---
title: "Get notification settings"
source_url: https://dev.digicert.com/certcentral-apis/services-api/vulnerability-assessments/get-notification-settings.html
api_method: GET
api_endpoint: "/services/v2/vulnerability-assessment/{{order_id}}/notification-settings"
api_url: "https://www.digicert.com/services/v2/vulnerability-assessment/{{order_id}}/notification-settings"
---

**GET** `https://www.digicert.com/services/v2/vulnerability-assessment/{{order_id}}/notification-settings`

Use this endpoint to get the current setting for when you receive notification emails about vulnerability assessments for an order.

Replace `{{order_id}}` in the URL with the ID of the order. To get the ID values for orders in your account, use the [List orders](https://dev.digicert.com/md/certcentral-apis/services-api/orders/list-orders.md) endpoint.

## Example requests and responses

**cURL**

```bash
curl -X GET \
https://www.digicert.com/services/v2/vulnerability-assessment/{{order_id}}/notification-settings \
-H 'Content-Type: application/json' \
-H 'X-DC-DEVKEY: {{api_key}}'
```

**Python**

```python
import requests

url = "https://www.digicert.com/services/v2/vulnerability-assessment/{{order_id}}/notification-settings"

payload = {}
headers = {
  'Content-Type': 'application/json',
  'X-DC-DEVKEY': '{{api_key}}'
}

response = requests.request("GET", url, headers=headers, data = payload)

print(response.text.encode('utf8'))
```

**Go**

```go
package main

import (
  "fmt"
  "net/http"
  "io/ioutil"
)

func main() {

  url := "https://www.digicert.com/services/v2/vulnerability-assessment/{{order_id}}/notification-settings"
  method := "GET"

  client := &http.Client {
  }
  req, err := http.NewRequest(method, url, nil)

  if err != nil {
    fmt.Println(err)
  }
  req.Header.Add("Content-Type", "application/json")
  req.Header.Add("X-DC-DEVKEY", "{{api_key}}")

  res, err := client.Do(req)
  defer res.Body.Close()
  body, err := ioutil.ReadAll(res.Body)

  fmt.Println(string(body))
}
```

**NodeJS**

```javascript
var request = require('request');
var options = {
  'method': 'GET',
  'url': 'https://www.digicert.com/services/v2/vulnerability-assessment/{{order_id}}/notification-settings',
  'headers': {
    'Content-Type': 'application/json',
    'X-DC-DEVKEY': '{{api_key}}'
  }
};
request(options, function (error, response) { 
  if (error) throw new Error(error);
  console.log(response.body);
});
```


**200 OK**

```json
{
    "setting": "notify_only_alerts"
}
```

**404 Not Found**

```json
{
  "errors": [
    {
      "code": "not_found|route",
      "message": "The specified route was not found."
    }
  ]
}
```

**403 Forbidden (Access permission)**

```json
{
  "errors": [
    {
      "code": "access_denied",
      "message": "You do not have permission to manage this request."
    }
  ]
}
```

**400 Bad Request (Invalid order status)**

```json
{
  "errors": [
    {
      "code": "va_not_eligible_order",
      "message": "Invalid order status. Order must be issued, not revoked, expired, or pending."
    }
  ]
}
```

**400 Bad Request (Invalid product type)**

```json
{
  "errors": [
    {
      "code": "va_not_eligible_product",
      "message": "Invalid certificate type. Vulnerability assessment is only available for Secure Site EV and Secure Site Pro certificates."
    }
  ]
}
```


## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>setting</td>
<td>string</td>
<td>Current setting for when you receive notification emails.<br>Possible values:<br><ul><li>disabled: Never receive email notifications.</li><li>always_notify: Receive notification emails after every completed scan.</li><li>notify_only_alerts: Only receive email notifications when a scan finds vulnerabilities.</li></ul></td>
</tr>
</tbody>
</table>