---
title: endpoint query | Wartiva GraphQL API
description: Retrieves an Endpoint by its graph object id: a Windows, macOS, or Linux computer running the Wartiva agent. Wartiva GraphQL API reference with examples.
url: https://wartiva.com/api-docs/queries/endpoint.html
updated: 2026-10-07
---

Endpoints · GraphQL query

# `endpoint` query

Retrieves an [Endpoint](https://wartiva.com/api-docs/types/endpoint.html) by its graph object id: a Windows, macOS, or Linux computer running the Wartiva agent. The endpoint is the root of everything collected from that computer; its relationship fields lead to the installed applications, users and groups, disks, network interfaces, services, and security and policy configuration observed on it. Find endpoints with [graphSearch](https://wartiva.com/api-docs/queries/graph-search.html) on the ENDPOINT object type. Returns a not-found error when no object has the id, and an error when the id belongs to another object type.

## Response

Returns an [`EndpointPayload!`](https://wartiva.com/api-docs/types/endpoint-payload.html)

## Arguments

| Name | Description |
|---|---|
| `id` - [`ID!`](https://wartiva.com/api-docs/types/id.html) | The Endpoint identifier. |
| `mockOptions` - [`MockDataInput`](https://wartiva.com/api-docs/types/mock-data-input.html) | Options for mock data generation. Options supported: key: "PLATFORM", value: OsPlatform example: "mockOptions": { "options": [ { "key": "PLATFORM", "value": "WINDOWS" } ] } |

## Example

### Query

```graphql
query endpoint(
  $id: ID!,
  $mockOptions: MockDataInput
) {
  endpoint(
    id: $id,
    mockOptions: $mockOptions
  ) {
    node {
      id
      orgId
      seen {
        ...SeenOnlineFragment
      }
      objectType
      objectTypeLabel
      displayName
      firstSeen
      lastSeen
      createdAt
      updatedAt
      snapshotInfo {
        ...GraphObjectSnapshotInfoFragment
      }
      enrollment {
        ...EndpointEnrollmentFragment
      }
      issuesSummary {
        ...IssuesSummaryFragment
      }
      lastClientIp {
        ...IpAddressFragment
      }
      lastHeartBeat
      lastConnectedAt
      online
      osInfo {
        ...OsInfoFragment
      }
      permissions {
        ...EndpointPermissionsFragment
      }
      systemInfo {
        ...SystemInfoFragment
      }
      tray {
        ...EndpointTrayFragment
      }
      version {
        ...EndpointVersionFragment
      }
      accountPolicy {
        ...AccountPolicyFragment
      }
      activeDirectory {
        ...ActiveDirectoryFragment
      }
      administrativeTemplatesWindows {
        ...AdministrativeTemplatesWindowsFragment
      }
      applicationInstalls {
        ...ApplicationInstallConnectionFragment
      }
      applicationInstallsSeenOn {
        ...ApplicationInstallConnectionFragment
      }
      arpTableEntries {
        ...ArpTableEntryConnectionFragment
      }
      arpTableEntriesSeen {
        ...ArpTableEntryConnectionFragment
      }
      auditPolicy {
        ...AuditPolicyFragment
      }
      devicesSeen {
        ...DeviceConnectionFragment
      }
      diskMounts {
        ...DiskMountConnectionFragment
      }
      diskMountsSeen {
        ...DiskMountConnectionFragment
      }
      disks {
        ...DiskConnectionFragment
      }
      disksSeen {
        ...DiskConnectionFragment
      }
      executables {
        ...ExecutableConnectionFragment
      }
      executablesSeen {
        ...ExecutableConnectionFragment
      }
      groups {
        ...EndpointGroupConnectionFragment
      }
      groupsSeen {
        ...EndpointGroupConnectionFragment
      }
      interfaces {
        ...InterfaceConnectionFragment
      }
      interfacesSeen {
        ...InterfaceConnectionFragment
      }
      lastPosition {
        ...PositionSeenFragment
      }
      lastLogonSession {
        ...LogonSessionFragment
      }
      localPolicies {
        ...LocalPoliciesFragment
      }
      logonSessions {
        ...LogonSessionConnectionFragment
      }
      networks {
        ...NetworkConnectionFragment
      }
      paths {
        ...EndpointPathConnectionFragment
      }
      portsSeen {
        ...OpenPortConnectionFragment
      }
      primaryPosition {
        ...PositionSeenFragment
      }
      processes {
        ...ProcessesPayloadFragment
      }
      positions {
        ...PositionSeenConnectionFragment
      }
      routes {
        ...RouteConnectionFragment
      }
      routesSeen {
        ...RouteConnectionFragment
      }
      security {
        ...SecurityFragment
      }
      softwareUpdatePreferences {
        ...SoftwareUpdatePreferencesFragment
      }
      systemServices {
        ...SystemServiceConnectionFragment
      }
      systemServicesSeen {
        ...SystemServiceConnectionFragment
      }
      systemSettings {
        ...SystemSettingsFragment
      }
      users {
        ...EndpointUserConnectionFragment
      }
      usersSeen {
        ...EndpointUserConnectionFragment
      }
      vulnerabilities {
        ...PlatformVulnerabilitiesFragment
      }
      wlanInterfaces {
        ...WlanInterfaceListFragment
      }
      wlanInterfacesSeen {
        ...WlanInterfaceListFragment
      }
      findings {
        ...FindingsPayloadFragment
      }
      issues {
        ...IssuesPayloadFragment
      }
    }
  }
}

```

### Variables

```json
{"id": 4, "mockOptions": MockDataInput}

```

### Response

```json
{"data": {"endpoint": {"node": Endpoint}}}

```

---

Wartiva is in early access. Request access: https://wartiva.com/early-access.html  
All pages: https://wartiva.com/llms.txt