List and filter project assets using query-parameter-based criteria with OR logic.
What this endpoint does
List and filter assets within a project using query-parameter-based criteria. Assets represent the discoverable components of an attack surface — domains, hosts, and IP addresses — each tracked with an exposure score, discovery timeline, and optional enrichment data. Filters span asset identity, DNS configuration, certificates, open ports and services, web technologies, WHOIS data, geolocation, custom tags, and exposure severity. Multiple values for the same filter are combined with OR logic; for AND-based compound queries, use ASI Assets: Search instead. Use the additional_fields parameter to enrich results with detailed DNS records, certificates, open ports, WHOIS, web technologies, or exposure instances.
Response data
Returns your project's attack surface inventory — every discovered domain and IP address along with its current exposure score (0–99, higher is worse). Each asset's ID doubles as the asset_id parameter required by tagging, exposure, and detail endpoints throughout the ASI Project API. By default, results include only core identity and custom tags; request additional_fields to inline DNS records, TLS certificates, open ports and services, WHOIS data, web technologies, or active exposure instances. Pagination is cursor-based — pass meta.pagination.next_cursor from each response as the cursor parameter to get the next page.