> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oasm.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Project assets

> Assets with their source (hand-picked or rule), open vulnerabilities and last scan.



## OpenAPI

````yaml /api-reference/openapi.json get /api/projects/{id}/assets
openapi: 3.0.0
info:
  title: Open Attack Surface Management
  description: Open-source platform for cybersecurity Attack Surface Management (ASM)
  version: '1.0'
  contact: {}
servers:
  - url: https://{baseUrl}/api/v1
    variables:
      baseUrl:
        default: localhost:3000
        description: API server hostname with port (e.g. localhost:3000, api.example.com)
security: []
tags: []
externalDocs:
  description: Authentication Docs
  url: auth/docs
paths:
  /api/projects/{id}/assets:
    get:
      tags:
        - Projects
      summary: Project assets
      description: >-
        Assets with their source (hand-picked or rule), open vulnerabilities and
        last scan.
      operationId: ProjectsController_getAssets
      parameters:
        - name: id
          required: true
          in: path
          schema:
            type: string
        - name: search
          required: false
          in: query
          schema:
            type: string
        - name: page
          required: false
          in: query
          schema:
            example: 1
            type: number
        - name: limit
          required: false
          in: query
          schema:
            example: 10
            type: number
        - name: sortBy
          required: false
          in: query
          schema:
            example: createdAt
            type: string
        - name: sortOrder
          required: false
          in: query
          schema:
            example: DESC
            type: string
        - name: source
          required: false
          in: query
          schema:
            $ref: '#/components/schemas/ProjectAssetSource'
        - name: X-Workspace-Id
          in: header
          description: Workspace ID
          schema:
            type: string
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetManyProjectAssetDtoDto'
                allOf:
                  - $ref: '#/components/schemas/AppResponseSerialization'
components:
  schemas:
    ProjectAssetSource:
      type: string
      enum:
        - manual
        - rule
    GetManyProjectAssetDtoDto:
      type: object
      properties:
        data:
          type: array
          items:
            $ref: '#/components/schemas/ProjectAssetDto'
        total:
          type: number
        page:
          type: number
        limit:
          type: number
        hasNextPage:
          type: boolean
        pageCount:
          type: number
      required:
        - data
        - total
        - page
        - limit
        - hasNextPage
        - pageCount
    AppResponseSerialization:
      type: object
      properties: {}
    ProjectAssetDto:
      type: object
      properties:
        id:
          type: string
        value:
          type: string
        targetId:
          type: string
        targetValue:
          type: string
        targetType:
          allOf:
            - $ref: '#/components/schemas/TargetType'
        source:
          allOf:
            - $ref: '#/components/schemas/ProjectAssetSource'
        rule:
          nullable: true
          type: object
          allOf:
            - $ref: '#/components/schemas/ProjectAssetRuleDto'
        addedAt:
          format: date-time
          type: string
          description: When the asset joined the project
        vulnerabilities:
          description: Open vulnerabilities the project found
          allOf:
            - $ref: '#/components/schemas/SeverityCountsDto'
        lastScan:
          nullable: true
          type: object
          allOf:
            - $ref: '#/components/schemas/ProjectAssetScanDto'
      required:
        - id
        - value
        - targetId
        - targetValue
        - targetType
        - source
        - addedAt
        - vulnerabilities
    TargetType:
      type: string
      enum:
        - DOMAIN
        - CIDR
        - IP
        - GIT_ORG
      description: The type of target (DOMAIN, CIDR, or IP)
    ProjectAssetRuleDto:
      type: object
      properties:
        id:
          type: string
        type:
          allOf:
            - $ref: '#/components/schemas/ProjectScopeRuleType'
        value:
          type: string
        label:
          type: string
      required:
        - id
        - type
        - value
        - label
    SeverityCountsDto:
      type: object
      properties:
        critical:
          type: number
        high:
          type: number
        medium:
          type: number
        low:
          type: number
        info:
          type: number
      required:
        - critical
        - high
        - medium
        - low
        - info
    ProjectAssetScanDto:
      type: object
      properties:
        runId:
          type: string
        createdAt:
          format: date-time
          type: string
      required:
        - runId
        - createdAt
    ProjectScopeRuleType:
      type: string
      enum:
        - target
        - hostname
        - cidr
        - asset

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.