List Scores

Retrieve paginated risk scores for a customer. Supports filtering by risk level and date range.

GET https://api-production-56df.up.railway.app/scores/{customer_id}

cURL

curl -X GET "https://api-production-56df.up.railway.app/scores/cust_8f2e4a91-bb3c-4d17-a1e0-6c9f3d5b7e82?page=1&per_page=20&risk_level=high&from_date=2026-02-01T00:00:00Z" \
  -H "X-API-Key: your-api-key"

200

{
  "scores": [
    {
      "event_id": "evt_a1b2c3d4-5678-9012-abcd-ef3456789012",
      "final_score": 78,
      "risk_level": "high",
      "reasoning": "Agent performed a bulk database export of PII fields from a production database without explicit user confirmation in the conversation history.",
      "violations": [
        "bulk_pii_export",
        "missing_user_confirmation"
      ],
      "rule_score": 72,
      "llm_score": 82,
      "cache_hit": false,
      "llm_fallback": true,
      "scored_at": "2026-02-25T16:42:11Z",
      "score_decomposition": {
        "graph_weight": 0.6,
        "llm_weight": 0.4,
        "gnn_weight": 0.0,
        "final": 78
      },
      "gnn_score": null,
      "confidence": 0.74,
      "graph_score": 72
    },
    {
      "event_id": "evt_e5f6a7b8-9012-3456-cdef-a1b2c3d4e5f6",
      "final_score": 85,
      "risk_level": "high",
      "reasoning": "Agent modified a critical infrastructure configuration file (sensitivity level 4) with no preceding read action, suggesting the change was not based on current file state.",
      "violations": [
        "critical_resource_modification",
        "blind_write_pattern"
      ],
      "rule_score": 85,
      "llm_score": null,
      "cache_hit": false,
      "llm_fallback": false,
      "scored_at": "2026-02-24T09:18:33Z",
      "score_decomposition": {
        "graph_weight": 1.0,
        "llm_weight": 0.0,
        "gnn_weight": 0.0,
        "final": 85
      },
      "gnn_score": null,
      "confidence": 0.95,
      "graph_score": 85
    }
  ],
  "page": 1,
  "per_page": 20,
  "total": 2
}

Requires X-API-Key header for authentication.

Path Parameters

customer_id · string · required

UUID of the customer whose scores to retrieve.

Query Parameters

page · integer · default: "1"

Page number for pagination. Starts at 1.

per_page · integer · default: "50"

Number of results per page. Maximum 100.

risk_level · string

Filter by risk level. Accepted values: none, low, medium, high, critical.

from_date · datetime

ISO 8601 timestamp. Only return scores created on or after this date.

to_date · datetime

ISO 8601 timestamp. Only return scores created on or before this date.

Response

scores · array

Array of score records for the customer.

Show score object properties

event_id · string

The event identifier associated with this score.

final_score · integer

Overall risk score from 0 to 100.

risk_level · string

Risk level: none, low, medium, high, or critical.

reasoning · string

Natural language explanation of the score.

violations · array

List of detected policy or compliance violations.

rule_score · number

Score from the deterministic rule engine.

llm_score · number

Score from the LLM scorer, if invoked. null if not used.

cache_hit · boolean

Whether this score was served from cache.

llm_fallback · boolean

Whether the LLM was called due to low graph confidence.

scored_at · datetime

ISO 8601 timestamp of when the score was computed.

score_decomposition · object

Breakdown of final score by component weights.

gnn_score · number

GNN co-processor score, if enabled. null otherwise.

confidence · number

Confidence level of the scoring result (0.0 to 1.0).

graph_score · number

Score from the graph-based rule engine.

page · integer

Current page number.

per_page · integer

Number of results per page.

total · integer

Total number of score records matching the query.

cURL

curl -X GET "https://api-production-56df.up.railway.app/scores/cust_8f2e4a91-bb3c-4d17-a1e0-6c9f3d5b7e82?page=1&per_page=20&risk_level=high&from_date=2026-02-01T00:00:00Z" \
  -H "X-API-Key: your-api-key"

200

{
  "scores": [
    {
      "event_id": "evt_a1b2c3d4-5678-9012-abcd-ef3456789012",
      "final_score": 78,
      "risk_level": "high",
      "reasoning": "Agent performed a bulk database export of PII fields from a production database without explicit user confirmation in the conversation history.",
      "violations": [
        "bulk_pii_export",
        "missing_user_confirmation"
      ],
      "rule_score": 72,
      "llm_score": 82,
      "cache_hit": false,
      "llm_fallback": true,
      "scored_at": "2026-02-25T16:42:11Z",
      "score_decomposition": {
        "graph_weight": 0.6,
        "llm_weight": 0.4,
        "gnn_weight": 0.0,
        "final": 78
      },
      "gnn_score": null,
      "confidence": 0.74,
      "graph_score": 72
    },
    {
      "event_id": "evt_e5f6a7b8-9012-3456-cdef-a1b2c3d4e5f6",
      "final_score": 85,
      "risk_level": "high",
      "reasoning": "Agent modified a critical infrastructure configuration file (sensitivity level 4) with no preceding read action, suggesting the change was not based on current file state.",
      "violations": [
        "critical_resource_modification",
        "blind_write_pattern"
      ],
      "rule_score": 85,
      "llm_score": null,
      "cache_hit": false,
      "llm_fallback": false,
      "scored_at": "2026-02-24T09:18:33Z",
      "score_decomposition": {
        "graph_weight": 1.0,
        "llm_weight": 0.0,
        "gnn_weight": 0.0,
        "final": 85
      },
      "gnn_score": null,
      "confidence": 0.95,
      "graph_score": 85
    }
  ],
  "page": 1,
  "per_page": 20,
  "total": 2
}