--- title: Get risk event/score information for a specific user --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Zero Trust](https://developers.cloudflare.com/api/go/resources/zero_trust) [Risk Scoring](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/risk_scoring) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Get risk event/score information for a specific user client.ZeroTrust.RiskScoring.Get(ctx, userID, query) (\*[RiskScoringGetResponse](), error) GET/accounts/{account\_id}/zt\_risk\_scoring/{user\_id} Retrieves the detailed risk score breakdown for a specific user, including contributing factors. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `Zero Trust: PII Read` ##### ParametersExpand Collapse userID string formatuuid [Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20user_id%20%3E%20(schema)>)
query RiskScoringGetParams AccountID param.Field\[string] Link to this property
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type RiskScoringGetResponse struct{…} Email string Link to this property
Events \[]RiskScoringGetResponseEvent ID string Link to this property Name string Link to this property
RiskLevel RiskScoringGetResponseEventsRiskLevel One of the following: const RiskScoringGetResponseEventsRiskLevelLow RiskScoringGetResponseEventsRiskLevel = "low" Link to this property const RiskScoringGetResponseEventsRiskLevelMedium RiskScoringGetResponseEventsRiskLevel = "medium" Link to this property const RiskScoringGetResponseEventsRiskLevelHigh RiskScoringGetResponseEventsRiskLevel = "high" Link to this property
Link to this property Timestamp Time formatdate-time Link to this property EventDetails unknownOptional Link to this property
Link to this property Name string Link to this property LastResetTime TimeOptional formatdate-time Link to this property
RiskLevel RiskScoringGetResponseRiskLevelOptional One of the following: const RiskScoringGetResponseRiskLevelLow RiskScoringGetResponseRiskLevel = "low" Link to this property const RiskScoringGetResponseRiskLevelMedium RiskScoringGetResponseRiskLevel = "medium" Link to this property const RiskScoringGetResponseRiskLevelHigh RiskScoringGetResponseRiskLevel = "high" Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(model)%20RiskScoringGetResponse%20%3E%20(schema)>) ### Get risk event/score information for a specific user Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/option" "github.com/cloudflare/cloudflare-go/zero_trust" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) riskScoring, err := client.ZeroTrust.RiskScoring.Get( context.TODO(), "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e", zero_trust.RiskScoringGetParams{ AccountID: cloudflare.F("account_id"), }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", riskScoring.Email) } ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "email": "email", "events": [ { "id": "id", "name": "name", "risk_level": "low", "timestamp": "2019-12-27T18:11:19.117Z", "event_details": {} } ], "name": "name", "last_reset_time": "2019-12-27T18:11:19.117Z", "risk_level": "low" }, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "email": "email", "events": [ { "id": "id", "name": "name", "risk_level": "low", "timestamp": "2019-12-27T18:11:19.117Z", "event_details": {} } ], "name": "name", "last_reset_time": "2019-12-27T18:11:19.117Z", "risk_level": "low" }, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ```