# Get ASO case evidence

Read the compact ASO profile and keyword evidence shown on Home for one to six tracked apps.

## Contract status

Preview contract: these routes and tools are implemented in the shared contract, but the public host, customer API access and OAuth flow have not been deployment verified.

## Endpoint: GET /v1/aso/case-evidence

- Method: `GET`
- Path: `/v1/aso/case-evidence`
- Authentication: Bearer API credential or OAuth access token
- Required scope: `context:read`
- MCP tool: `aso`
- MCP action: `evidence`

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `appIds` | query | uuid, 1 to 6 | yes | Tracked app ids, comma-separated. |

## Known errors

- 400 invalid_request for an invalid filter, identity or limit.
- 401 authentication_required for a missing or invalid credential.
- 402 subscription_required when access is not entitled.
- 403 authorization_required for a missing scope or unavailable preview access.
- 404 not_found when the record is outside the accessible catalogue.
- 429 rate_limited; honor Retry-After when present.

## Request

Pass one to six tracked app ids. This read does not call Apple.

```
curl --get 'https://api.peekpanda.com/v1/aso/case-evidence' \
  --header "Authorization: Bearer $PEEKPANDA_TOKEN" \
  --header 'x-genviral-tenancy: personal' \
  --data-urlencode 'appIds=11111111-1111-4111-8111-111111111111'
```

## MCP request

Call aso with action evidence. Path fields go in params, filters in query, and a write body in body.

```
{
  "name": "aso",
  "arguments": {
    "request": {
      "action": "evidence",
      "query": {
        "appIds": "<appIds>"
      }
    }
  }
}

```

## Response

data holds one row per requested app, at most six. profile is null until ASO evidence is stored. keywords is empty when none are stored.

```
{
  "data": [
    {
      "appId": "11111111-1111-4111-8111-111111111111",
      "profile": null,
      "keywords": []
    }
  ]
}

```

## Source

Stored ASO profile and keyword evidence for apps the caller tracks.

## Refresh

This GET never starts collection.