Search App Resources

SearchAppResources

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.AppResourceSearch.SearchAppResources(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.SearchAppResourcesResponse != nil {
        for {
            // handle items

            res, err = res.Next()

            if err != nil {
                // handle error
            }

            if res == nil {
                break
            }
        }
    }
}

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.appResourceSearch.searchAppResources();

  for await (const page of result) {
    console.log(page);
  }
}

run();

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/search/app_resources \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "agentStatuses": [],
  "appId": "<string>",
  "appIds": [
    "<string>"
  ],
  "appUserIds": [
    "<string>"
  ],
  "credentialTypes": [],
  "excludeDeletedApps": true,
  "excludeDeletedResourceBindings": true,
  "excludeResourceIds": [
    "<string>"
  ],
  "excludeResourceTypeTraitIds": [
    "<string>"
  ],
  "nhiTypes": [],
  "ownerUserIds": [
    "<string>"
  ],
  "pageSize": 123,
  "pageToken": "<string>",
  "query": "<string>",
  "refs": [
    {
      "appId": "<string>",
      "appResourceTypeId": "<string>",
      "id": "<string>"
    }
  ],
  "resourceIds": [
    "<string>"
  ],
  "resourceTypeIds": [
    "<string>"
  ],
  "resourceTypeTraitIds": [
    "<string>"
  ],
  "secretAging": {
    "lastUsedAfter": "2023-11-07T05:31:56Z",
    "lastUsedBefore": "2023-11-07T05:31:56Z",
    "secretCreatedAfter": "2023-11-07T05:31:56Z",
    "secretCreatedBefore": "2023-11-07T05:31:56Z",
    "secretExpiresAfter": "2023-11-07T05:31:56Z",
    "secretExpiresBefore": "2023-11-07T05:31:56Z"
  },
  "unownedOnly": true,
  "withOpenFindings": true
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/search/app_resources"

payload = {
    "agentStatuses": [],
    "appId": "<string>",
    "appIds": ["<string>"],
    "appUserIds": ["<string>"],
    "credentialTypes": [],
    "excludeDeletedApps": True,
    "excludeDeletedResourceBindings": True,
    "excludeResourceIds": ["<string>"],
    "excludeResourceTypeTraitIds": ["<string>"],
    "nhiTypes": [],
    "ownerUserIds": ["<string>"],
    "pageSize": 123,
    "pageToken": "<string>",
    "query": "<string>",
    "refs": [
        {
            "appId": "<string>",
            "appResourceTypeId": "<string>",
            "id": "<string>"
        }
    ],
    "resourceIds": ["<string>"],
    "resourceTypeIds": ["<string>"],
    "resourceTypeTraitIds": ["<string>"],
    "secretAging": {
        "lastUsedAfter": "2023-11-07T05:31:56Z",
        "lastUsedBefore": "2023-11-07T05:31:56Z",
        "secretCreatedAfter": "2023-11-07T05:31:56Z",
        "secretCreatedBefore": "2023-11-07T05:31:56Z",
        "secretExpiresAfter": "2023-11-07T05:31:56Z",
        "secretExpiresBefore": "2023-11-07T05:31:56Z"
    },
    "unownedOnly": True,
    "withOpenFindings": True
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    agentStatuses: [],
    appId: '<string>',
    appIds: ['<string>'],
    appUserIds: ['<string>'],
    credentialTypes: [],
    excludeDeletedApps: true,
    excludeDeletedResourceBindings: true,
    excludeResourceIds: ['<string>'],
    excludeResourceTypeTraitIds: ['<string>'],
    nhiTypes: [],
    ownerUserIds: ['<string>'],
    pageSize: 123,
    pageToken: '<string>',
    query: '<string>',
    refs: [{appId: '<string>', appResourceTypeId: '<string>', id: '<string>'}],
    resourceIds: ['<string>'],
    resourceTypeIds: ['<string>'],
    resourceTypeTraitIds: ['<string>'],
    secretAging: {
      lastUsedAfter: '2023-11-07T05:31:56Z',
      lastUsedBefore: '2023-11-07T05:31:56Z',
      secretCreatedAfter: '2023-11-07T05:31:56Z',
      secretCreatedBefore: '2023-11-07T05:31:56Z',
      secretExpiresAfter: '2023-11-07T05:31:56Z',
      secretExpiresBefore: '2023-11-07T05:31:56Z'
    },
    unownedOnly: true,
    withOpenFindings: true
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/search/app_resources', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/search/app_resources",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'agentStatuses' => [
        
