> ## Documentation Index > Fetch the complete documentation index at: https://docs.cyrisma.com/llms.txt > Use this file to discover all available pages before exploring further. # List assets affected by a vulnerability root cause for authorized partner tenants. > This endpoint returns a cursor-paginated list of assets affected by a specific vulnerability root cause, scoped to the authorized partner's tenants. **Notes:** - `rootCauseKey` is the unique identifier for the root cause. - `tenant_ids` (optional, comma-separated) restricts results to specific tenants. - `page_size` (optional, default 100, max 500) controls page size. - `cursor` (optional) resumes from a previous page using the `next_cursor` value returned in the response. Required headers: - `Authorization: Bearer {token}` (requires the `pulse.read` scope) ## OpenAPI ````yaml /api/partner-api/reporting.json get /pulse/v1/partner/vulnerabilities/root-causes/{rootCauseKey}/assets openapi: 3.1.1 info: title: 'Cyrisma New Partner API: Reporting' version: v1 servers: - url: https://{instance}.cyrisma.com/app description: The partner's CYRISMA instance host. variables: instance: default: ccnnnnnn description: The instance label of the tenant host issued to the partner. security: - bearerAuth: - pulse.read tags: - name: Reporting paths: /pulse/v1/partner/vulnerabilities/root-causes/{rootCauseKey}/assets: get: tags: - Reporting summary: >- List assets affected by a vulnerability root cause for authorized partner tenants. description: >- This endpoint returns a cursor-paginated list of assets affected by a specific vulnerability root cause, scoped to the authorized partner's tenants. **Notes:** - `rootCauseKey` is the unique identifier for the root cause. - `tenant_ids` (optional, comma-separated) restricts results to specific tenants. - `page_size` (optional, default 100, max 500) controls page size. - `cursor` (optional) resumes from a previous page using the `next_cursor` value returned in the response. Required headers: - `Authorization: Bearer {token}` (requires the `pulse.read` scope) operationId: ListPartnerRootCauseAssetsV1 parameters: - name: rootCauseKey in: path required: true schema: type: string - name: tenant_ids in: query description: >- Comma-separated tenant UUIDs to scope the list to. Omit to use every tenant the caller is authorized for. schema: type: string - name: page_size in: query description: Maximum number of items per page. schema: type: string - name: cursor in: query description: >- Opaque pagination cursor: pass the previous response's next_cursor to fetch the next page. schema: type: string responses: '200': description: OK content: application/json: schema: $ref: >- #/components/schemas/PartnerPagedResponseOfGlobalAffectedAssetRow '400': description: Bad Request '401': description: Unauthorized content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' '403': description: Forbidden content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' '503': description: Service Unavailable content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' components: schemas: PartnerPagedResponseOfGlobalAffectedAssetRow: required: - root_tenant_id - page_size - next_cursor - coverage - items type: object properties: root_tenant_id: type: string format: uuid page_size: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: int32 next_cursor: type: - 'null' - string coverage: type: array items: $ref: '#/components/schemas/PartnerTenantCoverage' items: type: array items: $ref: '#/components/schemas/GlobalAffectedAssetRow' ProblemDetails: type: object properties: type: type: - 'null' - string title: type: - 'null' - string status: pattern: ^-?(?:0|[1-9]\d*)$ type: - 'null' - integer - string format: int32 detail: type: - 'null' - string instance: type: - 'null' - string PartnerTenantCoverage: required: - tenant_id - tenant_host type: object properties: tenant_id: type: string format: uuid tenant_host: type: string GlobalAffectedAssetRow: required: - tenant_id - tenant_host - asset_id - asset_type - source_type - display_name - hostname - address - severity - cvr_score - cvss_score - epss_probability - patch_available - first_seen_at - last_seen_at type: object properties: tenant_id: type: string format: uuid tenant_host: type: string asset_id: type: string asset_type: $ref: '#/components/schemas/GlobalAssetType' source_type: $ref: '#/components/schemas/GlobalSourceType' display_name: type: - 'null' - string hostname: type: - 'null' - string address: type: - 'null' - string severity: oneOf: - type: 'null' - $ref: '#/components/schemas/GlobalSeverity' cvr_score: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double cvss_score: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double epss_probability: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double patch_available: type: - 'null' - boolean first_seen_at: type: - 'null' - string format: date-time last_seen_at: type: - 'null' - string format: date-time fixed_at: type: - 'null' - string format: date-time platform: type: - 'null' - string os_family: type: - 'null' - string os_name: type: - 'null' - string os_version: type: - 'null' - string open_finding_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 fixed_finding_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 finding_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 vulnerability_grade: type: - 'null' - string tenant_name: type: - 'null' - string fixed_version: type: - 'null' - string detected_while_offline: type: boolean default: false patch_target: oneOf: - type: 'null' - $ref: '#/components/schemas/GlobalPatchTarget' agent_status: type: - 'null' - string GlobalAssetType: enum: - endpoint - host - server - workstation - network_device - printer - router - switch - firewall - service - external - domain - unknown GlobalSourceType: enum: - endpoint - network - external - domain - unknown GlobalSeverity: enum: - critical - high - medium - low - info - unknown GlobalPatchTarget: required: - kind - package_manager - package_id - target_version - kb_ids - architectures - installer_scope - minimum_os_build - maximum_os_build - reboot_required - reason type: object properties: kind: type: string package_manager: type: - 'null' - string package_id: type: - 'null' - string target_version: type: - 'null' - string kb_ids: type: - 'null' - array items: type: string architectures: type: - 'null' - array items: type: string installer_scope: type: - 'null' - string minimum_os_build: type: - 'null' - string maximum_os_build: type: - 'null' - string reboot_required: type: - 'null' - boolean reason: type: - 'null' - string patch_target_key: type: - 'null' - string source_artifact_version: type: - 'null' - string installed_app_aliases: type: - 'null' - array items: type: string securitySchemes: bearerAuth: type: http description: >- A Tenant Authority machine-client token from POST /v1/auth/client-token, carrying subject_type=machine_client and the pulse.read scope. scheme: bearer bearerFormat: JWT ````