---
updatedAt: 2026-09-16T17:17:03.000Z
agentTools:
  siteIndex: https://developer.n-able.com/llms.txt
  projectIndex: https://developer.n-able.com/adlumin/llms.txt
---

# List at-risk network shares

Returns network shares that have been identified as at-risk due to
overly permissive access controls (e.g., world-readable or writable shares,
shares accessible to privileged groups). Excludes shares with active exemptions.


# OpenAPI definition

```json
{
  "openapi": "3.0.3",
  "info": {
    "title": "Adlumin XDR/MDR API",
    "description": "The Adlumin API provides programmatic access to your organization's security data,\nincluding detections, at-risk assets, endpoint telemetry, network health, firewall\nevents, and compliance insights.\n\n## Authentication\nAll requests require an API key passed in the `x-api-key` header.\n\nMost read endpoints also require a `tenant_id` query parameter to scope\nresults to a specific tenant. `acknowledge_detections` and the firewall\naggregation queries do not use `tenant_id`, since scoping is already\nimplied by the detection IDs or aggregation request itself.\n\n## Pagination\nList endpoints support cursor-style pagination via `page` and `per_page` parameters.\nResponses include a `total_count` field to support calculating total pages.\n\n## Date Filtering\nMost endpoints accept `since` and `until` query parameters (ISO 8601 format)\nto scope results to a time window.\n",
    "version": "1.4.0",
    "contact": {
      "name": "Adlumin Support",
      "url": "https://www.adlumin.com"
    }
  },
  "servers": [
    {
      "url": "https://api.adlumin.com/v1",
      "description": "Production"
    }
  ],
  "security": [
    {
      "ApiKeyAuth": []
    }
  ],
  "tags": [
    {
      "name": "At-Risk Assets",
      "description": "Hosts, groups, and shares flagged as at-risk"
    }
  ],
  "paths": {
    "/at_risk_shares": {
      "get": {
        "tags": [
          "At-Risk Assets"
        ],
        "summary": "List at-risk network shares",
        "description": "Returns network shares that have been identified as at-risk due to\noverly permissive access controls (e.g., world-readable or writable shares,\nshares accessible to privileged groups). Excludes shares with active exemptions.\n",
        "parameters": [
          {
            "$ref": "#/components/parameters/TenantId"
          },
          {
            "$ref": "#/components/parameters/Page"
          },
          {
            "$ref": "#/components/parameters/PerPage"
          },
          {
            "$ref": "#/components/parameters/Search"
          },
          {
            "$ref": "#/components/parameters/SortColumn"
          },
          {
            "$ref": "#/components/parameters/SortDir"
          },
          {
            "name": "type",
            "in": "query",
            "description": "Result set to return",
            "schema": {
              "type": "string",
              "enum": [
                "risky_shares",
                "risky_exemptions"
              ],
              "default": "risky_shares"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Paginated list of at-risk network shares",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/PaginatedResponse"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "data": {
                          "type": "array",
                          "items": {
                            "$ref": "#/components/schemas/AtRiskShare"
                          }
                        }
                      }
                    }
                  ]
                },
                "example": {
                  "total_count": 3,
                  "page": 1,
                  "per_page": 25,
                  "data": [
                    {
                      "id": "shr_1d9e2b",
                      "share_name": "Finance$",
                      "share_path": "\\\\FILESERVER-01\\Finance$",
                      "host_id": "hst_7f3c1a",
                      "hostname": "FILESERVER-01",
                      "at_risk": true,
                      "exclusion": false,
                      "note": "Open read access detected"
                    }
                  ]
                }
              }
            }
          },
          "401": {
            "$ref": "#/components/responses/Unauthorized"
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "ApiKeyAuth": {
        "type": "apiKey",
        "in": "header",
        "name": "x-api-key",
        "description": "API key issued by the Adlumin authentication service. Pass in the `x-api-key` header."
      }
    },
    "parameters": {
      "TenantId": {
        "name": "tenant_id",
        "in": "query",
        "required": true,
        "description": "Identifier of the tenant to scope this request to. Required on every request that supports tenant scoping. Example format: `tnt_4f81ac`.",
        "schema": {
          "type": "string"
        }
      },
      "Page": {
        "name": "page",
        "in": "query",
        "description": "Page number (1-indexed)",
        "schema": {
          "type": "integer",
          "minimum": 1,
          "default": 1
        }
      },
      "PerPage": {
        "name": "per_page",
        "in": "query",
        "description": "Number of records per page (max 100)",
        "schema": {
          "type": "integer",
          "minimum": 1,
          "maximum": 100,
          "default": 25
        }
      },
      "Search": {
        "name": "search",
        "in": "query",
        "description": "Free-text search term applied across key fields",
        "schema": {
          "type": "string"
        }
      },
      "SortColumn": {
        "name": "sort_column",
        "in": "query",
        "description": "Field name to sort by",
        "schema": {
          "type": "string"
        }
      },
      "SortDir": {
        "name": "sort_dir",
        "in": "query",
        "description": "Sort direction",
        "schema": {
          "type": "string",
          "enum": [
            "asc",
            "desc"
          ],
          "default": "desc"
        }
      }
    },
    "schemas": {
      "PaginatedResponse": {
        "type": "object",
        "properties": {
          "total_count": {
            "type": "integer",
            "description": "Total number of records matching the query"
          },
          "page": {
            "type": "integer"
          },
          "per_page": {
            "type": "integer"
          }
        }
      },
      "AtRiskShare": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string"
          },
          "share_name": {
            "type": "string"
          },
          "share_path": {
            "type": "string",
            "description": "UNC path to the share"
          },
          "host_id": {
            "type": "string"
          },
          "hostname": {
            "type": "string"
          },
          "at_risk": {
            "type": "boolean"
          },
          "exclusion": {
            "type": "boolean"
          },
          "note": {
            "type": "string",
            "nullable": true
          }
        }
      },
      "Error": {
        "type": "object",
        "properties": {
          "error": {
            "type": "string"
          },
          "message": {
            "type": "string"
          }
        }
      }
    },
    "responses": {
      "Unauthorized": {
        "description": "Missing or invalid API key",
        "content": {
          "application/json": {
            "schema": {
              "$ref": "#/components/schemas/Error"
            },
            "example": {
              "error": "unauthorized",
              "message": "API key is missing or invalid"
            }
          }
        }
      }
    }
  }
}
```