> ## Documentation Index > Fetch the complete documentation index at: https://docs.orbit.devotel.io/llms.txt > Use this file to discover all available pages before exploring further. # Get the org's STIR/SHAKEN attestation posture snapshot > Returns a compliance / fraud posture snapshot: the STIR/SHAKEN attestation level applied to each of the organization's originating numbers (owned → A, leased pool → B) measured against the attestation target, plus an inbound Identity-header verification summary over the last 30 days classified against the policy. Read-only — it reports on existing data and places no calls. ## OpenAPI ````yaml /openapi.yaml get /api/v1/compliance/attestation/posture openapi: 3.1.0 info: title: Devotel CPaaS API description: Orbit by Devotel — Communications Platform as a Service API version: 1.0.0 contact: name: Devotel url: https://devotel.io email: support@devotel.io license: name: Proprietary servers: - url: https://api.orbit.devotel.io description: Production security: - Bearer: [] - ApiKey: [] tags: - name: Messages description: >- Send and manage messages across all channels (SMS, WhatsApp, RCS, Email, Viber, etc.) - name: Fax description: >- List and track fax (MMS/T.38) transmissions on Telnyx-backed fax numbers (sending flows through the Messaging API) - name: Agents description: AI agent creation, configuration, and execution - name: Voice description: Voice calls, IVR, conferencing, and SIP trunking - name: OnCall description: On-call rotations and escalation policy planning for incident alerting - name: Webhooks description: Webhook endpoint management and delivery logs - name: Numbers description: Phone number search, provisioning, and configuration - name: Brand Identity description: >- Unified cross-channel brand trust posture (10DLC, toll-free, WhatsApp, RCS, branded calling, number KYC) - name: Contacts description: Contact management, segmentation, and lifecycle tracking - name: Campaigns description: Marketing campaign orchestration and analytics - name: Flows description: Automation flow builder and execution engine - name: Templates description: Message template management and approval workflows - name: Settings description: Organization, channel, and user preference settings - name: Verify description: OTP generation and verification across channels - name: Push description: Push notification delivery via FCM and APNs - name: Integrations description: Third-party service connections and OAuth management - name: CDP description: >- Customer Data Platform — activation surface (CRM object sync, streaming destinations, ad-audience activation) - name: Files description: >- Server-to-server media upload, listing, retrieval, and deletion (signed-URL backed) - name: Commerce description: >- Omnichannel conversational-commerce — persistent cart + checkout state machine, channel-agnostic hosted pay-by-link, native WhatsApp checkout, and AP2-style agent payment mandates. - name: Sync description: >- Real-time shared-state primitive (Twilio Sync parity) — Documents, Maps, Lists, and ephemeral Streams, with change events relayed over the /api/v1/ws/sync WebSocket gateway paths: /api/v1/compliance/attestation/posture: get: tags: - Compliance summary: Get the org's STIR/SHAKEN attestation posture snapshot description: >- Returns a compliance / fraud posture snapshot: the STIR/SHAKEN attestation level applied to each of the organization's originating numbers (owned → A, leased pool → B) measured against the attestation target, plus an inbound Identity-header verification summary over the last 30 days classified against the policy. Read-only — it reports on existing data and places no calls. responses: '200': description: >- Originating-number attestation levels + inbound verification snapshot, classified against the policy. content: application/json: schema: type: object properties: data: type: object properties: policy: type: object description: >- The attestation policy the snapshot is classified against. properties: target_attestation: type: string enum: - A - B - C downgrade_handling: type: string enum: - monitor - alert inbound_min_verification: type: string enum: - any - A - B - C flag_unverified_inbound: type: boolean updated_at: type: string format: date-time nullable: true originating: type: object description: >- Per-number attestation posture for the org's originating numbers. properties: summary: type: object properties: total: type: integer meeting_target: type: integer below_target: type: integer by_level: type: object properties: A: type: integer B: type: integer C: type: integer numbers: type: array description: >- Per-number posture, capped at 500 entries (see numbers_truncated). items: type: object properties: phone_number: type: string source: type: string enum: - owned - leased attestation: type: string enum: - A - B - C meets_target: type: boolean numbers_truncated: type: boolean description: >- True when the org has more originating numbers than the 500-entry cap. inbound: type: object description: >- Inbound Identity-header verification summary over the window. properties: window_days: type: integer window_start: type: string format: date-time window_end: type: string format: date-time summary: type: object properties: total: type: integer verified: type: integer unverified: type: integer spoof_risk: type: integer verified_rate: type: number nullable: true description: >- 0..1 verified share of inbound calls, or null when there was no inbound traffic. meta: type: object properties: request_id: type: string timestamp: type: string format: date-time components: securitySchemes: Bearer: type: http scheme: bearer bearerFormat: JWT description: Dashboard JWT token from Clerk ApiKey: type: apiKey name: X-API-Key in: header description: Server-to-server API key (dv_live_sk_*) ````