> ## Documentation Index > Fetch the complete documentation index at: https://developer.secfix.com/llms.txt > Use this file to discover all available pages before exploring further. # List assets (cursor-paginated, all categories). > Requires the inventory:read scope. HIDDEN and soft-deleted assets are excluded. Pass categoryKey to restrict to a single top-level category, subKey to restrict to a single granular sub-type (e.g. a CLOUD sub-type), hasOwner/hasDescription to filter on governance completeness, classification to restrict to one data classification, and completeStatus (COMPLETE/INCOMPLETE) as a friendly alias for hasOwner. ## OpenAPI ````yaml /api-reference/openapi.yaml get /v1/inventory/assets openapi: 3.0.1 info: title: Secfix Public API description: >- Machine-to-machine API for the Secfix compliance platform. Authenticate with the OAuth 2.0 client_credentials grant via POST /oauth/token, then call /v1 endpoints with the bearer access token. Errors follow RFC 7807 (application/problem+json) with stable code strings; lists use opaque cursor pagination. contact: name: Secfix Support url: https://secfix.com email: support@secfix.com license: name: Proprietary url: https://secfix.com/license version: 1.0.0 servers: - url: https://api.secfix.com description: Production security: - bearerAuth: [] tags: - name: Health description: Service liveness. - name: Inventory description: List and govern assets across all categories. - name: OAuth description: Token endpoint for OAuth 2.0 client-credentials authentication. - name: Computers description: Read-only monitored computers with device compliance posture. paths: /v1/inventory/assets: get: tags: - Inventory summary: List assets (cursor-paginated, all categories). description: >- Requires the inventory:read scope. HIDDEN and soft-deleted assets are excluded. Pass categoryKey to restrict to a single top-level category, subKey to restrict to a single granular sub-type (e.g. a CLOUD sub-type), hasOwner/hasDescription to filter on governance completeness, classification to restrict to one data classification, and completeStatus (COMPLETE/INCOMPLETE) as a friendly alias for hasOwner. operationId: list_1 parameters: - name: pageSize in: query required: false schema: type: integer format: int32 - name: pageCursor in: query required: false schema: type: string - name: categoryKey in: query description: >- Restrict to a single top-level inventory category. Omit for all categories. required: false schema: type: string enum: - CLOUD - COMPUTER - CUSTOM - INFORMATION - EMPLOYEE - name: subKey in: query description: >- Restrict to a single granular category sub-type (matches the key returned on AssetDto.categoryKey). Must be consistent with categoryKey when both are supplied. required: false schema: type: string enum: - CLOUD - CLOUD_AUTOSCALE_GROUPS - CLOUD_COMPUTE_INSTANCE - CLOUD_CONTAINER_REPOSITORY - CLOUD_DATA_WAREHOUSE - CLOUD_LOAD_BALANCER - CLOUD_NO_SQL_DATABASE - CLOUD_PAAS_APPS - CLOUD_QUEUE - CLOUD_RELATIONAL_DATABASE - CLOUD_STORAGE_BUCKET - CLOUD_OTHER - COMPUTER - CUSTOM - INFORMATION - EMPLOYEE - name: hasOwner in: query description: >- Filter by whether the asset has an owner assigned. Omit to not filter. required: false schema: type: boolean - name: hasDescription in: query description: >- Filter by whether the asset has a governance description. Omit to not filter. required: false schema: type: boolean - name: classification in: query description: Restrict to a single data classification. Omit to not filter. required: false schema: type: string enum: - CONFIDENTIAL - INTERNAL - PUBLIC - UNKNOWN - name: completeStatus in: query description: >- Filter by governance completeness (a friendly alias for hasOwner): COMPLETE when an owner is assigned, else INCOMPLETE. Omit to not filter. required: false schema: type: string enum: - COMPLETE - INCOMPLETE responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/CursorPageAssetDto' components: schemas: CursorPageAssetDto: type: object properties: pageInfo: $ref: '#/components/schemas/PageInfo' results: type: array description: The page of results. items: $ref: '#/components/schemas/AssetDto' description: Standard cursor-paginated list envelope. PageInfo: type: object properties: endCursor: type: string description: >- Opaque cursor for the next page (pass as pageCursor). Null when there are no more results. example: eyJjIjoiMjAyNi0wNi0zMFQwMjowMDowMFoiLCJyIjoiM2YxYzlhMmUifQ.. hasNextPage: type: boolean description: Whether more results are available after this page. example: true totalCount: type: integer description: >- Total number of results matching the request across all pages (not just this page). format: int64 example: 137 description: Cursor-pagination metadata. AssetDto: type: object properties: accountId: type: string description: Cloud account id (CLOUD assets). example: '123456789012' categoryKey: type: string description: Asset category key. example: CLOUD enum: - CLOUD - COMPUTER - CUSTOM - INFORMATION - EMPLOYEE classification: type: string description: Data classification. example: CONFIDENTIAL completeStatus: type: string description: >- Read-only completeness status. COMPLETE when an owner is assigned, else INCOMPLETE. Applies to all categories. readOnly: true example: COMPLETE enum: - COMPLETE - INCOMPLETE createdAt: type: string description: Creation timestamp (UTC). format: date-time example: '2026-01-15T09:30:00.000Z' dataStored: $ref: '#/components/schemas/DataStoredDto' description: type: string description: Governance description. example: Primary production web server. email: type: string description: >- Employee email - PII, surfaced under inventory:read (EMPLOYEE assets). example: jane.doe@example.com externalId: type: string description: Identifier of the asset in its source system. example: i-0abc123def456 id: type: string description: Opaque public asset id (UUID). format: uuid example: 3f1c9a2e-8b4d-4e7a-9c1f-2a5b6c7d8e9f lastCheckedAt: type: string description: Timestamp of the last compliance check (UTC), where applicable. format: date-time example: '2026-06-30T02:00:00.000Z' name: type: string description: Asset display name. example: prod-web-01 osVersion: type: string description: Operating system family and version, combined (COMPUTER assets). example: macOS 14.5 ownerId: type: string description: Owner's employee UUID. format: uuid example: a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d ownerSource: type: string description: Origin of the owner assignment. example: MANUAL region: type: string description: Cloud region/location (CLOUD assets). example: eu-central-1 serialNumber: type: string description: Hardware serial number (COMPUTER assets). example: C02XY1234ABC tags: type: array description: Structured tags on the asset. items: $ref: '#/components/schemas/TagDto' type: type: string description: Asset type within its category. example: SERVER description: >- Public asset. The id is an opaque public reference (never the internal PK); for EMPLOYEE-category rows it is the stable employee UUID. Category-specific fields are populated only for their owning category; completeStatus is read-only. DataStoredDto: type: object properties: containsPatientData: type: boolean description: Whether the asset contains patient data. example: false containsUserData: type: boolean description: Whether the asset contains user data. example: true userDataInfo: type: string description: Free-text descriptor of the user data contained in the asset. example: Customer contact records description: User/patient-data flags for INFORMATION/CUSTOM assets. Read-only. TagDto: type: object properties: key: maxLength: 1000 minLength: 0 type: string description: Tag key (an existing customer tag definition). example: environment value: maxLength: 255 minLength: 0 type: string description: Tag value. example: production description: >- Structured asset tag. On writes, key must match an existing customer tag key; value is read-only in v1. securitySchemes: bearerAuth: type: http description: Bearer access token obtained from /oauth/token. scheme: bearer bearerFormat: JWT ````