    ],
    'appId' => '<string>',
    'appIds' => [
        '<string>'
    ],
    'appUserIds' => [
        '<string>'
    ],
    'credentialTypes' => [
        
    ],
    'excludeDeletedApps' => true,
    'excludeDeletedResourceBindings' => true,
    'excludeResourceIds' => [
        '<string>'
    ],
    'excludeResourceTypeTraitIds' => [
        '<string>'
    ],
    'nhiTypes' => [
        
    ],
    'ownerUserIds' => [
        '<string>'
    ],
    'pageSize' => 123,
    'pageToken' => '<string>',
    'query' => '<string>',
    'refs' => [
        [
                'appId' => '<string>',
                'appResourceTypeId' => '<string>',
                'id' => '<string>'
        ]
    ],
    'resourceIds' => [
        '<string>'
    ],
    'resourceTypeIds' => [
        '<string>'
    ],
    'resourceTypeTraitIds' => [
        '<string>'
    ],
    'secretAging' => [
        'lastUsedAfter' => '2023-11-07T05:31:56Z',
        'lastUsedBefore' => '2023-11-07T05:31:56Z',
        'secretCreatedAfter' => '2023-11-07T05:31:56Z',
        'secretCreatedBefore' => '2023-11-07T05:31:56Z',
        'secretExpiresAfter' => '2023-11-07T05:31:56Z',
        'secretExpiresBefore' => '2023-11-07T05:31:56Z'
    ],
    'unownedOnly' => true,
    'withOpenFindings' => true
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/search/app_resources")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"agentStatuses\": [],\n  \"appId\": \"<string>\",\n  \"appIds\": [\n    \"<string>\"\n  ],\n  \"appUserIds\": [\n    \"<string>\"\n  ],\n  \"credentialTypes\": [],\n  \"excludeDeletedApps\": true,\n  \"excludeDeletedResourceBindings\": true,\n  \"excludeResourceIds\": [\n    \"<string>\"\n  ],\n  \"excludeResourceTypeTraitIds\": [\n    \"<string>\"\n  ],\n  \"nhiTypes\": [],\n  \"ownerUserIds\": [\n    \"<string>\"\n  ],\n  \"pageSize\": 123,\n  \"pageToken\": \"<string>\",\n  \"query\": \"<string>\",\n  \"refs\": [\n    {\n      \"appId\": \"<string>\",\n      \"appResourceTypeId\": \"<string>\",\n      \"id\": \"<string>\"\n    }\n  ],\n  \"resourceIds\": [\n    \"<string>\"\n  ],\n  \"resourceTypeIds\": [\n    \"<string>\"\n  ],\n  \"resourceTypeTraitIds\": [\n    \"<string>\"\n  ],\n  \"secretAging\": {\n    \"lastUsedAfter\": \"2023-11-07T05:31:56Z\",\n    \"lastUsedBefore\": \"2023-11-07T05:31:56Z\",\n    \"secretCreatedAfter\": \"2023-11-07T05:31:56Z\",\n    \"secretCreatedBefore\": \"2023-11-07T05:31:56Z\",\n    \"secretExpiresAfter\": \"2023-11-07T05:31:56Z\",\n    \"secretExpiresBefore\": \"2023-11-07T05:31:56Z\"\n  },\n  \"unownedOnly\": true,\n  \"withOpenFindings\": true\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/search/app_resources")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"agentStatuses\": [],\n  \"appId\": \"<string>\",\n  \"appIds\": [\n    \"<string>\"\n  ],\n  \"appUserIds\": [\n    \"<string>\"\n  ],\n  \"credentialTypes\": [],\n  \"excludeDeletedApps\": true,\n  \"excludeDeletedResourceBindings\": true,\n  \"excludeResourceIds\": [\n    \"<string>\"\n  ],\n  \"excludeResourceTypeTraitIds\": [\n    \"<string>\"\n  ],\n  \"nhiTypes\": [],\n  \"ownerUserIds\": [\n    \"<string>\"\n  ],\n  \"pageSize\": 123,\n  \"pageToken\": \"<string>\",\n  \"query\": \"<string>\",\n  \"refs\": [\n    {\n      \"appId\": \"<string>\",\n      \"appResourceTypeId\": \"<string>\",\n      \"id\": \"<string>\"\n    }\n  ],\n  \"resourceIds\": [\n    \"<string>\"\n  ],\n  \"resourceTypeIds\": [\n    \"<string>\"\n  ],\n  \"resourceTypeTraitIds\": [\n    \"<string>\"\n  ],\n  \"secretAging\": {\n    \"lastUsedAfter\": \"2023-11-07T05:31:56Z\",\n    \"lastUsedBefore\": \"2023-11-07T05:31:56Z\",\n    \"secretCreatedAfter\": \"2023-11-07T05:31:56Z\",\n    \"secretCreatedBefore\": \"2023-11-07T05:31:56Z\",\n    \"secretExpiresAfter\": \"2023-11-07T05:31:56Z\",\n    \"secretExpiresBefore\": \"2023-11-07T05:31:56Z\"\n  },\n  \"unownedOnly\": true,\n  \"withOpenFindings\": true\n}"

