> ## Documentation Index
> Fetch the complete documentation index at: https://developer.secfix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Working with computers

> Read monitored computers and their device compliance posture.

The computers endpoints expose the computers Secfix monitors, together with an aggregate device
compliance posture. Computers are **read-only** over the API — governance of computer *assets* is
done through the [inventory endpoints](/guides/inventory).

Reads require **Read** access (`all:read`). See [Scopes](/scopes).

## List computers

`GET /v1/computers` returns a [cursor-paginated](/pagination) list of monitored computers.

```bash theme={null}
curl "https://api.secfix.com/v1/computers?pageSize=50" \
  -H "Authorization: Bearer $TOKEN"
```

Read one computer by its opaque id with `GET /v1/computers/{id}`.

## Compliance posture

Each computer carries an aggregate `compliance` object summarising the device's security posture:

| Field                      | Meaning                                           |
| -------------------------- | ------------------------------------------------- |
| `diskEncryptionEnabled`    | Full-disk encryption is on.                       |
| `antivirusInstalled`       | Antivirus / endpoint protection is present.       |
| `screenLockEnabled`        | Automatic screen lock is configured.              |
| `passwordManagerInstalled` | A password manager is installed.                  |
| `agentVersion`             | Version of the Secfix agent reporting the device. |

Other fields include `name`, `serialNumber`, `operatingSystem`, `osVersion`, `ownerId`,
`isMonitored`, `tags`, and `lastCheckedAt`.

<Note>
  `isMonitored` is computed from the presence of a Secfix agent or MDM enrolment. A computer with no
  reporting source is still listed but reports `isMonitored: false`.
</Note>