Get one App Audit by id - poll this after POST /v1/apps/{app}/audit answered 202 (free).

GEThttps://api.appgoat.ai/v1/audits/{id}

FreeoperationId getAudit

status: queued, running, batched (narrative queued in the batch API), done or failed. include=facts adds the measured facts the report is built from.

Request

curl "https://api.appgoat.ai/v1/audits/123" \
  -H "x-api-key: $APPGOAT_API_KEY"

const res = await fetch("https://api.appgoat.ai/v1/audits/123", {
  headers: {
    "x-api-key": process.env.APPGOAT_API_KEY,
  },
});
const { data, meta } = await res.json();

import os, requests

res = requests.get(
    "https://api.appgoat.ai/v1/audits/123",
    headers={"x-api-key": os.environ["APPGOAT_API_KEY"]}
)
body = res.json()

Path parameters

idstringrequired

Query parameters

include"facts"

Response

200 with data: Audit. See the envelope for meta.

idstring

slugstring

urlstring

Shareable report page (not indexed by search engines).

status"queued" | "running" | "batched" | "done" | "failed"

storeStore

app_idstring

countrystring

mode"full" | "lite"

titlestring | null

icon_urlstring | null

scoreinteger | null

white_labelboolean

The report page carries your branding.

brandingany

labelstring | null

reportany

findingsFinding[]

Available as soon as the facts are gathered.

factsobject

Only with include=facts: listing, ratings, reviews, keywords (probe), competitors, localization, changes, gaps.

credits_chargedinteger

freeboolean

This was the organization's free first audit.

errorstring | null

created_atstring

finished_atstring | null

Example

{
  "data": {
    "id": "aud_3fK9aQ2mXc81LpRt",
    "slug": "string",
    "url": "https://appgoat.ai",
    "status": "queued",
    "store": "apple",
    "app_id": "324684580",
    "country": "us",
    "mode": "full",
    "title": "Spotify: Music and Podcasts",
    "icon_url": "string",
    "score": 1,
    "white_label": false,
    "branding": null,
    "label": "string",
    "report": null,
    "findings": [
      {
        "id": "string",
        "type": "striking_distance",
        "section": "metadata",
        "severity": "high",
        "title": "#14 for \"habit tracker adhd\" (not in the title or subtitle)",
        "evidence": {},
        "fix": "string",
        "playbook": "string"
      }
    ],
    "facts": {},
    "credits_charged": 1,
    "free": false,
    "error": "string",
    "created_at": "2026-10-22T10:00:00Z",
    "finished_at": "2026-10-22T10:00:00Z"
  },
  "meta": {
    "credits_used": 0,
    "credits_remaining": 9981,
    "request_id": "req_123"
  }
}

Status codes

200

The audit.

401invalid_api_key

Missing or invalid API key.

404not_found

Not found.

429rate_limited

Too many requests per second for your plan.