Every dollar that moves, scored, decided, on the record.

post/api/skoor/backfill/{programId}

Rescore every transfer on a program

Recomputes the Transaction Risk Skoor for every transfer on the program with the current scorer. The bearer must be the operator token of the tenant that owns the program; X-Operator is not required.

Parameters

Responses

200 — How many transfers were scored. object

401 — Bearer is not the owning tenant's operator token. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/skoor/backfill/a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

post/api/skoor/actors/backfill/{programId}

Rescore every actor on a program

Recomputes the Entity, Counterparty and Agent Risk Skoors for every actor on the program and re-runs the actor detectors. Operator token of the owning tenant; X-Operator is not required.

Parameters

Responses

200 — Actors scored, by kind (agents are counted inside entities or counterparties as well). object

401 — Bearer is not the owning tenant's operator token. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/skoor/actors/backfill/a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

get/api/agents

Imported agents with their Skoors

Parameters

Responses

200 — Up to 500 agents on the tenant's agent program, newest update first. object

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/agents?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

post/api/agents/import

Import agents from the scan index

Parameters

Request body (application/json) · object

Responses

201 — What was imported. ImportResult

401 — Bearer token missing or unknown. Error

502 — Scan index unavailable; detail carries the upstream message. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/agents/import?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"limit":50,"withProfiles":true}'

get/api/clocks/overdue

Alerts past their decision clock

Parameters

Responses

200 — Waiting alerts (open, held, escalated) whose due time has passed, oldest due first, with the clock policy in force. object

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/clocks/overdue?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

post/api/actions

Request an action

Writes the chained request attributed to X-Operator. Single-approver actions execute at once through the bank's API (or a recorded dry run); two-approver actions wait for approve.

Parameters

Request body (application/json, required) · object

Responses

201 — The action row; status is requested (two approvers), executed, or failed. Action

400 — Validation failed. Error

401 — Bearer token missing or unknown. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/actions?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"programId":"a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55","alertId":"5f3c1c8e-2a44-4c0b-9d0f-2b0a2f6e7c11","type":"request_to_program","targetType":"program","targetId":"a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55"}'

post/api/actions/{id}/approve

Approve a two-approver action

The approver defaults to X-Operator. The requester approving their own action is recorded as refused (200 with status refused), never executed.

Parameters

Request body (application/json) · object

Responses

200 — The action row after approval: approved / executed / failed / refused. Action

401 — Bearer token missing or unknown. Error

404 — Not this tenant's action. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/actions/5f3c1c8e-2a44-4c0b-9d0f-2b0a2f6e7c11/approve?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"approverId":"second.approver@bank.example"}'

post/api/preflight

Score a proposed transfer

Answers clear / review / hold for a transfer that has not been originated yet, and records the answer. 201 on a new answer; 200 when idempotencyKey replays a stored one (then idempotent: true and degradedReasons is empty). Body limit 64 KB.

Parameters

Request body (application/json, required) · PreflightRequest

Responses

200 — Replayed from the idempotency key. Preflight

201 — Scored and recorded. Preflight

400 — Validation failed; error lists the paths. Error

401 — Bearer token missing or unknown. Error

404 — Unknown program on this tenant. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/preflight?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"programSlug":"northwind-payroll","idempotencyKey":"pf-2026-09-17-0001","transfer":{"rail":"ach","direction":"outgoing","type":"CREDIT","amountCents":"185000","currency":"USD","entityId":"enti_sim_acme","counterparty":{"name":"Blue Ridge Landscaping","routingNumber":"021000021","accountLast4":"4421","countryCode":"US"},"description":"Payroll 2026-09-19"}}'

Response

{
  "preflightId": "5f3c1c8e-2a44-4c0b-9d0f-2b0a2f6e7c11",
  "decision": "clear",
  "skoor": 12,
  "band": "clear",
  "version": "trs-v1",
  "n": 210,
  "confidence": 0.81,
  "reasons": [
    {
      "id": "TRS-CP-01",
      "signal": "counterparty.first_time",
      "weight": 8,
      "hard": false,
      "sentence": "This is the first transfer with this counterparty."
    }
  ],
  "limitsHit": [],
  "degraded": false,
  "degradedReasons": [],
  "latencyMs": 41,
  "idempotent": false,
  "programId": "a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55"
}

get/api/preflight/stats

Pre-flight statistics for a window

Parameters

Responses

200 — Counts by decision, latency percentiles, matched and degraded shares, and the graded confusion counts. PreflightStats

