Export endpoints to CSV
Exports up to 100,000 endpoints matching the same filters as the search endpoint.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
Field to filter Critical Asset automation by
name, OS, ip, edr_id, mdm_id, integration_source_id, custom_attribute asc, desc Only return Critical Assets
Only return currently contained endpoints
Filter by specific user ID
Include unmanaged endpoints in results
Filter by OS categories (supports multiple)
Windows, Windows Server, macOS, Linux, iOS, Android, ChromeOS, Network Device, Other Only return live/online endpoints
Filter by integration IDs (supports multiple)
Filter by group IDs (supports multiple)
Operator for combining multiple group filters. "and" = must be in ALL groups, "or" = must be in ANY group. Defaults to "or".
and, or Custom attribute key to match when filter is custom_attribute (dot-separated path e.g. "labels")
When true and asset deduplication is enabled for the team, return only canonical representative rows (canonical_id IS NULL)
When true together with dedupeCanonicalRoots and asset deduplication, return only canonical roots that have at least one merged duplicate from another source
Filter endpoints by team ID (for service providers)
When set and asset deduplication is enabled, return only endpoint rows in the canonical cluster containing this id (root or child)
Response
CSV export of endpoints
The response is of type file.

