Skip to main content
GET
/
analysis
/
{analysis_id}
Retrieve a past analysis result
curl --request GET \
  --url https://{hostname}/v1/analysis/{analysis_id} \
  --header 'Authorization: Bearer <token>'
{
  "analysis_id": "ana_01JNQBC4X8Y2Z3D",
  "analysis_type": "<string>",
  "status": "complete",
  "subject": {
    "type": "entity",
    "entity_id": "ent_01JNQBC4X8Y2Z3B"
  },
  "queried_at": "2026-02-19T14:23:00Z",
  "audit": {
    "request_id": "req_01JNQBC4X8Y2Z3A",
    "principal": {
      "type": "user",
      "user_id": "u_analyst_jdoe",
      "user_email": "analyst@example.com",
      "idp_session_id": "saml_sess_abc123",
      "api_key_id": "key_svc_01",
      "service_account_name": "integration-prod"
    },
    "organization_id": "org_example_001",
    "source_ip": "10.14.2.55",
    "logged_at": "2026-02-19T14:23:01Z",
    "requester_reference": "CASE-2026-00412",
    "identifiers_queried": 2
  },
  "completed_at": "2026-02-19T14:23:04Z",
  "result": {
    "data": {},
    "confidence": 0.84,
    "coverage_note": "One or more connectors were unavailable. Results may be incomplete."
  },
  "error": {
    "code": "analysis_failed",
    "message": "Insufficient graph data to complete analysis."
  }
}

Authorizations

​
Authorization
string
header
required

JWT issued by your organization's SAML/OIDC identity provider after authentication. Required for user-attributed queries. The sub claim is recorded verbatim in the audit trail.

Path Parameters

​
analysis_id
string
required

The analysis identifier returned when the analysis was submitted.

Response

Analysis result returned.

​
analysis_id
string
required

Unique identifier for this analysis. Use it to retrieve the result later.

Example:

"ana_01JNQBC4X8Y2Z3D"

​
analysis_type
string
required

The analysis type that was run.

​
status
enum<string>
required
  • complete: analysis ran successfully. result is populated.
  • failed: analysis could not complete. error is populated.
Available options:
complete,
failed
​
subject
object
required

The entity or set of entities the analysis runs against.

​
queried_at
string<date-time>
required
Example:

"2026-02-19T14:23:00Z"

​
audit
object
required
​
completed_at
string<date-time> | null
Example:

"2026-02-19T14:23:04Z"

​
result
object

The result envelope for a completed analysis. The data field contains the type-specific output. Its structure is documented per analysis type at GET /analysis/types/{type} and may evolve independently of this contract.

​
error
object

Present when status is failed.