AppOmni Discovery, Insights and Audit API

SaaS discovery of sanctioned and shadow applications, the Insights security-observation surface, and the AppOmni platform audit log with its action-type reference.

Operations 11

GET /api/v1/discovery/apps/ Retrieve App Discovery App #
GET /api/v1/discovery/user-app-pages/ Retrieve App Discovery UserAppPage #
GET /api/v1/discovery/users/ Retrieve App Discovery User #
GET /api/v1/insights/discoveredinsight/ List Insights #
PATCH /api/v1/insights/discoveredinsight/{insight_id}/dismiss/ Dismiss Insight [Dismiss a single insight] #
GET /api/v1/insights/discoveredinsightinstanceoccurrence/ List Occurrences (DB) #
GET /api/v1/insights/discoveredinsightinstanceoccurrence/{id}/ Get occurrence details (DB) #
PATCH /api/v1/insights/discoveredinsightinstanceoccurrence/bulk_dismiss/ Bulk dismiss Occurrences (DB) #
PATCH /api/v1/insights/discoveredinsightinstanceoccurrence/bulk_restore/ Bulk restore Occurrences (DB) #
GET /api/v1/core/auditlogs/ Get audit logs #
GET /api/v1/core/auditlogs/action_types/ List audit action types #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/appomni-discovery-insights-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

appomni-discovery-insights-api-openapi.yml Raw ↑
openapi: 3.1.0
info:
  title: AppOmni Discovery, Insights and Audit API
  description: 'SaaS discovery, security Insights and the AppOmni platform audit log.