response = http.request(request)
puts response.read_body

{
  "expanded": [
    {
      "@type": "<string>"
    }
  ],
  "list": [
    {
      "appPath": "<string>",
      "appResource": {
        "accessConfigId": "<string>",
        "agentTrait": {
          "identityAppUserId": "<string>"
        },
        "annotations": {},
        "appId": "<string>",
        "appResourceTypeId": "<string>",
        "createdAt": "2023-11-07T05:31:56Z",
        "customDescription": "<string>",
        "deletedAt": "2023-11-07T05:31:56Z",
        "description": "<string>",
        "displayName": "<string>",
        "externalId": "<string>",
        "grantCount": "<string>",
        "id": "<string>",
        "matchBatonId": "<string>",
        "nhiDetail": "<string>",
        "parentAppResourceId": "<string>",
        "parentAppResourceTypeId": "<string>",
        "profile": {},
        "secretTrait": {
          "createdByAppUserId": "<string>",
          "credentialDetail": "<string>",
          "identityAppUserId": "<string>",
          "lastUsedAt": "2023-11-07T05:31:56Z",
          "secretCreatedAt": "2023-11-07T05:31:56Z",
          "secretExpiresAt": "2023-11-07T05:31:56Z"
        },
        "updatedAt": "2023-11-07T05:31:56Z"
      },
      "objectPermissions": {
        "delete": true,
        "edit": true,
        "extra": {},
        "read": true
      },
      "parentResourcePath": "<string>",
      "parentResourceTypePath": "<string>",
      "resourceTypePath": "<string>"
    }
  ],
  "nextPageToken": "<string>"
}

POST

api

app_resources

SearchAppResources

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.AppResourceSearch.SearchAppResources(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.SearchAppResourcesResponse != nil {
        for {
            // handle items

            res, err = res.Next()

            if err != nil {
                // handle error
            }

            if res == nil {
                break
            }
        }
    }
}

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.appResourceSearch.searchAppResources();

  for await (const page of result) {
    console.log(page);
  }
}

run();

