List review audit events
GET
/api/v1/executions/{id}/review_events
executions:read
Returns flagged / assigned / unassigned / approved / denied / note_added / re_evaluated events, plus the adverse_action_drafted / adverse_action_sent / adverse_action_skipped / adverse_action_replayed notice events, ordered by created_at. Requires executions:read.
Path parameters
| Name | Type | Description |
|---|---|---|
idrequired |
integer |
Execution id. Scoped to the calling api_client; a foreign id returns |
Query parameters
| Name | Type | Description |
|---|---|---|
page |
integer |
1-based page number. Example:1
|
per_page |
integer |
Items per page. Values above 100 are clamped to 100. Example:25
|
Responses
-
200 Audit trail
application/json-
dataarray of ReviewEvent-
idinteger -
objectstring -
execution_idinteger -
event_typestring The review events plus the adverse-action notice trail: `adverse_action_drafted` (a notice draft was parked for review), `adverse_action_sent` (the draft was sent), `adverse_action_skipped` (the draft was discarded without sending) and `adverse_action_replayed` (a sent notice was resent from the app). One offlaggedassignedunassignedapproveddeniednote_addedre_evaluatedadverse_action_draftedadverse_action_sentadverse_action_skippedadverse_action_replayed -
actor_user_idinteger, nullable -
notestring, nullable -
metadataobject -
created_atstring (date-time)
-
-
metaMetaSchema: PaginatedMeta
-
request_idstring required Correlation id for this request. Also sent as the `X-Request-Id` response header; quote it when contacting support. -
pageinteger required -
per_pageinteger required -
total_countinteger required -
total_pagesinteger required -
objectstring required The object type of every item in `data`.
-
200 example{ "data": [ { "id": 1, "object": "review_event", "execution_id": 1, "event_type": "flagged", "actor_user_id": 1, "note": "string", "metadata": {}, "created_at": "2026-05-08T18:41:05Z" } ], "meta": { "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "page": 1, "per_page": 25, "total_count": 142, "total_pages": 6, "object": "execution" } } -
-
401 Missing, malformed, expired or revoked bearer token. The
WWW-Authenticateheader carries the RFC 6750 challenge.application/json401 example{ "error": { "code": "unauthorized", "message": "A valid bearer token is required.", "details": [], "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "doc_url": "https://cascades.crscreditapi.com/docs/api/errors/unauthorized" } } -
403 Token does not hold the required scope.
detailslists the scope(s) that were checked.application/json403 example{ "error": { "code": "insufficient_scope", "message": "This token does not have the required scope.", "details": [ { "field": "scope", "message": "executions:write" } ], "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "doc_url": "https://cascades.crscreditapi.com/docs/api/errors/insufficient_scope" } } -
404 Resource does not exist or belongs to another tenant / api_client
application/json404 example{ "error": { "code": "not_found", "message": "The requested resource was not found.", "details": [], "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "doc_url": "https://cascades.crscreditapi.com/docs/api/errors/not_found" } } -
429 Rate limit exceeded (60 req/min per IP on
/api/v1, 600 req/hour per token prefix, or 300 req/5 min per IP globally). The body is the standard error envelope andRetry-Aftergives the seconds until the window resets.application/json429 example{ "error": { "code": "rate_limited", "message": "Rate limit exceeded. Retry later.", "details": [], "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "doc_url": "https://cascades.crscreditapi.com/docs/api/errors/rate_limited" } }