---
updatedAt: 2026-05-12T10:00:49.000Z
---

# Retrieve a step for a trace of an application vulnerability

This operation returns an object containing information about the specified step details for a trace of an application vulnerability.

# OpenAPI definition

```json
{
  "openapi": "3.0.0",
  "x-explorer-enabled": false,
  "info": {
    "title": "SourceVuln API (Legacy)",
    "license": {
      "name": "(c) Copyright 2020 WhiteHat Security"
    },
    "version": "1.0.0"
  },
  "servers": [
    {
      "url": "https://sentinel.whitehatsec.com"
    }
  ],
  "paths": {
    "/api/application/{app_id}/vuln/{vuln_id}/trace/{trace_id}/step/{step_id}": {
      "get": {
        "tags": [
          "SourceVuln API v1.0"
        ],
        "summary": "Retrieve a step for a trace of an application vulnerability",
        "description": "This operation returns an object containing information about the specified step details for a trace of an application vulnerability.",
        "operationId": "getAppVulnTraceStep",
        "parameters": [
          {
            "name": "app_id",
            "in": "path",
            "description": "Application id.",
            "required": true,
            "style": "simple",
            "schema": {
              "type": "integer",
              "format": "int32"
            }
          },
          {
            "name": "vuln_id",
            "in": "path",
            "description": "Vulnerability id.",
            "required": true,
            "style": "simple",
            "schema": {
              "type": "integer",
              "format": "int32"
            }
          },
          {
            "name": "trace_id",
            "in": "path",
            "description": "Trace id.",
            "required": true,
            "style": "simple",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "step_id",
            "in": "path",
            "description": "Step id.",
            "required": true,
            "style": "simple",
            "schema": {
              "type": "integer",
              "format": "int32"
            }
          },
          {
            "name": "page:limit",
            "in": "query",
            "description": "Limit results to n number of pages.",
            "style": "form",
            "explode": true,
            "schema": {
              "type": "integer",
              "format": "int32"
            }
          },
          {
            "name": "page:offset",
            "in": "query",
            "description": "Begin showing results from page number n.",
            "style": "form",
            "explode": true,
            "schema": {
              "type": "integer",
              "format": "int32"
            }
          },
          {
            "name": "format",
            "in": "query",
            "description": "Format of returned results.",
            "style": "form",
            "explode": true,
            "schema": {
              "type": "string",
              "default": "xml",
              "example": "json",
              "enum": [
                "json",
                "xml",
                "csv"
              ]
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Provides a particular step details for a trace of an application vulnerability.",
            "headers": {},
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/VulnStep"
                }
              },
              "application/xml": {
                "example": "XML preview is currently not supported."
              },
              "text/csv, text/comma-separated-values": {
                "schema": {
                  "type": "string",
                  "description": "Column headers for data that may be returned using this format.",
                  "example": "id,code,filename,formatted_code,href,kind,method_signature,qualified_class_name,relative_line_number,start_line_number"
                }
              }
            }
          },
          "400": {
            "description": "BadRequestResponse indicates a request with invalid parameters.",
            "content": {}
          },
          "401": {
            "description": "UnauthorizedResponse signals an unauthorized API access.",
            "content": {}
          },
          "403": {
            "description": "ForbiddenResponse signals a request for a resource that does not exist or is not authorized.",
            "content": {}
          },
          "404": {
            "description": "NotFound the requested resource could not be found.",
            "content": {}
          },
          "500": {
            "description": "GenericError generic error.",
            "content": {}
          }
        },
        "deprecated": false
      }
    }
  },
  "components": {
    "schemas": {
      "VulnStep": {
        "properties": {
          "method_signature": {
            "type": "string",
            "nullable": true
          },
          "qualified_class_name": {
            "type": "string",
            "nullable": true
          },
          "href": {
            "type": "string"
          },
          "formatted_code": {
            "type": "string"
          },
          "code": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "id": {
            "type": "number"
          },
          "filename": {
            "type": "string"
          },
          "start_line_number": {
            "type": "number"
          },
          "relative_line_number": {
            "type": "number"
          }
        }
      }
    }
  },
  "x-readme": {
    "proxy-enabled": true
  }
}
```