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/search/app_resources \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "agentStatuses": [],
  "appId": "<string>",
  "appIds": [
    "<string>"
  ],
  "appUserIds": [
    "<string>"
  ],
  "credentialTypes": [],
  "excludeDeletedApps": true,
  "excludeDeletedResourceBindings": true,
  "excludeResourceIds": [
    "<string>"
  ],
  "excludeResourceTypeTraitIds": [
    "<string>"
  ],
  "nhiTypes": [],
  "ownerUserIds": [
    "<string>"
  ],
  "pageSize": 123,
  "pageToken": "<string>",
  "query": "<string>",
  "refs": [
    {
      "appId": "<string>",
      "appResourceTypeId": "<string>",
      "id": "<string>"
    }
  ],
  "resourceIds": [
    "<string>"
  ],
  "resourceTypeIds": [
    "<string>"
  ],
  "resourceTypeTraitIds": [
    "<string>"
  ],
  "secretAging": {
    "lastUsedAfter": "2023-11-07T05:31:56Z",
    "lastUsedBefore": "2023-11-07T05:31:56Z",
    "secretCreatedAfter": "2023-11-07T05:31:56Z",
    "secretCreatedBefore": "2023-11-07T05:31:56Z",
    "secretExpiresAfter": "2023-11-07T05:31:56Z",
    "secretExpiresBefore": "2023-11-07T05:31:56Z"
  },
  "unownedOnly": true,
  "withOpenFindings": true
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/search/app_resources"

payload = {
    "agentStatuses": [],
    "appId": "<string>",
    "appIds": ["<string>"],
    "appUserIds": ["<string>"],
    "credentialTypes": [],
    "excludeDeletedApps": True,
    "excludeDeletedResourceBindings": True,
    "excludeResourceIds": ["<string>"],
    "excludeResourceTypeTraitIds": ["<string>"],
    "nhiTypes": [],
    "ownerUserIds": ["<string>"],
    "pageSize": 123,
    "pageToken": "<string>",
    "query": "<string>",
    "refs": [
        {
            "appId": "<string>",
            "appResourceTypeId": "<string>",
            "id": "<string>"
        }
    ],
    "resourceIds": ["<string>"],
    "resourceTypeIds": ["<string>"],
    "resourceTypeTraitIds": ["<string>"],
    "secretAging": {
        "lastUsedAfter": "2023-11-07T05:31:56Z",
        "lastUsedBefore": "2023-11-07T05:31:56Z",
        "secretCreatedAfter": "2023-11-07T05:31:56Z",
        "secretCreatedBefore": "2023-11-07T05:31:56Z",
        "secretExpiresAfter": "2023-11-07T05:31:56Z",
        "secretExpiresBefore": "2023-11-07T05:31:56Z"
    },
    "unownedOnly": True,
    "withOpenFindings": True
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    agentStatuses: [],
    appId: '<string>',
    appIds: ['<string>'],
    appUserIds: ['<string>'],
    credentialTypes: [],
    excludeDeletedApps: true,
    excludeDeletedResourceBindings: true,
    excludeResourceIds: ['<string>'],
    excludeResourceTypeTraitIds: ['<string>'],
    nhiTypes: [],
    ownerUserIds: ['<string>'],
    pageSize: 123,
    pageToken: '<string>',
    query: '<string>',
    refs: [{appId: '<string>', appResourceTypeId: '<string>', id: '<string>'}],
    resourceIds: ['<string>'],
    resourceTypeIds: ['<string>'],
    resourceTypeTraitIds: ['<string>'],
    secretAging: {
      lastUsedAfter: '2023-11-07T05:31:56Z',
      lastUsedBefore: '2023-11-07T05:31:56Z',
      secretCreatedAfter: '2023-11-07T05:31:56Z',
      secretCreatedBefore: '2023-11-07T05:31:56Z',
      secretExpiresAfter: '2023-11-07T05:31:56Z',
      secretExpiresBefore: '2023-11-07T05:31:56Z'
    },
    unownedOnly: true,
    withOpenFindings: true
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/search/app_resources', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/search/app_resources",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'agentStatuses' => [
        
