Hi,
Do you have try to use "/insight/endpoint/mac/{mac} " API call ? (with mac the address mac of the device
There is the following info :
Endpoint {
mac (string, optional): MAC Address of the endpoint,
ip (string, optional): IP Address of the endpoint,
user (string, optional): Username of the endpoint,
domain (string, optional): Domain of the endpoint,
roles (object, optional): Roles list of the endpoint,
spt (string, optional) = ['HEALTHY' or 'CHECKUP' or 'TRANSITION' or 'QUARANTINE' or 'INFECTED' or 'UNKNOWN']: System posture token of the endpoint,
device_category (string, optional): Device category of the endpoint,
device_family (string, optional): Device family of the endpoint,
device_name (string, optional): Device name of the endpoint,
updated_at (string, optional): Time at which the endpoint is updated,
is_online (boolean, optional): Flag indicating if the endpoint is online
}