Posture Issues

Returns identity posture issues detected for agents including system prompt drift, credential exposure, policy violations, and compliance failures. Results are filterable by severity, status, and agent, and are linked to compliance frameworks.

Before You Begin

Ensure you have a valid Tenant URL, Subdomain, and Bearer Token before calling this API. Refer to Agent Identity Security API Reference for setup instructions.

To filter results for a specific agent, supply its UUID as the agent_id query parameter. Use the List Agents API to retrieve agent UUIDs.

Request Structure


Endpoint	`/identity-posture-issues/`
Method	`GET`
Sample URL	`https://<tenant-host>/api/v1/identity-posture-issues/?skip=0&limit=1&sort_by=severity&sort_order=desc&severity=high`

Headers

Table 1. Request Headers
Name	Description
`Authorization`	(Mandatory) Bearer token for authentication. Format: `Authorization: Bearer <token>` Type: String
`X-Tenant-Subdomain`	(Mandatory) Tenant subdomain for multi-tenant routing. Example: `acme` Type: String
`Accept`	(Optional) Response format. Use `application/json` Type: String

Query Parameters

Table 2. Query Parameters
Name	Description
`agent_id`	(Optional) Filter issues for a specific agent UUID Type: String (UUID)
`severity`	(Optional) Filter by severity. Accepted values: `critical`, `high`, `medium`, `low`. This parameter is repeatable to filter by multiple severities. Type: String
`status`	(Optional) Filter by issue status. Accepted values: `active`, `resolved`, `suppressed` Type: String
`sort_by`	(Optional) Field to sort results by. Accepted values: `severity`, `last_occurrence`, `created_at` Type: String
`sort_order`	(Optional) Sort direction. Accepted values: `asc`, `desc` Type: String
`skip`	(Optional) Number of records to skip for pagination. Default: `0` Type: Integer
`limit`	(Optional) Maximum number of records to return. Default: `50`. Max: `1000` Type: Integer

Response Structure

Table 3. Response Fields
Field	Description
`total`	Total number of issues matching the applied filters Type: Integer
`skip`	Number of records skipped Type: Integer
`limit`	Number of records returned in this response Type: Integer
`paginated`	Whether the response is paginated Type: Boolean
`items`	Array of posture issue objects Type: Array
`items[].id`	Issue identifier (e.g., `PI-PROMPT-A3661C50`) Type: String
`items[].agent_name`	Name of the affected agent Type: String
`items[].issue`	Human-readable issue title (e.g., `System Prompt Drift`) Type: String
`items[].issue_type`	Machine-readable issue type key (e.g., `system_prompt_changed`) Type: String
`items[].severity`	Severity level: `critical`, `high`, `medium`, or `low` Type: String
`items[].status`	Issue status: `active`, `resolved`, or `suppressed` Type: String
`items[].last_occurrence`	ISO 8601 timestamp of the last detection Type: String
`items[].occurrence_count`	Number of times this issue has been detected Type: Integer
`items[].metadata_json`	Issue-specific metadata (e.g., changed prompt content) Type: Object
`items[].frameworks`	Array of compliance frameworks this issue maps to, each with a `name` field Type: Array

Status Codes

Table 4. HTTP Status Codes
HTTP Code	Description
200 OK	Posture issues returned successfully.
401 Unauthorized	Missing or invalid Bearer token. Ensure a valid token is included in the `Authorization` header.
422 Unprocessable Entity	Invalid parameter value supplied.

Sample Response

{
  "total": 5,
  "skip": 0,
  "limit": 1,
  "paginated": true,
  "items": [
    {
      "id": "PI-PROMPT-A3661C50",
      "agent_name": "Jira-Agent",
      "issue": "System Prompt Drift",
      "issue_type": "system_prompt_changed",
      "severity": "high",
      "status": "active",
      "last_occurrence": "2026-09-29T09:22:30.720526Z",
      "occurrence_count": 1,
      "frameworks": [
        {
          "name": "EU AI Act"
        }
      ]
    }
  ]
}