    ],
    'appId' => '<string>',
    'appIds' => [
        '<string>'
    ],
    'appUserIds' => [
        '<string>'
    ],
    'credentialTypes' => [
        
    ],
    'excludeDeletedApps' => true,
    'excludeDeletedResourceBindings' => true,
    'excludeResourceIds' => [
        '<string>'
    ],
    'excludeResourceTypeTraitIds' => [
        '<string>'
    ],
    'nhiTypes' => [
        
    ],
    'ownerUserIds' => [
        '<string>'
    ],
    'pageSize' => 123,
    'pageToken' => '<string>',
    'query' => '<string>',
    'refs' => [
        [
                'appId' => '<string>',
                'appResourceTypeId' => '<string>',
                'id' => '<string>'
        ]
    ],
    'resourceIds' => [
        '<string>'
    ],
    'resourceTypeIds' => [
        '<string>'
    ],
    'resourceTypeTraitIds' => [
        '<string>'
    ],
    'secretAging' => [
        'lastUsedAfter' => '2023-11-07T05:31:56Z',
        'lastUsedBefore' => '2023-11-07T05:31:56Z',
        'secretCreatedAfter' => '2023-11-07T05:31:56Z',
        'secretCreatedBefore' => '2023-11-07T05:31:56Z',
        'secretExpiresAfter' => '2023-11-07T05:31:56Z',
        'secretExpiresBefore' => '2023-11-07T05:31:56Z'
    ],
    'unownedOnly' => true,
    'withOpenFindings' => true
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/search/app_resources")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"agentStatuses\": [],\n  \"appId\": \"<string>\",\n  \"appIds\": [\n    \"<string>\"\n  ],\n  \"appUserIds\": [\n    \"<string>\"\n  ],\n  \"credentialTypes\": [],\n  \"excludeDeletedApps\": true,\n  \"excludeDeletedResourceBindings\": true,\n  \"excludeResourceIds\": [\n    \"<string>\"\n  ],\n  \"excludeResourceTypeTraitIds\": [\n    \"<string>\"\n  ],\n  \"nhiTypes\": [],\n  \"ownerUserIds\": [\n    \"<string>\"\n  ],\n  \"pageSize\": 123,\n  \"pageToken\": \"<string>\",\n  \"query\": \"<string>\",\n  \"refs\": [\n    {\n      \"appId\": \"<string>\",\n      \"appResourceTypeId\": \"<string>\",\n      \"id\": \"<string>\"\n    }\n  ],\n  \"resourceIds\": [\n    \"<string>\"\n  ],\n  \"resourceTypeIds\": [\n    \"<string>\"\n  ],\n  \"resourceTypeTraitIds\": [\n    \"<string>\"\n  ],\n  \"secretAging\": {\n    \"lastUsedAfter\": \"2023-11-07T05:31:56Z\",\n    \"lastUsedBefore\": \"2023-11-07T05:31:56Z\",\n    \"secretCreatedAfter\": \"2023-11-07T05:31:56Z\",\n    \"secretCreatedBefore\": \"2023-11-07T05:31:56Z\",\n    \"secretExpiresAfter\": \"2023-11-07T05:31:56Z\",\n    \"secretExpiresBefore\": \"2023-11-07T05:31:56Z\"\n  },\n  \"unownedOnly\": true,\n  \"withOpenFindings\": true\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/search/app_resources")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"agentStatuses\": [],\n  \"appId\": \"<string>\",\n  \"appIds\": [\n    \"<string>\"\n  ],\n  \"appUserIds\": [\n    \"<string>\"\n  ],\n  \"credentialTypes\": [],\n  \"excludeDeletedApps\": true,\n  \"excludeDeletedResourceBindings\": true,\n  \"excludeResourceIds\": [\n    \"<string>\"\n  ],\n  \"excludeResourceTypeTraitIds\": [\n    \"<string>\"\n  ],\n  \"nhiTypes\": [],\n  \"ownerUserIds\": [\n    \"<string>\"\n  ],\n  \"pageSize\": 123,\n  \"pageToken\": \"<string>\",\n  \"query\": \"<string>\",\n  \"refs\": [\n    {\n      \"appId\": \"<string>\",\n      \"appResourceTypeId\": \"<string>\",\n      \"id\": \"<string>\"\n    }\n  ],\n  \"resourceIds\": [\n    \"<string>\"\n  ],\n  \"resourceTypeIds\": [\n    \"<string>\"\n  ],\n  \"resourceTypeTraitIds\": [\n    \"<string>\"\n  ],\n  \"secretAging\": {\n    \"lastUsedAfter\": \"2023-11-07T05:31:56Z\",\n    \"lastUsedBefore\": \"2023-11-07T05:31:56Z\",\n    \"secretCreatedAfter\": \"2023-11-07T05:31:56Z\",\n    \"secretCreatedBefore\": \"2023-11-07T05:31:56Z\",\n    \"secretExpiresAfter\": \"2023-11-07T05:31:56Z\",\n    \"secretExpiresBefore\": \"2023-11-07T05:31:56Z\"\n  },\n  \"unownedOnly\": true,\n  \"withOpenFindings\": true\n}"