    Derived faithfully from the AppOmni public Postman collection published by AppOmni at https://api.appomni.com/
    — every path, method, parameter, request body and example response below is taken verbatim from that
    collection. No operation was invented.'
  version: 1.0.0
  contact:
    name: AppOmni
    url: https://appomni.com/support/
  license:
    name: Proprietary
    url: https://appomni.com/terms-of-service/
  x-generated-from: AppOmni public Postman collection (publishedId 2sBXc7Mjib, published 2026-02-04)
  x-generated-source: https://api.appomni.com/api/collections/45135595/2sBXc7Mjib?segregateAuth=true&versionTag=latest
  x-generated-method: derived
  x-generated-date: '2026-09-04'
servers:
- url: https://{instance}.appomni.com
  description: AppOmni tenant. Replace {instance} with your AppOmni subdomain — e.g. `acme` if you log
    in at acme.appomni.com.
  variables:
    instance:
      default: example
      description: Your AppOmni tenant subdomain
security:
- bearerAuth: []
tags:
- name: Discovery
- name: Insights
- name: Audit Logs
paths:
  /api/v1/discovery/apps/:
    get:
      operationId: retrieveAppDiscoveryApp
      summary: Retrieve App Discovery App
      tags:
      - Discovery
      description: "Returns a specific Discovery App.\n\n Response Fields\n\n Same fields as List Discovery\
        \ apps endpoint, but returns a single object instead of an array."
      parameters:
      - name: app
        in: query
        required: false
        description: Query parameter app
        schema:
          type: string
      responses:
        '200':
          description: Retrieve Discovery App
          content:
            application/json:
              schema:
                type: object
              examples:
                RetrieveDiscoveryApp:
                  summary: Retrieve Discovery App
                  value:
                    saas_application:
                      name: AppOmni
                      saas_domain: appomni.com
                      company_name: AppOmni
                      categories: '[''Cloud Management'', ''Cloud Security'', ''Cyber Security'', ''SaaS'',
                        ''Software'']'
                      description: AppOmni SaaS security helps security and IT teams protect and monitor
                        their entire SaaS environment, from each vendor to every end-user.
                      founded_on: '2018'
                      headquarters_city: San Francisco
                      headquarters_country: United States
                    owner: user1@example.com
                    segments: /example1 /example2
                    subdomains: example
                    status: approved
                    criticality: high
                    cached_unique_users_count: 3
                    cached_total_ingress_kb: 100
                    cached_total_egress_kb: 100
                    cached_total_duration_ms: 60000
                    cached_first_seen: '1960-01-01T0:00:00.0000Z'
                    cached_last_seen: '2025-05-15T0:00:00.0000Z'
                    stats_last_updated: '2025-05-15T0:00:00.0000Z'
        '401':
          description: Unauthorized — missing or invalid AppOmni API token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden — the token lacks permission for this resource
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
  /api/v1/discovery/user-app-pages/:
    get:
      operationId: retrieveAppDiscoveryUserAppPage
      summary: Retrieve App Discovery UserAppPage
      tags:
      - Discovery
      description: "Returns Discovery UserAppPages filtered by user and/or app.\n\n Response Fields\n\n\
        \ Returns an array of UserAppPage objects with the same fields as List Discovery UserAppPages\
        \ endpoint."
      parameters:
      - name: user
        in: query
        required: false
        description: Query parameter user
        schema:
          type: string
      - name: app
        in: query
        required: false
        description: Query parameter app
        schema:
          type: string
      responses:
        '200':
          description: Retrieve Discovery UserAppPage
          content:
            application/json:
              schema:
                type: array
                items:
                  type: object
              examples:
                RetrieveDiscoveryUserAppPage:
                  summary: Retrieve Discovery UserAppPage
                  value:
                  - identity:
                      email: user1@example.com
                      user_agents_seen: '["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36
