Device Details v2.1

API version2.1
Last Update2/11/2015
AuthenticationYES
Response FormatJSON
HTTP MethodGET
Rate limitedYES
Requests per rate limit10/min

Use to fetch device details by ID or MAC address.

API URL

Copy

Request Parameters

KeyDatatypeParameter TypeRequiredDescriptionDefault
access_tokenstringURLYesaccess token which archived from OAuth authentication step
valuestringURLYesThe Device ID or MAC Address of a device you want to fetch information.
optintURLOptionalType of the given value in the URL. 0 - the given value is HWID. 1 - the given value is MAC Address0

Response HTTP Code

HTTP CodeDescription
200Success
401Unauthorized. Your access_token is invalid or expired
404Not found

Response Parameters

KeyDatatypeDescription
hwidstringHardware ID of the device
statusint

Reports the health status of the device. This status is based on the defined policy within MetaAccess. Value could be:

  • 0 – the endpoint is in compliance with MetaAccess account’s policies

  • 1 – the endpoint is not in compliance with MetaAccess account’s policies

  • 3 – the endpoint is still sending information to MetaAccess and not yet completed

critical_issueint

This critical status is based on the defined policy within MetaAccess. This status apply for the whole device. Value could be:

  • 0 – the endpoint doesn't have critical issues

  • 1 – the endpoint has critical issues

total_issueintNumber of issues were seen on the device
total_critical_issueintNumber of critical issues were seen on the device
exemptint

Exempt status of the device. Value could be:

  • 0 – Endpoint device is not exempted

  • 1 – Endpoint device is exempted

hostnamestringHostname of the device. This field will be remove if it's a non-collectible to each fields which related to privacy.
countrystringRegion where the device IP geographically represents
machine_typestringThe type of devices
agent_versionstringLocal resident MetaAccess agent version
activeint
  • 1: device is active

  • 0: device is deactive

last_seenstringThe last timestamp when MetaAccess reports data to the Cloud, (GMT format)
user_infoobjectUser information block
user_info.usernamestringusername who currently logs in. This field will be remove if it's set as privacy
user_info.domainstringCurrently logged in user domain
remediation_linkstringremediation page URL of the given device
applicationsarray<object>Details of each posture category
applications.categorystringcategory which the current block stands for
applications.critical_statusint

This critical issue status is based on the defined policy within MetaAccess. This critical issue status apply for each category. Value could be:

  • 0 – good (blue) if this category is healthy AND the box in Configuration is checked

  • 1 – bad (red) if the category is healthy AND the box in Configuration is checked.

  • -1 – If the box in Configuration is not checked

applications.has_issueint0 - no issue, 1 - out of compliance
applications.has_critical_issueint0 - no critical issue, 1 - has critical issue
applications.appsarray<object>detailed products in a category
applications.apps.namestringName of the product
applications.apps.vendorstringName of the product vendor
applications.apps.versionstringProduct version
applications.apps.healthobjecthealth informationof a product
applications.apps.health.statusstringproduct compliance details
applications.apps.health.is_issueint1 - is an issue, 0 - not an issue
os_infoobjectOperation system information
os_info.familystringOS family
os_info.namestringOS name
os_info.vendorstringOS vendor
os_info.versionstringOS version
os_info.service_pack_versionstringOS Service Pack Version
os_info.architecturestringOS architecture
os_info.os_languagestringOS language
os_info.user_password_setintIf user password is set on OS, 1 is set, 0 is not set
network_infoarray<object>Network adapter information block
network_info.mac_addrstringMAC address for adapter. This field will be remove if it's a non-collectible to each fields which related to privacy.
network_info.ipv4_addrstringIPV4 address. This field will be remove if it's a non-collectible to each fields which related to privacy.
network_info.ipv6_addrstringIPV6 address. This field will be remove if it's a non-collectible to each fields which related to privacy.
infectionsarrayInfections information
infections.categorystringInfections category name
infections.critical_statusint0 - no critical issue, 1 - has critical issue
infections.total_threatsintnumber of detected threats
infections.has_issueint0 - no issue, 1 - out of compliance
infections.has_critical_issueint0 - no critical issue, 1 - has critical issue
infections.threatsarray<object>detailed threats
infections.threats.ThreatNamestringName of threat found
infections.threats.Filestringfile which the threat found
infections.threats.FoundTimestringThe timestamp in GMT format when the threat found.
infections.threats.hashstringhash code of the scanning object if the object is a file or process
infections.threats.linkstringa URL to view scan details on Metadefender Cloud
infections.last_scan_timestringThe timestamp in GMT format when the agent did a scan
infections.total_enginesintnumber of engines scanned a file
infections.last_reportstringthe timestamp in GMT format when agent reported threat log from local anti-malware product

Example

Example Request

Copy

Example Response

Copy
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard