---
title: Get risk event/score information for a specific user
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Zero Trust](https://developers.cloudflare.com/api/resources/zero_trust)
[Risk Scoring](https://developers.cloudflare.com/api/resources/zero_trust/subresources/risk_scoring)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Get risk event/score information for a specific user
GET/accounts/{account\_id}/zt\_risk\_scoring/{user\_id}
Retrieves the detailed risk score breakdown for a specific user, including contributing factors.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required)
`Zero Trust: PII Read`
##### P ath ParametersExpand Collapse
account\_id: string
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>)
user\_id: string
formatuuid
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20user_id%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result: optional object {email, events, name, 2 more }
email: string
Link to this property
events: array of object {id, name, risk\_level, 2 more }
id: string
Link to this property
name: string
Link to this property
risk\_level: "low"or "medium"or "high"
One of the following:
"low"
Link to this property
"medium"
Link to this property
"high"
Link to this property
Link to this property
timestamp: string
formatdate-time
Link to this property
event\_details: optional unknown
Link to this property
Link to this property
name: string
Link to this property
last\_reset\_time: optional string
formatdate-time
Link to this property
risk\_level: optional "low"or "medium"or "high"
One of the following:
"low"
Link to this property
"medium"
Link to this property
"high"
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
result\_info: optional object {count, page, per\_page, 2 more }
count: optional number
Total number of results for the requested service.
Link to this property
page: optional number
Current page within paginated list of results.
Link to this property
per\_page: optional number
Number of results per page of results.
Link to this property
total\_count: optional number
Total results available without any search parameters.
Link to this property
total\_pages: optional number
The number of total pages in the entire result set.
Link to this property
[Link to this property](<#(resource)%20zero_trust.risk_scoring%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20result_info>)
### Get risk event/score information for a specific user
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/zt_risk_scoring/$USER_ID \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"email": "email",
"events": [
{
"id": "id",
"name": "name",
"risk_level": "low",
"timestamp": "2019-12-27T18:11:19.117Z",
"event_details": {}
}
],
"name": "name",
"last_reset_time": "2019-12-27T18:11:19.117Z",
"risk_level": "low"
},
"result_info": {
"count": 1,
"page": 1,
"per_page": 20,
"total_count": 2000,
"total_pages": 100
}
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"email": "email",
"events": [
{
"id": "id",
"name": "name",
"risk_level": "low",
"timestamp": "2019-12-27T18:11:19.117Z",
"event_details": {}
}
],
"name": "name",
"last_reset_time": "2019-12-27T18:11:19.117Z",
"risk_level": "low"
},
"result_info": {
"count": 1,
"page": 1,
"per_page": 20,
"total_count": 2000,
"total_pages": 100
}
}
```