                        (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"]'
                    org_saas_application:
                      saas_application:
                        name: AppOmni
                        saas_domain: appomni.com
                        company_name: AppOmni
                        categories: '[''Cloud Management'', ''Cloud Security'', ''Cyber Security'', ''SaaS'',
                          ''Software'']'
                        description: AppOmni SaaS security helps security and IT teams protect and monitor
                          their entire SaaS environment, from each vendor to every end-user.
                        founded_on: '2018'
                        headquarters_city: San Francisco
                        headquarters_country: United States
                      owner: user1@example.com
                      segments: /example1 /example2
                      subdomains: example
                      status: approved
                      criticality: high
                      cached_unique_users_count: 3
                      cached_total_ingress_kb: 100
                      cached_total_egress_kb: 100
                      cached_total_duration_ms: 60000
                      cached_first_seen: '1960-01-01T0:00:00.0000Z'
                      cached_last_seen: '2025-05-15T0:00:00.0000Z'
                      stats_last_updated: '2025-05-15T0:00:00.0000Z'
                    segments: /example1
                    subdomains: example
                    duration_ms: 30000
                    data_ingress_kb: 50
                    data_egress_kb: 50
                    visits_count: 12
                    first_visited_at: '1960-01-01T0:00:00.0000Z'
                    last_visited_at: '2025-05-15T0:00:00.0000Z'
                  - identity:
                      email: user1@example.com
                      user_agents_seen: '["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36
                        (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"]'
                    org_saas_application:
                      saas_application:
                        name: Omniscreen
                        saas_domain: omniscreen.io
                        company_name: Omniscreen
                        categories: '[''Cyber Security'']'
                        description: Omniscreen is the industry's most effective network security posture
                          management (NSPM) tool, enabling organizations to apply open-source, third-party,
                          or proprietary scanning methodologies against the web-facing infrastructure
                          of their cloud implementations.
                        founded_on: '2024'
                        headquarters_city: Austin
                        headquarters_country: United States
                      owner: user2@example.com
                      segments: ''
                      subdomains: ''
                      status: approved
                      criticality: high
                      cached_unique_users_count: 5
                      cached_total_ingress_kb: 200
                      cached_total_egress_kb: 200
                      cached_total_duration_ms: 1200000
                      cached_first_seen: '1960-01-01T0:00:00.0000Z'
                      cached_last_seen: '2025-05-15T0:00:00.0000Z'
                      stats_last_updated: '2025-05-15T0:00:00.0000Z'
                    segments: ''
                    subdomains: ''
                    duration_ms: 10000
                    data_ingress_kb: 100
                    data_egress_kb: 100
                    visits_count: 50
                    first_visited_at: '1960-01-01T0:00:00.0000Z'
                    last_visited_at: '2025-05-15T0:00:00.0000Z'
        '401':
          description: Unauthorized — missing or invalid AppOmni API token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden — the token lacks permission for this resource
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
  /api/v1/discovery/users/:
    get:
      operationId: retrieveAppDiscoveryUser
      summary: Retrieve App Discovery User
      tags:
      - Discovery
      description: "Returns a specific Discovery user.\n\n Response Fields\n\n Field \n Data Type \n Description\
        \ \n Example \n\n email \n String \n The email address of the Discovery user \n \" user1@example.com\
        \ \" \n\n user_agents_seen \n String \n JSON array of user agent strings the Discovery user has\
        \ generated \n \"[\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)...\"]\""
      parameters:
      - name: user
        in: query
        required: false
        description: Query parameter user
        schema:
          type: string
      responses:
        '200':
          description: Retrieve Discovery User
          content:
            application/json:
              schema:
                type: object
              examples:
                RetrieveDiscoveryUser:
                  summary: Retrieve Discovery User
                  value:
                    email: user1@example.com
                    user_agents_seen: '["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36
                      (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"]'
        '401':
          description: Unauthorized — missing or invalid AppOmni API token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden — the token lacks permission for this resource
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
  /api/v1/insights/discoveredinsight/:
    get:
      operationId: listInsights
      summary: List Insights
      tags:
      - Insights
      description: "Returns a list of all insights matching the specified filter criteria.\n\n This request\
        \ returns a list of insights filtered by the specified parameters. If no parameters are set, all\
        \ insights are returned for the tenant.\n\n Response Fields\n\n Field \n Data Type \n Description\
        \ \n Example \n\n id \n Integer \n Unique identifier for the insight \n 102455 \n\n created \n\
        \ String (ISO datetime) \n Timestamp when the insight was first created \n \"2025-09-04T03:45:55.343531Z\"\
        \ \n\n modified \n String (ISO datetime) \n Timestamp when the insight was last modified \n \"\
        2025-09-17T17:52:48.138399Z\" \n\n external_id \n String or null \n External system identifier,\
        \ typically null \n null \n\n created_by \n Integer \n ID of the user who created the insight\
        \ \n 65 \n\n modified_by \n Integer \n ID of the user who last modified the insight \n 6734 \n\
        \n owner \n Integer or null \n ID of the user who owns the insight, typically null \n null \n\n\
        \ label \n String \n Human-readable title/summary of the insight \n \"Data records exposed to\
        \ anonymous world\" \n\n open_occurrences_summary \n Integer \n Number of currently open occurrences\
        \ for this insight \n 1 \n\n dismissed_occurrences_summary \n Integer \n Number of dismissed occurrences\
        \ for this insight \n 0 \n\n description \n String \n Detailed explanation of what the insight\
        \ represents \n \"Data records exposed to the anonymous world...\" \n\n service_type \n String\
        \ \n Type of service where the insight was discovered \n \"sfdc\" \n\n insight_type \n String\
        \ \n Category type of the insight \n \"data_access\" \n\n insight_category \n String \n Specific\
        \ subcategory of the insight \n \"authorization\" \n\n risk_score \n Integer \n Current risk score\
        \ (0-100) after any user customizations \n 100 \n\n risk_level \n String \n Current risk level\
        \ classification \n \"critical\" \n\n appomni_risk_score \n Integer \n Original risk score calculated\
        \ by AppOmni (0-100) \n 100 \n\n appomni_risk_level \n String \n Original risk level classification\
        \ by AppOmni \n \"critical\" \n\n confidence \n Integer \n Confidence level of the insight accuracy\
        \ (0-100) \n 100 \n\n first_seen \n String (ISO datetime) \n When the insight was first detected/discovered\
        \ \n \"2025-09-04T03:45:55.343622Z\" \n\n last_seen \n String (ISO datetime) \n When the insight\
        \ was most recently observed \n \"2025-09-17T17:52:38.035581Z\" \n\n last_evaluated \n String\
        \ (ISO datetime) \n When the insight was last evaluated by the system \n \"2025-09-17T08:19:24.773115Z\"\
        \ \n\n status \n String \n Current status of the insight \n \"open\" \n\n tags \n Array[Integer]\
        \ \n List of tag IDs associated with this insight \n [] \n\n dismissal_expires \n String (ISO\
        \ datetime) or null \n When the dismissal expires if insight is dismissed \n null \n\n dismissed_on\
        \ \n String (ISO datetime) or null \n When the insight was dismissed, if applicable \n null \n\
        \n internal_name \n String \n Internal system identifier for the insight type \n \"sfdc.scheduled.guest.GuestAccessibleRecordsInsight\"\
        \ \n\n external_data \n Object or null \n Additional external data associated with the insight\
        \ \n null \n\n internal_id \n String (UUID) \n Internal unique identifier for the insight \n \"\
        f1c4a87d-6f83-4b2e-a960-2f8e3fdba9d2\" \n\n last_resolved_on \n String (ISO datetime) or null\
        \ \n When the insight was last marked as resolved \n \"2025-09-17T17:52:24.153210Z\" \n\n total_filtered_instance_data_count\
        \ \n Integer \n Total count of data instances after applying filters \n 1 \n\n dismissed_monitored_service\
        \ \n Array[Integer] \n IDs of monitored services where insight is dismissed \n [] \n\n dismissed_environments\
        \ \n Array[Integer] \n IDs of environments where insight is dismissed \n [] \n\n dismissal_reason_value\
        \ \n String or null \n Internal code for dismissal reason \n null \n\n dismissal_reason_label\
        \ \n String or null \n Human-readable dismissal reason \n null \n\n has_max_occurrences \n Boolean\
        \ \n Whether insight has reached maximum occurrence limit \n false"
      responses:
        '200':
          description: List Insights
          content:
            application/json:
              schema:
                type: object
              examples:
                ListInsights:
                  summary: List Insights
                  value:
                    count: 245
                    next: https://example.appomni.com/api/v1/insights/discoveredinsight/?limit=50&offset=50
                    previous: null
                    results:
                    - id: 102455
                      created: '2025-09-04T03:45:55.343531Z'
                      modified: '2025-09-17T17:52:48.138399Z'
                      external_id: null
                      created_by: 65
                      modified_by: 6734
                      owner: null
                      label: Data records exposed to anonymous world
                      open_occurrences_summary: 1
                      dismissed_occurrences_summary: 0
                      description: Data records exposed to the anonymous world should be limited to public
                        data.
                      service_type: sfdc
                      insight_type: data_access
                      insight_category: authorization
                      risk_score: 100
                      risk_level: critical
                      appomni_risk_score: 100
                      appomni_risk_level: critical
                      confidence: 100
                      first_seen: '2025-09-04T03:45:55.343622Z'
                      last_seen: '2025-09-17T17:52:38.035581Z'
                      last_evaluated: '2025-09-17T08:19:24.773115Z'
                      status: open
                      tags: []
                      dismissal_expires: null
                      dismissed_on: null
                      internal_name: sfdc.scheduled.guest.GuestAccessibleRecordsInsight
                      external_data: null
                      internal_id: f1c4a87d-6f83-4b2e-a960-2f8e3fdba9d2
                      last_resolved_on: '2025-09-17T17:52:24.153210Z'
                      total_filtered_instance_data_count: 1
                      dismissed_monitored_service: []
                      dismissed_environments: []
                      dismissal_reason_value: null
                      dismissal_reason_label: null
                      has_max_occurrences: false
        '401':
          description: Unauthorized — missing or invalid AppOmni API token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden — the token lacks permission for this resource
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
  /api/v1/insights/discoveredinsight/{insight_id}/dismiss/:
    patch:
      operationId: dismissInsightDismissASingleInsight
      summary: Dismiss Insight [Dismiss a single insight]
      tags:
      - Insights
      description: "This endpoint updates the specified insight by setting the status to dismissed.\n\n\
        \ Request Body Fields: \n\n- message: String - Optional comment for dismissal (required)\n\n-\
        \ expires: String (ISO datetime) - Optional expiration date for dismissal"
      parameters:
      - name: insight_id
        in: path
        required: true
        description: Path parameter insight_id
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
            example:
              message: '{{optional_comment_for_feed_log}}'
              expires: '{{iso_datetime_for_dismissal_expiration_date_omit_for_permanent_dismissal}}'
      responses:
        '200':
          description: Dismiss Insight [Dismiss a single insight]
          content:
            text/plain:
              schema:
                type: string
              example: '/*

