# Observations

 - [POST /public/v1/observations](https://docs.titanapi.securityscorecard.io/openapi.public/observations/getobservations.md): Lists observations with paging, filters, and open/resolved mode. View is server-determined from the caller's domain entitlement.
 - [POST /public/v1/observations/actions](https://docs.titanapi.securityscorecard.io/openapi.public/observations/getactions.md): Returns the chronological action history for a single observation, newest first, with limit/offset paging and a total count. Request fields are sent in a JSON body, so the orn needs no percent-encodin
 - [POST /public/v1/observations/actions/flag](https://docs.titanapi.securityscorecard.io/openapi.public/observations/flagobservations.md): Flags observations for follow-up using filter criteria. Returns counts of newly-flagged and already-flagged observations.
 - [POST /public/v1/observations/actions/flag/groups](https://docs.titanapi.securityscorecard.io/openapi.public/observations/flagobservationgroups.md): Flags whole observation groups for follow-up using filter criteria or explicit group ORNs. Returns counts of newly-flagged and already-flagged groups.
 - [GET /public/v1/observations/filter-options/values](https://docs.titanapi.securityscorecard.io/openapi.public/observations/getfilteroptionvalues.md): Lists the discrete values available for a single filterable field, scoped to the caller's allowed domains. Use to populate the filter menus that drive GetObservations and GetObservationGroups.
 - [POST /public/v1/observations/groups](https://docs.titanapi.securityscorecard.io/openapi.public/observations/getobservationgroups.md): Lists observations rolled up into groups (e.g. by CVE / vulnerability name), with paging, filters, and open/resolved mode. View is server-determined from the caller's domain entitlement.
 - [POST /public/v1/observations/vendor-scores](https://docs.titanapi.securityscorecard.io/openapi.public/observations/getvendorscores.md): Returns overall, breach-likelihood, and ransomware scores for one or more vendor domains, selected via a VENDOR filter. VRM entitlement is derived server-side; a domain the caller isn't entitled to se
 - [GET /public/v1/observations/{orn}](https://docs.titanapi.securityscorecard.io/openapi.public/observations/getobservationbyorn.md): Fetches a single observation by ORN. Authorization is scoped to the ORN's own view-owner domain, with a live VRM-entitlement re-check for VRM-scoped ORNs. Percent-encode the orn path parameter if it c