Compliance Status

Returns the compliance evaluation status for agents against posture profiles. Shows which agents are compliant or non-compliant, their compliance score, and a breakdown of issues by severity. Supports filtering by compliance status, severity, and specific agent.

Before You Begin

Ensure you have a valid Tenant URL, Subdomain, and Bearer Token before calling this API. Refer to Agent Identity Security API Reference for setup instructions.

To retrieve the compliance status for a specific agent, supply its UUID as the agent_id query parameter. Use the List Agents API to retrieve agent UUIDs.

Request Structure


Endpoint	`/posture/compliance/agents`
Method	`GET`
Sample URL	`https://<tenant-host>/api/v1/posture/compliance/agents?compliant=false&severity=critical&agent_id=0bb6aeee-2a4c-4da1-8836-41aae514dbc9&limit=5`

Headers

Table 1. Request Headers
Name	Description
`Authorization`	(Mandatory) Bearer token for authentication. Format: `Authorization: Bearer <token>` Type: String
`X-Tenant-Subdomain`	(Mandatory) Tenant subdomain for multi-tenant routing. Example: `acme` Type: String
`Accept`	(Optional) Response format. Use `application/json` Type: String

Query Parameters

Table 2. Query Parameters
Name	Description
`agent_id`	(Optional) Filter results for a specific agent UUID Type: String
`compliant`	(Optional) Filter by compliance status. Accepted values: `true` (fully compliant agents), `false` (non-compliant agents) Type: Boolean
`severity`	(Optional) Filter agents that have issues at or above this severity. Accepted values: `critical`, `high`, `medium`, `low` Type: String
`offset`	(Optional) Number of records to skip for pagination. Default: `0` Type: Integer
`limit`	(Optional) Maximum number of records to return. Default: `50`. Max: `500` Type: Integer

Response Structure

Table 3. Response Fields
Field	Description
`total`	Total number of agents matching the applied filters Type: Integer
`offset`	Number of records skipped Type: Integer
`limit`	Number of records returned in this response Type: Integer
`agents`	Array of agent compliance summary objects Type: Array
`agents[].agent_id`	UUID of the agent Type: String (UUID)
`agents[].agent_name`	Display name of the agent Type: String
`agents[].compliant`	Whether the agent is fully compliant with all posture checks Type: Boolean
`agents[].compliance_score`	Compliance score (0–100) Type: Integer
`agents[].last_evaluation`	ISO 8601 timestamp of the most recent compliance evaluation Type: String
`agents[].issues`	Object containing issue counts broken down by severity Type: Object
`agents[].issues.critical`	Number of critical-severity issues Type: Integer
`agents[].issues.high`	Number of high-severity issues Type: Integer
`agents[].issues.medium`	Number of medium-severity issues Type: Integer
`agents[].issues.low`	Number of low-severity issues Type: Integer

Status Codes

Table 4. HTTP Status Codes
HTTP Code	Description
200 OK	Compliance status returned successfully.
401 Unauthorized	Missing or invalid Bearer token. Ensure a valid token is included in the `Authorization` header.
422 Unprocessable Entity	Invalid parameter value supplied.

Sample Response

{
  "total": 145,
  "offset": 0,
  "limit": 1,
  "agents": [
    {
      "agent_id": "0bb6aeee-2a4c-4da1-8836-41aae514dbc9",
      "agent_name": "Cursor - AVXPLM212",
      "compliant": false,
      "compliance_score": 85,
      "last_evaluation": "2026-09-29T14:05:19.262343+00:00",
      "issues": {
        "critical": 1,
        "high": 2,
        "medium": 3,
        "low": 5
      }
    }
  ]
}