> ## Documentation Index > Fetch the complete documentation index at: https://docs.infrawatch.com/llms.txt > Use this file to discover all available pages before exploring further. # Get an alert rule. ## OpenAPI ````yaml https://api.infrawatch.com/openapi.json?contract=d15375c get /projects/{project_uuid}/alerting/rules/{rule_uuid} openapi: 3.1.0 info: description: >- Customer-facing Infrawatch APIs. Authenticate with an API key unless an operation documents another supported credential. ### Infrawatch Public API Public API authenticated exclusively with Infrawatch API keys. ### Infrawatch Customer Alerting API Project alert rules, destinations, silences, inbox state, and delivery history. ### Infrawatch Remote Browser API Project-scoped interactive browser sessions owned by Platform Core. Session admission, lifecycle, RBAC, audit, usage, screenshot history, and stream tickets are Platform Core resources. The browser master is private infrastructure and its identifiers, proxy routes, process options, and credentials are never exposed by this API. A session and all of its evidence are private to the credential that created it. Project managers may list project session metadata, inspect one session's metadata, and terminate it, but cannot access its live stream, screenshots, or network events. Terminal session metadata and screenshots are retained indefinitely. A creator can replay a terminal session as a new queued resource while preserving a durable link to the source session. ### Infrawatch ESI API Customer-facing External Surface Intelligence API for project-scoped product data authenticated by an Infrawatch API key. API keys are constrained to their immutable owner's project ceiling and assigned ESI scopes; human project-manager fallback never expands an API key. Authorised API-key requests are rate-limited and consume monthly quota. ### Infrawatch Reports API Threat report discovery API authenticated by an Infrawatch API key. ### Infrawatch Public Rules API Account-aware rule authoring, taxonomy, catalogue, and runtime observations for API clients. ### Infrawatch Search API Search hosts, services, DNS records, and certificates. Complete percent-encoded query strings are limited to 65536 bytes. title: Infrawatch Customer API version: 1.0.0 servers: - description: Infrawatch customer API url: https://api.infrawatch.com/api/v1 security: [] tags: - name: API Usage - name: Projects - name: Alert destinations - name: Alert rules - name: Alert silences - name: Alerts - name: Browser sessions - name: Browser evidence - name: Browser streaming - name: Access - name: Inventory - name: Dangling DNS - name: Findings - name: Secrets - name: Typosquatting - name: Services - name: AI Surface - description: Search hosts, services, DNS records, certificates, and open directories. name: Search - name: Dashboard - name: Reports - name: Rules - name: Rule tags - name: Rule observations paths: /projects/{project_uuid}/alerting/rules/{rule_uuid}: servers: - url: https://api.infrawatch.com/api/v1 parameters: - $ref: '#/components/parameters/alerting_v1_AlertingProjectUUID' - $ref: '#/components/parameters/alerting_v1_AlertRuleUUID' get: tags: - Alert rules summary: Get an alert rule. operationId: getAlertRule responses: '200': content: application/json: schema: properties: rule: $ref: '#/components/schemas/alerting_v1_AlertRule' required: - rule type: object description: Alert rule. '403': $ref: 67054e1a-a36a-4bd7-adc4-b9e4983195f6 '404': $ref: 40e2103b-de6e-46e9-9a22-bc067c34ee66 security: - apiKeyAuth: [] components: parameters: alerting_v1_AlertingProjectUUID: in: path name: project_uuid required: true schema: format: uuid type: string alerting_v1_AlertRuleUUID: in: path name: rule_uuid required: true schema: format: uuid type: string schemas: alerting_v1_AlertRule: additionalProperties: false oneOf: - not: anyOf: - required: - finding_filter - required: - certificate_rule_uuid properties: source_kind: const: saved_query required: - schedule_uuid - not: anyOf: - required: - schedule_uuid - required: - certificate_rule_uuid properties: source_kind: const: finding required: - finding_filter - not: anyOf: - required: - schedule_uuid - required: - finding_filter properties: source_kind: const: certificate required: - certificate_rule_uuid properties: assignee_membership_uuid: format: uuid type: string certificate_rule_uuid: format: uuid type: string count_metric: enum: - result_count - added_count - removed_count - changed_count type: string count_operator: enum: - gt - gte - lt - lte - eq type: string count_threshold: format: int64 minimum: 0 type: integer created_at: format: date-time type: string destination_uuids: items: format: uuid type: string minItems: 1 type: array uniqueItems: true enabled: type: boolean escalation_after_seconds: maximum: 604800 minimum: 300 type: integer escalation_severity: enum: - medium - high - critical type: string event_types: items: enum: - ADDED - REMOVED - CHANGED type: string minItems: 1 type: array uniqueItems: true finding_filter: $ref: '#/components/schemas/alerting_v1_FindingAlertFilter' group_wait_seconds: maximum: 3600 minimum: 0 type: integer name: maxLength: 160 type: string notify_resolved: type: boolean repeat_interval_seconds: maximum: 604800 minimum: 300 type: integer revision: format: int64 minimum: 1 type: integer schedule_uuid: format: uuid type: string severity: enum: - low - medium - high - critical type: string source_kind: enum: - saved_query - finding - certificate type: string trigger_kind: enum: - change - count_threshold type: string updated_at: format: date-time type: string uuid: format: uuid type: string required: - uuid - source_kind - trigger_kind - name - enabled - revision - severity - event_types - group_wait_seconds - notify_resolved - destination_uuids - created_at - updated_at type: object alerting_v1_FindingAlertFilter: additionalProperties: false description: Immutable source binding for a finding rule after creation. properties: confidences: items: enum: - low - medium - high type: string maxItems: 25 type: array uniqueItems: true exposure_kinds: items: maxLength: 256 minLength: 1 type: string maxItems: 25 type: array uniqueItems: true q: maxLength: 256 type: string severities: items: enum: - critical - high - moderate - low - informational type: string maxItems: 25 type: array uniqueItems: true statuses: items: enum: - open - accepted type: string maxItems: 25 type: array uniqueItems: true type: object securitySchemes: apiKeyAuth: description: >- Infrawatch API key. Supply the complete key directly as the header value. in: header name: X-API-Key type: apiKey ````