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/preflight/stats?tenant=demo&days=30" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/preflight/{id}

One pre-flight answer with its request

Parameters

Responses

200 — The stored answer, the request as submitted, and the matched transfer when one landed. PreflightDetail

401 — Bearer token missing or unknown. Error

404 — Unknown pre-flight on this tenant. Error

Example

curl -s "https://skoor.ai/risk/api/preflight/5f3c1c8e-2a44-4c0b-9d0f-2b0a2f6e7c11?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

post/api/kri/snapshot/{programId}

Take a KRI snapshot now

Computes every KRI for the program over its window, stores the snapshot, and emits kri.snapshot so the program detectors run. Operator token of the owning tenant; X-Operator is not required.

Parameters

Responses

200 — The new snapshot id. Read it back inside the program report. object

401 — Bearer is not the owning tenant's operator token. Error

404 — Program not found. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/kri/snapshot/a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

get/api/limits/ladder

The tenant's limit ladder

Parameters

Responses

200 — Per-band caps for counterparties and entities and the re-screen cadence; the default ladder when the tenant has not written one. LimitLadder

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/limits/ladder?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/limits/evaluate

Evaluate an amount against the ladder

Parameters

Responses

200 — Limit hits (hard when an actor is in the hold band), the actors' bands, their re-screen cadence and the ladder used. LimitEvaluation

400 — programId and amountCents required. Error

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/limits/evaluate?tenant=demo&programId=a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55&amountCents=185000&entityId=enti_sim_acme&counterpartyId=cpty_sim_1" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/autonomy/{programId}

A program's autonomy tier and eligibility

Parameters

Responses

200 — Tier, granted detectors, the effective policy, per-detector eligibility from the last 30 days of person decisions, and the version history. ProgramAutonomy

401 — Bearer token missing or unknown. Error

404 — Unknown program on this tenant. Error

Example

curl -s "https://skoor.ai/risk/api/autonomy/a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

post/api/autonomy/{programId}/activate

Grant a detector to the automated side

Needs an eligible detector (≥10 person decisions in 30 days, ≥90% matching the draft, none of the never-automate set) and a second approver distinct from X-Operator; at most one widening per week. Writes a new program policy version on the record.

Parameters

Request body (application/json, required) · object

Responses

201 — The new version and tier. object

400 — detector and approverId required. Error

401 — Bearer token missing or unknown. Error

404 — Unknown program on this tenant. Error

409 — Refused: not eligible, same approver, cadence, or never-automate. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/autonomy/a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55/activate?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"detector":"repeat_pattern","approverId":"second.approver@bank.example"}'

post/api/autonomy/{programId}/demote

Run the demotion check now

Narrows the automated side for any granted detector whose overturn rate in the window is above 10%. The same check runs every 15 minutes.

Parameters

Responses

200 — Detectors demoted (empty when nothing changed) and the version written, if any. object

401 — Bearer token missing or unknown. Error

404 — Unknown program on this tenant. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/autonomy/a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55/demote?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/rules

List rules with their last backtest

Parameters

Responses

200 — Every rule on the tenant, each with its latest backtest, plus the field vocabulary and operators the DSL accepts. object

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/rules?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

post/api/rules

Create or update a draft rule

Parameters

Request body (application/json, required) · RuleDraft

Responses

201 — The rule as stored (status draft). Rule

400 — Invalid rule; issues lists the Zod problems. Error

401 — Bearer token missing or unknown. Error

409 — The rule is active; pause it before editing. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/rules?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"id":"large-first-time-wire","name":"Large wire to a first-time counterparty","when":[{"field":"rail","op":"eq","value":"wire"},{"field":"counterparty.firstTime","op":"eq","value":true},{"field":"amountCents","op":"gte","value":1000000}],"action":"alert","severity":"high"}'

post/api/rules/{id}/backtest

Backtest a rule against the tenant's own transfers

Parameters

Request body (application/json) · object

Responses

200 — What the rule would have matched: scanned (capped at 1000, then sampled), matched, share, would-hold, overlap with existing alerts, by band, and sample transfer ids. Backtest

401 — Bearer token missing or unknown. Error

404 — Rule not found. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/rules/large-first-time-wire/backtest?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"days":90}'

post/api/rules/{id}/activate

Activate a rule with a second approver

Needs a backtest younger than 24 hours and an approver distinct from X-Operator. Writes a new rules version and chains a periodic_review action (target rule, <id>@<version>) on the rule's program, else the tenant's first program.

