Skip to main content
POST
Report a false-positive or false-negative against a protection recipe

Authorizations

Authorization
string
header
required

Supabase JWT token in Authorization: Bearer header

Headers

Idempotency-Key
string
required

Client-supplied UUID (or comparable) for de-duplication. Same key + same body within 24h replays the prior response; same key + different body returns 422.

Path Parameters

recipeId
string
required

Body

application/json
type
enum<string>
required

'fn' (false negative — recipe should have fired) or 'fp' (false positive — recipe fired on legitimate behaviour).

Available options:
fn,
fp
summary
string
required

Customer's description of what happened.

Minimum string length: 1
evidence
string

Optional raw payload / log excerpt the admin reviewer can inspect.

agent_id
string

Optional. Customer's agent id, when the report concerns a specific agent.

checkpoint_id
string

Optional. Related integrity_checkpoints id (helps the reviewer correlate).

Response

Candidate created; awaiting review.

ok
enum<boolean>
required
Available options:
true
candidate_id
string
required
type
enum<string>
required
Available options:
fn,
fp