> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aiinsurance.io/llms.txt
> Use this file to discover all available pages before exploring further.

# List Exposures

> Returns a paginated list of Field Model V1 exposures for the company.

**Filtering:**
- `id` - Filter by exposure ID (single or array)
- `exposureType` - Filter by exposure type
- `filterText` - Text search across exposure name

**Sorting:**
- `createdAt` (default), `updatedAt`, `exposureName`, `exposureType`

**Required permission:** `company.insured:read`




## OpenAPI

````yaml /openapi/generated-external-api.yaml get /api/v1/external/companies/{companyId}/exposures
openapi: 3.0.3
info:
  title: AI Insurance External API
  description: External API for AI Insurance platform
  version: 1.0.0
  contact:
    email: support@aiinsurance.io
servers:
  - url: https://app.aiinsurance.io
    description: Production
security:
  - ApiKeyAuth: []
paths:
  /api/v1/external/companies/{companyId}/exposures:
    get:
      tags:
        - Field Model Exposures
      summary: List Exposures
      description: |
        Returns a paginated list of Field Model V1 exposures for the company.

        **Filtering:**
        - `id` - Filter by exposure ID (single or array)
        - `exposureType` - Filter by exposure type
        - `filterText` - Text search across exposure name

        **Sorting:**
        - `createdAt` (default), `updatedAt`, `exposureName`, `exposureType`

        **Required permission:** `company.insured:read`
      operationId: listExposuresV1
      parameters:
        - $ref: '#/components/parameters/companyId'
        - name: id
          in: query
          schema:
            oneOf:
              - type: string
                format: uuid
              - type: array
                items:
                  type: string
                  format: uuid
          description: Filter by exposure ID (single or array)
        - name: exposureType
          in: query
          schema:
            type: string
          description: Filter by exposure type
        - $ref: '#/components/parameters/filterText'
        - name: sortBy
          in: query
          schema:
            type: string
            enum:
              - createdAt
              - updatedAt
              - exposureName
              - exposureType
            default: createdAt
          description: Field to sort by.
        - $ref: '#/components/parameters/sortDirection'
        - $ref: '#/components/parameters/page'
      responses:
        '200':
          description: Paginated list of exposures
          content:
            application/json:
              schema:
                type: object
                properties:
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/ExposureV1Detail'
                  totalCount:
                    type: integer
                    description: Total number of matching exposures across all pages
              examples:
                success:
                  summary: List of exposures
                  value:
                    items:
                      - id: 550e8400-e29b-41d4-a716-446655440200
                        companyId: 550e8400-e29b-41d4-a716-446655440000
                        fieldModelV1Data:
                          exposureName: Acme Corporation
                          exposureType: business
                          numberOfEmployees: 150
                        createdAt: '2025-01-15T10:30:00.000Z'
                        updatedAt: null
                        createdBy: google-oauth2|123456789
                        updatedBy: null
                    totalCount: 1
                emptyList:
                  summary: No exposures found
                  value:
                    items: []
                    totalCount: 0
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
components:
  parameters:
    companyId:
      name: companyId
      in: path
      required: true
      schema:
        type: string
        format: uuid
      description: Company identifier
    filterText:
      name: filterText
      in: query
      schema:
        type: string
      description: Search across quote number, description, and other text fields
    sortDirection:
      name: sortDirection
      in: query
      schema:
        type: string
        enum:
          - asc
          - desc
        default: desc
      description: Sort direction (default desc)
    page:
      name: page
      in: query
      schema:
        type: integer
        minimum: 1
        default: 1
      description: Page number (1-based, default 1, page size 50)
  schemas:
    ExposureV1Detail:
      type: object
      description: A Field Model V1 exposure entity with dynamic field data.
      required:
        - id
        - companyId
        - fieldModelV1Data
      properties:
        id:
          type: string
          format: uuid
          description: Exposure identifier
        companyId:
          type: string
          format: uuid
          description: Company identifier
        fieldModelV1Data:
          type: object
          additionalProperties: true
          description: |
            Dynamic field data for the exposure. Keys are field `referenceId`s
            defined in the company's field configuration. Includes base fields
            like `exposureName` and `exposureType` as well as any custom fields.
        policyIds:
          type: array
          items:
            type: string
            format: uuid
          deprecated: true
          description: >-
            Deprecated: always returns an empty array. FMV1 does not use the
            legacy policy_insureds join table.
        createdAt:
          type: string
          format: date-time
          nullable: true
          description: When the exposure was created
        updatedAt:
          type: string
          format: date-time
          nullable: true
          description: When the exposure was last updated
        createdBy:
          type: string
          nullable: true
          description: User ID who created the exposure
        updatedBy:
          type: string
          nullable: true
          description: User ID who last updated the exposure
    ErrorResponse:
      type: object
      description: Standard error response for all external API endpoints
      required:
        - error
      properties:
        error:
          type: object
          required:
            - code
            - message
          properties:
            code:
              type: string
              description: Machine-readable error code
              example: VALIDATION_ERROR
            message:
              type: string
              description: Human-readable error message
              example: 'submissionId: Required field is missing'
            details:
              type: array
              description: Additional details for validation errors (field-level errors)
              items:
                type: object
                properties:
                  field:
                    type: string
                    description: The field that caused the error
                    example: submissionId
                  message:
                    type: string
                    description: Description of the field error
                    example: Required field is missing
  responses:
    Unauthorized:
      description: Unauthorized - Invalid or missing API key
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          examples:
            missingApiKey:
              summary: Missing API key
              value:
                error:
                  code: UNAUTHORIZED
                  message: Authorization header is required
            bearerTokenNotAllowed:
              summary: Bearer token used instead of API key
              value:
                error:
                  code: UNAUTHORIZED
                  message: External API endpoints require API key authentication
    Forbidden:
      description: Forbidden - Insufficient permissions
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          examples:
            insufficientPermissions:
              summary: Insufficient permissions
              value:
                error:
                  code: FORBIDDEN
                  message: Insufficient permissions to perform this action
    InternalServerError:
      description: Internal Server Error - Unexpected error occurred
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          examples:
            internalError:
              summary: Unexpected server error
              value:
                error:
                  code: INTERNAL_ERROR
                  message: An unexpected error occurred. Please try again later.
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: Authorization
      description: >-
        API key authentication. Include your API key in the Authorization
        header.

````