                RESPONSE SCHEMA DOCUMENTATION:


                | Field                              | Data Type                     | Description                                          |
                Example                                     |

                |------------------------------------|-------------------------------|------------------------------------------------------|---------------------------------------------|

                | id                                 | Integer                       | Unique identifier                                    |
                3563                                        |

                | created                            | String (ISO datetime)        | Timestamp when record
                was created                    | "2022-06-10T08:23:31.577633Z"             |

                | modified                           | String (ISO datetime)        | Timestamp when record
                was last modified              | "2023-02-24T23:41:07.792650Z"             |

                | external_id                        | String or null                | External system
                identifier                           | null                                        |

                | created_by                         | Integer                       | ID of user who
                created the record                    | 1010                                        |

                | modified_by                        | Integer                       | ID of user who
                last modified the record              | 1010                                        |

                | owner                              | Integer or null               | ID of the record
                owner  '
        '401':
          description: Unauthorized — missing or invalid AppOmni API token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden — the token lacks permission for this resource
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
  /api/v1/insights/discoveredinsightinstanceoccurrence/:
    get:
      operationId: listOccurrencesDB
      summary: List Occurrences (DB)
      tags:
      - Insights
      description: "Returns a list of occurrences for all Insights for a tenant.\n\n NOTE : The default\
        \ behavior of this endpoint uses pagination with a limit of 100 results per request, so you do\
        \ not need to specify offset or limit .\n\n However, changing the default limit is supported and\
        \ offset is still required to access additional pages apart from the first one.\n\n Response Fields\n\
        \n Field \n Data Type \n Description \n Example \n\n id \n String (UUID) \n Unique identifier\
        \ for the occurrence \n \"98b3b123-e017-4377-b864-7134e5e2b84b\" \n\n external_id \n String or\
        \ null \n External system identifier, typically null \n null \n\n org \n Integer \n Organization\
        \ ID \n 23 \n\n owner \n Integer or null \n ID of the user who owns the occurrence \n null \n\n\
        \ created_by \n Integer \n ID of the user who created the occurrence \n 65 \n\n modified_by \n\
        \ Integer \n ID of the user who last modified the occurrence \n 65 \n\n unique_identifier \n String\
        \ (JSON) \n JSON string containing context information \n \"{\"service_type\": \"sfdc\", \"object_type\"\
        : \"sobject\", \"monitored_service_id\": 81964, \"object_id\": \"0DBDX000000CmgL4AS\", \"perspective_id\"\
        : 169439}\" \n\n md_kind \n String \n Metadata kind identifier for the object type \n \"sfdc.aotypes.objects.sfdcserviceobject\"\
        \ \n\n md_version \n Integer \n Metadata version number \n 1 \n\n object_id \n String \n Identifier\
        \ of the specific object instance \n \"0DBDX000000CmgL4AS\" \n\n object_label \n String \n Human-readable\
        \ label for the object \n \"OmniCommunity#4638\" \n\n object_type \n String \n Type of the object\
        \ \n \"sobject\" \n\n object_type_label \n String \n Human-readable label for the object type\
        \ \n \"SObject\" \n\n search_data \n String \n Searchable text data for the occurrence \n \"network\
        \ OmniCommunity#4638 https://business-app-4638-dev-ed.scratch.my.site.com/\" \n\n monitored_service_id\
        \ \n Integer \n ID of the monitored service this occurrence belongs to \n 81964 \n\n discovered_insight\
        \ \n Integer \n ID of the parent insight \n 102455 \n\n discovered_insight_instance \n Integer\
        \ \n ID of the parent insight instance \n 317109 \n\n perspective \n Integer or null \n ID of\
        \ the perspective/user context \n 169439 \n\n data \n Array[Object] \n Array of data objects containing\
        \ specific details \n [{ \"data_type\": \"field\", \"key\": \"id\", \"value\": \"0DBDX000000CmgL4AS\"\
        , \"md_kind\": \"ServiceObjectData\", \"md_version\": 1 }] \n\n first_seen \n String (ISO datetime)\
        \ \n When occurrence was first detected \n \"2025-09-04T03:45:56.443826+00:00\" \n\n last_seen\
        \ \n String (ISO datetime) \n When occurrence was last observed \n \"2025-09-10T04:52:47.726083+00:00\"\
        \ \n\n dismissed_by \n Integer or null \n ID of user who dismissed the occurrence \n null \n\n\
        \ dismissal_message \n String or null \n Message provided when dismissing \n null \n\n created\
        \ \n String (ISO datetime) \n Timestamp when occurrence was created \n \"2025-09-04T03:45:56.471885+00:00\"\
        \ \n\n modified \n String (ISO datetime) \n Timestamp when occurrence was last modified \n \"\
        2025-09-10T04:52:47.726083+00:00\" \n\n sobject_name \n String \n Name of the SObject type \n\
        \ \"network\" \n\n sobject_label \n String \n Label of the SObject type \n \"Network\" \n\n table_name\
        \ \n String or null \n Database table name \n null \n\n internal_table_name \n String or null\
        \ \n Internal database table name \n null \n\n record_type \n String or null \n Record type identifier\
        \ \n null \n\n ai_tags \n Array or null \n AI-generated tags \n null \n\n di_status \n String\
        \ \n Parent insight status \n \"open\" \n\n dii_status \n String \n Insight instance status \n\
        \ \"open\" \n\n monitored_service_name \n String \n Name of the monitored service \n \"SFDC-Coretest-Scratch-Int\"\
        \ \n\n service_type \n String \n Type of service \n \"sfdc\" \n\n perspective_username \n String\
