> ## Documentation Index > Fetch the complete documentation index at: https://docs.cyrisma.com/llms.txt > Use this file to discover all available pages before exploring further. # Get a single vulnerability root cause for authorized partner tenants. > This endpoint returns the details of a single vulnerability root cause, scoped to the authorized partner's tenants. **Notes:** - `rootCauseKey` is the unique identifier for the root cause. - `tenant_ids` (optional, comma-separated) restricts the lookup to specific tenants. - Cursor pagination is not supported on this endpoint; a `cursor` query parameter returns 400. Required headers: - `Authorization: Bearer {token}` (requires the `pulse.read` scope) ## OpenAPI ````yaml /api/partner-api/reporting.json get /pulse/v1/partner/vulnerabilities/root-causes/{rootCauseKey} openapi: 3.1.1 info: title: 'Cyrisma New Partner API: Reporting' version: v1 servers: - url: https://{instance}.cyrisma.com/app description: The partner's CYRISMA instance host. variables: instance: default: ccnnnnnn description: The instance label of the tenant host issued to the partner. security: - bearerAuth: - pulse.read tags: - name: Reporting paths: /pulse/v1/partner/vulnerabilities/root-causes/{rootCauseKey}: get: tags: - Reporting summary: Get a single vulnerability root cause for authorized partner tenants. description: >- This endpoint returns the details of a single vulnerability root cause, scoped to the authorized partner's tenants. **Notes:** - `rootCauseKey` is the unique identifier for the root cause. - `tenant_ids` (optional, comma-separated) restricts the lookup to specific tenants. - Cursor pagination is not supported on this endpoint; a `cursor` query parameter returns 400. Required headers: - `Authorization: Bearer {token}` (requires the `pulse.read` scope) operationId: GetPartnerRootCauseV1 parameters: - name: rootCauseKey in: path required: true schema: type: string - name: tenant_ids in: query description: >- Comma-separated tenant UUIDs to scope the list to. Omit to use every tenant the caller is authorized for. schema: type: string - name: expand in: query description: >- Comma-separated optional expansions. `tenants` adds a per-tenant breakdown to each row; `cves` (on /assets) narrows the list to assets with at least one open finding and attaches their CVEs. Expansions cost extra reads, so ask for them only when needed. schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/PartnerRootCauseDetailResponse' '400': description: Bad Request '401': description: Unauthorized content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' '403': description: Forbidden content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' '503': description: Service Unavailable content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' components: schemas: PartnerRootCauseDetailResponse: required: - root_tenant_id - coverage - root_cause type: object properties: root_tenant_id: type: string format: uuid coverage: type: array items: $ref: '#/components/schemas/PartnerTenantCoverage' root_cause: oneOf: - type: 'null' - $ref: '#/components/schemas/GlobalRootCauseRow' ProblemDetails: type: object properties: type: type: - 'null' - string title: type: - 'null' - string status: pattern: ^-?(?:0|[1-9]\d*)$ type: - 'null' - integer - string format: int32 detail: type: - 'null' - string instance: type: - 'null' - string PartnerTenantCoverage: required: - tenant_id - tenant_host type: object properties: tenant_id: type: string format: uuid tenant_host: type: string GlobalRootCauseRow: required: - root_cause_key - root_cause_label - root_cause_type - product_key - package_manager - highest_cvr_score - impact - affected_asset_count - affected_tenant_count - cve_count - highest_epss_probability - exploitability_label - patch_available - fixed_version type: object properties: root_cause_key: type: string root_cause_label: type: string root_cause_type: $ref: '#/components/schemas/GlobalRootCauseType' product_key: type: - 'null' - string package_manager: type: - 'null' - string highest_cvr_score: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double impact: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - number - string format: double affected_asset_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 affected_tenant_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 cve_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 highest_epss_probability: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double exploitability_label: type: - 'null' - string patch_available: type: - 'null' - boolean fixed_version: type: - 'null' - string highest_cvss_score: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double critical_cve_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 high_cve_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 medium_cve_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 low_cve_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 asset_display_names: type: - 'null' - array items: type: string tenant_names: type: - 'null' - array items: type: string patchability_reason: type: - 'null' - string online_asset_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 offline_asset_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 exploit_sources: type: - 'null' - array items: type: string GlobalRootCauseType: enum: - product - package - library - os - service - configuration - software - unknown securitySchemes: bearerAuth: type: http description: >- A Tenant Authority machine-client token from POST /v1/auth/client-token, carrying subject_type=machine_client and the pulse.read scope. scheme: bearer bearerFormat: JWT ````