response = http.request(request)
puts response.read_body

{
  "expanded": [
    {
      "@type": "<string>"
    }
  ],
  "list": [
    {
      "appPath": "<string>",
      "appResource": {
        "accessConfigId": "<string>",
        "agentTrait": {
          "identityAppUserId": "<string>"
        },
        "annotations": {},
        "appId": "<string>",
        "appResourceTypeId": "<string>",
        "createdAt": "2023-11-07T05:31:56Z",
        "customDescription": "<string>",
        "deletedAt": "2023-11-07T05:31:56Z",
        "description": "<string>",
        "displayName": "<string>",
        "externalId": "<string>",
        "grantCount": "<string>",
        "id": "<string>",
        "matchBatonId": "<string>",
        "nhiDetail": "<string>",
        "parentAppResourceId": "<string>",
        "parentAppResourceTypeId": "<string>",
        "profile": {},
        "secretTrait": {
          "createdByAppUserId": "<string>",
          "credentialDetail": "<string>",
          "identityAppUserId": "<string>",
          "lastUsedAt": "2023-11-07T05:31:56Z",
          "secretCreatedAt": "2023-11-07T05:31:56Z",
          "secretExpiresAt": "2023-11-07T05:31:56Z"
        },
        "updatedAt": "2023-11-07T05:31:56Z"
      },
      "objectPermissions": {
        "delete": true,
        "edit": true,
        "extra": {},
        "read": true
      },
      "parentResourcePath": "<string>",
      "parentResourceTypePath": "<string>",
      "resourceTypePath": "<string>"
    }
  ],
  "nextPageToken": "<string>"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization

string

header

required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

Search app resources based on filters specified in the request body.

agentStatuses

enum<string>[] | null

Restrict the search to AI-agent resources with one of the given agent lifecycle statuses (READY, DISABLED, DELETED). When empty, agent status is not used as a filter.

Available options:

AGENT_STATUS_UNSPECIFIED,

AGENT_STATUS_READY,

AGENT_STATUS_DISABLED,

AGENT_STATUS_DELETED

appId

string

The app ID to restrict the search to.

appIds

string[] | null

A list of app IDs to restrict the search to. Mirrors the singular app_id; both fold into the same filter, so callers may set either or both.

appUserIds

string[] | null

A list of app user IDs to restrict the search by.

credentialTypes

enum<string>[] | null

Restrict the search to resources whose credential material spine (K1) matches one of the given CredentialType values. Applies to resources with a secret_trait. When empty, credential_type is not used as a filter.

