOM, INFORMATION, EMPLOYEE Restrict to a single granular category sub-type (matches the key returned on AssetDto.categoryKey). Must be consistent with categoryKey when both are supplied.
CLOUD, CLOUD_AUTOSCALE_GROUPS, CLOUD_COMPUTE_INSTANCE, CLOUD_CONTAINER_REPOSITORY, CLOUD_DATA_WAREHOUSE, CLOUD_LOAD_BALANCER, CLOUD_NO_SQL_DATABASE, CLOUD_PAAS_APPS, CLOUD_QUEUE, CLOUD_RELATIONAL_DATABASE, CLOUD_STORAGE_BUCKET, CLOUD_OTHER, COMPUTER, CUSTOM, INFORMATION, EMPLOYEE Filter by whether the asset has an owner assigned. Omit to not filter.
Filter by whether the asset has a governance description. Omit to not filter.
Restrict to a single data classification. Omit to not filter.
CONFIDENTIAL, INTERNAL, PUBLIC, UNKNOWN Filter by governance completeness (a friendly alias for hasOwner): COMPLETE when an owner is assigned, else INCOMPLETE. Omit to not filter.
COMPLETE, INCOMPLETE