> ## Documentation Index
> Fetch the complete documentation index at: https://docs.insightsecure.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Fetch Alerts

> List and filter Device Intelligence alerts

<ParamField header="Authorization" type="string" required>
  `Bearer {public_api_key}` — see [Authentication](/api-reference/authentication).
</ParamField>

### Query parameters

<ParamField query="status" type="string">Filter by disposition — `OPEN` | `REVIEWED` | `FALSE_POSITIVE` | `CONFIRMED`.</ParamField>
<ParamField query="action" type="string">Filter by decision — `REVIEW` | `BLOCK`.</ParamField>
<ParamField query="device_id" type="string">Filter to a single device.</ParamField>
<ParamField query="from" type="string">ISO-8601 start of date range.</ParamField>
<ParamField query="to" type="string">ISO-8601 end of date range.</ParamField>
<ParamField query="limit" type="integer" default="50">Max results per page.</ParamField>

### Response

Returns a list of alert objects, each matching the shape delivered to your webhook — see the full [Payload Reference](/api-reference/webhooks-and-payload) for every field.

```json Example response theme={null}
{
  "data": [
    {
      "alert_id": "ALRT-20251215-9103",
      "decision": { "action": "BLOCK", "severity": "HIGH", "risk_score": 0.82 },
      "entity": { "device": { "device_id": "d_4OwdmtpInKd9fW1fMBSAHN" } },
      "flags": ["VPN_SUSPECTED", "HIGH_VELOCITY"],
      "created_at": "2025-12-15T10:20:30.123Z"
    }
  ],
  "total": 1,
  "limit": 50
}
```