Available options:

CREDENTIAL_TYPE_UNSPECIFIED,

CREDENTIAL_TYPE_STATIC_SECRET,

CREDENTIAL_TYPE_ASYMMETRIC_KEY,

CREDENTIAL_TYPE_CERTIFICATE

direction

enum<string>

Direction to sort in. Unspecified falls back to ASC when sort_field is set. No defined_only validation here: protoc-gen-validate mis-resolves the cross-package enum name map to this file's c1.models.app.v1 import alias instead of c1.api.search.v1, which fails to compile. The query builder already treats any unrecognized value as ASC, so this is safe to omit.

Available options:

SORT_DIRECTION_UNSPECIFIED,

SORT_DIRECTION_ASC,

SORT_DIRECTION_DESC

excludeDeletedApps

boolean

When true, excludes resources belonging to soft-deleted apps.

excludeDeletedResourceBindings

boolean

If true, exclude resources whose bindings have been deleted.

excludeResourceIds

string[] | null

A list of resource IDs to exclude from the search results.

excludeResourceTypeTraitIds

string[] | null

A list of resource type trait IDs to exclude from the search.

nhiTypes

enum<string>[] | null

Restrict the search to resources whose NHI classification spine (K3) is one of the given NhiType values. When empty, nhi_type is not used as a filter.

Available options:

NHI_TYPE_UNSPECIFIED,

NHI_TYPE_APP_REGISTRATION,

NHI_TYPE_ASSUMABLE_ROLE,

NHI_TYPE_MANAGED_IDENTITY

ownerUserIds

string[] | null

A list of C1 user IDs to filter resources by ownership. The sentinel value "none" matches resources with no owner. Mutually exclusive with unowned_only — combine "none" with real owner IDs instead of setting unowned_only alongside them.

pageSize

integer<int32>

The maximum number of results to return per page.

pageToken

string

The token for fetching the next page of results.

query

string

Fuzzy search the display name of resources.

refs

App Resource Ref · object[] | null

A list of specific app resource references to restrict the search to.

Show child attributes

resourceIds

string[] | null

A list of resource IDs to restrict the search to.

resourceTypeIds

string[] | null

A list of resource type IDs to restrict the search by.

resourceTypeTraitIds

string[] | null

A list of resource type trait IDs to restrict the search by.

secretAging

Secret Aging Filter · object | null

SecretAgingFilter restricts a resource search to secrets (credential_type != 0) whose secret-trait timestamps fall in the given half-open ranges. Each bound is optional; leave one unset for an open-ended range. All set bounds are ANDed. Callers pass absolute timestamps (computed against their reference "now").

Show child attributes

sortField

enum<string>

Column to sort by. Unspecified (0) keeps the server's default order (app, then display name).

Available options:

APP_RESOURCE_SORT_FIELD_UNSPECIFIED,

APP_RESOURCE_SORT_FIELD_SECRET_CREATED_AT,

APP_RESOURCE_SORT_FIELD_SECRET_EXPIRES_AT,

APP_RESOURCE_SORT_FIELD_LAST_USED_AT

unownedOnly

boolean

When true, restrict results to resources with no ownership-v2 primary-role owner. Mutually exclusive with owner_user_ids — use owner_user_ids: ["none"] instead if you also need to combine it with real owner IDs.

withOpenFindings

boolean

When true, restrict results to resources that have at least one open finding (index-backed EXISTS semi-join). When false/unset, results are unfiltered.

Response

200 - application/json

The SearchAppResourcesResponse message contains a list of results and a nextPageToken if applicable.

expanded

object[] | null

List of serialized related objects.

Show child attributes

list

App Resource View · object[] | null

The list of app resource results.

Show child attributes

nextPageToken

string

The token for fetching the next page of results.

Search App Resource Types

List Owner I Ds

⌘I

Welcome

Endpoints

Authorizations

Body

Response