Parameters

Request body (application/json, required) · object

Responses

200 — The active rule, the rules version written, and the action id recorded on the chain (null when none). object

401 — Bearer token missing or unknown. Error

404 — Rule not found. Error

409 — No fresh backtest, same approver, or the rule is archived. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/rules/large-first-time-wire/activate?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"approverId":"second.approver@bank.example"}'

post/api/rules/{id}/pause

Pause an active rule

Parameters

Responses

200 — The rule with status paused. Rule

401 — Bearer token missing or unknown. Error

404 — Rule not found. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/rules/large-first-time-wire/pause?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/metrics

The six numbers for the tenant

Parameters

Responses

200 — Every metric with its n; also persisted as today's daily snapshot. Metrics

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/metrics?tenant=demo&days=30" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/governance

The model-risk record (how the AI is governed)

Generated from the live record and the running code, in the shape of SR 11-7 and NIST AI RMF: model inventory, the automated-or-reviewed boundary per program, eval-set validation and live calibration, the six metrics, change control (policy and rule versions, hash chain), human oversight (attribution, clocks, overturns, the language model's role), data rules, and a requirement-to-evidence mapping. Every number carries n; unmeasured is null. Rendered for people at /governance.

Parameters

Responses

200 — The record. GovernanceRecord

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/governance?tenant=demo&days=30" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/public/metrics

The demo tenant's six numbers, public

Parameters

Responses

200 — Metrics for the demo tenant, labelled simulated. object & Metrics

404 — No demo tenant on this deployment. Error

Example

curl -s "https://skoor.ai/risk/api/public/metrics?days=30"

get/api/reports/actor/{type}/{id}

Actor report

Parameters

Responses

200 — The current Skoor with reasons, history, band transitions, signal trends, transfers, alerts and dispositions for the actor. ActorReport

400 — type must be entity, counterparty, or agent. Error

401 — Bearer token missing or unknown. Error

404 — Unknown actor on this tenant. Error

Example

curl -s "https://skoor.ai/risk/api/reports/actor/entity/enti_sim_acme?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/reports/program/{id}

Program report

Parameters

Responses

200 — The Program Risk Skoor with history, KRIs and their deltas, rank inside the bank, transfers and alerts by detector. ProgramReport

401 — Bearer token missing or unknown. Error

404 — Unknown program on this tenant. Error

Example

curl -s "https://skoor.ai/risk/api/reports/program/a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/reports/weekly/{programId}

Weekly program risk report

Parameters

Responses

200 — The stored report for the week, built on first request. WeeklyReport

401 — Bearer token missing or unknown. Error

404 — Unknown program. Error

Example

curl -s "https://skoor.ai/risk/api/reports/weekly/a1e0c2d4-6b7f-4d8e-9a3b-0c1d2e3f4a55?tenant=demo&week=2026-W37" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

get/api/record/verify

Verify the record chains

Parameters

Responses

200 — Every disposition and action hash recomputed from stored fields; the first break, if any. ChainReport

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/record/verify?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

Response

{
  "ok": true,
  "checked": 412,
  "firstBreakAt": null,
  "chains": {
    "dispositions": {
      "ok": true,
      "checked": 380
    },
    "actions": {
      "ok": true,
      "checked": 32
    }
  }
}

get/api/record/export

Examiner export (JSON lines)

Parameters

Responses

200 — application/x-ndjson, served as an attachment: the policy line first, then alerts, dispositions and actions in time order. RecordLine · application/x-ndjson

400 — Bad date. Error

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/record/export?tenant=demo&from=2026-08-18T00%3A00%3A00Z&to=2026-09-17T00%3A00%3A00Z" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

post/api/proofs/actor

Issue a signed proof for an actor

Parameters

Request body (application/json, required) · object

Responses

201 — A 24-hour EdDSA token, its claims, and where the public key lives. object

400 — type (entity|counterparty|agent) and id required. Error

401 — Bearer token missing or unknown. Error

404 — No Skoor on record for the actor. Error

409 — The actor is unscored; a proof is never issued for a null Skoor. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/proofs/actor?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"type":"entity","id":"enti_sim_acme"}'

get/api/proofs/verify

Verify a proof

Checks the signature against the platform key, the expiry and the presence of a Skoor. No database access; anyone may call it.