        \ or null \n Username of the perspective user \n \" test-voxziptfghvx@example.com \" \n\n thread_label\
        \ \n String \n Label for the insight instance thread \n \"Network\" \n\n internal_name \n String\
        \ \n Internal system name for the insight \n \"sfdc.scheduled.guest.GuestAccessibleRecordsInsight\"\
        \ \n\n risk_score \n Integer \n Risk score associated with this occurrence \n 100 \n\n status\
        \ \n String \n Current status of the occurrence \n \"open\" \n\n dismissal_reason_value \n String "
      parameters:
      - name: limit
        in: query
        required: false
        description: Query parameter limit
        schema:
          type: integer
        example: '100'
      - name: offset
        in: query
        required: false
        description: Query parameter offset
        schema:
          type: integer
        example: '0'
      responses:
        '200':
          description: List Occurrences (DB)
          content:
            application/json:
              schema:
                type: object
              examples:
                ListOccurrencesDB:
                  summary: List Occurrences (DB)
                  value:
                    count: 1247
                    next: https://example.appomni.com/api/v1/insights/discoveredinsightinstanceoccurrence/?limit=100&offset=100
                    previous: null
                    results:
                    - DiscoveredInsightInstanceOccurrence_ai_tags+: null
                      external_id: null
                      org: 23
                      owner: null
                      created_by: 65
                      modified_by: 65
                      id: 98b3b123-e017-4377-b864-7134e5e2b84b
                      unique_identifier: '{"service_type": "sfdc", "object_type": "sobject", "monitored_service_id":
                        81964, "object_id": "0DBDX000000CmgL4AS", "perspective_id": 169439}'
                      md_kind: sfdc.aotypes.objects.sfdcserviceobject
                      md_version: 1
                      object_id: 0DBDX000000CmgL4AS
                      object_label: OmniCommunity#4638
                      object_type: sobject
                      object_type_label: SObject
                      search_data: network OmniCommunity#4638 https://business-app-4638-dev-ed.scratch.my.site.com/
                      monitored_service_id: 81964
                      discovered_insight: 102455
                      discovered_insight_instance: 317109
                      perspective: 169439
                      data:
                      - data_type: field
                        key: id
                        value: 0DBDX000000CmgL4AS
                        md_kind: ServiceObjectData
                        md_version: 1
                      - data_type: field
                        key: name
                        value: OmniCommunity#4638
                        md_kind: ServiceObjectData
                        md_version: 1
                      - data_type: field
                        key: sobjecttype
                        value: Network
                        md_kind: ServiceObjectData
                        md_version: 1
                      - data_type: field
                        key: object_name
                        value: network
                        md_kind: ServiceObjectData
                        md_version: 1
                      - data_type: field
                        key: object_label
                        value: Network
                        md_kind: ServiceObjectData
                        md_version: 1
                      - data_type: field
                        key: url
                        value: https://business-app-4638-dev-ed.scratch.my.site.com/
                        md_kind: ServiceObjectData
                        md_version: 1
                      first_seen: '2025-09-04T03:45:56.443826+00:00'
                      last_seen: '2025-09-10T04:52:47.726083+00:00'
                      dismissed_by: null
                      dismissal_message: null
                      created: '2025-09-04T03:45:56.471885+00:00'
                      modified: '2025-09-10T04:52:47.726083+00:00'
                      sobject_name: network
                      sobject_label: Network
                      table_name: null
                      internal_table_name: null
                      record_type: null
                      ai_tags: null
                      di_status: open
                      dii_status: open
                      monitored_service_name: SFDC-Coretest-Scratch-Int
                      service_type: sfdc
                      perspective_username: test-voxziptfghvx@example.com
                      thread_label: Network
                      internal_name: sfdc.scheduled.guest.GuestAccessibleRecordsInsight
                      risk_score: 100
                      status: open
                      dismissal_reason_value: null
                      remediation_due: null
                      remediation_start: null
                      dismissed_on: null
                      dismissal_expires: null
                      message: 'SObject: network

                        Record: OmniCommunity#4638

                        Site: https://business-app-4638-dev-ed.scratch.my.site.com/

                        '
                      message_data:
                      - label: SObject
                        value: network
                        type: string
                      - label: Record
                        value: OmniCommunity#4638
                        type: string
                      - label: Site
                        value: https://business-app-4638-dev-ed.scratch.my.site.com/
                        type: string
                      dynamic_data:
                        sobject: network
                        record: OmniCommunity#4638
                        site: https://business-app-4638-dev-ed.scratch.my.site.com/
                      dismissal_reason_label: null
        '401':
          description: Unauthorized — missing or invalid AppOmni API token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Forbidden — the token lacks permission for this resource
          content:
            application/json:
           

# --- truncated at 32 KB (63 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/appomni/refs/heads/main/openapi/appomni-discovery-insights-api-openapi.yml