Parameters

Responses

200 — valid with the claims, or invalid with the reason. ProofVerification

400 — token required. ProofVerification

Example

curl -s "https://skoor.ai/risk/api/proofs/verify?token=eyJhbGciOiJFZERTQSIs%E2%80%A6"

get/.well-known/skoor-risk-jwks.json

The public key set

Parameters

None.

Responses

200 — JWKS with the current Ed25519 key (cached 5 minutes). Jwks

Example

curl -s "https://skoor.ai/risk/.well-known/skoor-risk-jwks.json"

post/webhooks/column/{key}

Receive a Column event

Raw body, 2 MB limit, any content type. Verified before anything is parsed; stored, deduplicated by event id, answered at once. Writes are awaited; scoring, detection and triage run after the response. Column registers this URL itself when a tenant connects its key.

Parameters

Request body (application/json, required) · ColumnEvent

Responses

200 — Stored (or a redelivery). object

400 — Invalid JSON or an event without id, created_at and type. Error

401 — Invalid signature; nothing stored. Error

404 — Unknown program. Error

Example

curl -s -X POST "https://skoor.ai/risk/webhooks/column/northwind-payroll" \
  -H "Content-Type: application/json" \
  -d '{"id":"evnt_2Zx9…","created_at":"2026-09-17T12:00:00Z","type":"ach.outgoing_transfer.returned","data":{"id":"acht_…","return_details":[{"return_code":"R10"}]}}'

Column signs the body; a hand-made call needs the program's secret: -H "Column-Signature: $(printf %s "$BODY" | openssl dgst -sha256 -hmac "$WEBHOOK_SECRET" | sed 's/^.* //')".

get/connector/manifest.json

Connector manifest

Parameters

None.

Responses

200 — Name, version, transport, MCP URL, protocol version, auth shape and tool names. object

Example

curl -s "https://skoor.ai/risk/connector/manifest.json"

post/mcp

MCP JSON-RPC endpoint

Streamable HTTP, request/response only: initialize, tools/list, tools/call. Notifications (no id) are answered 202 with no body. Body limit 1 MB. Protocol version 2025-06-18.

Parameters

Request body (application/json, required) · object

Responses

200 — A JSON-RPC response (or a batch of them). object

202 — Notification accepted; no body.

400 — X-Operator header required. Error

401 — Bearer token missing or unknown. Error

Example

curl -s -X POST "https://skoor.ai/risk/mcp?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_queue","arguments":{"route":"reviewed","limit":5}}}'

get/mcp

No server-initiated streams

Parameters

None.

Responses

405 — Streamable HTTP: POST JSON-RPC to this URL. Error

Example

curl -s "https://skoor.ai/risk/mcp"

post/api/keys

Create an API key

live keys may be created only when the tenant's Column environment is live or the operator passes confirmLive: true. The secret (test_/live_ + 32 base64url characters) is returned exactly once.

Parameters

Request body (application/json, required) · object

Responses

201 — The key with its secret, shown once. object

400 — Validation failed. Error

401 — Bearer token missing or unknown. Error

Example

curl -s -X POST "https://skoor.ai/risk/api/keys?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example" \
  -H "Content-Type: application/json" \
  -d '{"name":"Northwind integration","mode":"test","programId":null}'

get/api/keys

List keys (never the secret)

Parameters

Responses

200 — Every key on the tenant, including revoked ones. Array of ApiKey

401 — Bearer token missing or unknown. Error

Example

curl -s "https://skoor.ai/risk/api/keys?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"

delete/api/keys/{id}

Revoke a key

Parameters

Responses

200 — Revoked; the key stops working at once. ApiKey

401 — Bearer token missing or unknown. Error

404 — Not this tenant's key. Error

Example

curl -s -X DELETE "https://skoor.ai/risk/api/keys/5f3c1c8e-2a44-4c0b-9d0f-2b0a2f6e7c11?tenant=demo" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "X-Operator: you@bank.example"