List (and search) tenant verifications, newest first

Newest-first list, opaque-cursor paginated. next_cursor from the previous page round-trips back as ?cursor=; absent means the list is exhausted.

The list is tenant-scoped — operator sessions see only their own tenant’s verifications. API key callers see only the tenant the key belongs to. Cross-tenant pagination is never possible.

Search filters (all optional, combined with AND): status, verdict, reason_code, from/to (inclusive bounds on created_at), metadata.<key>=<value> (exact match against the verification’s config.metadata; repeat with different keys to AND them — e.g. metadata.client_label=estancia-la-julia), and caravana (exact match against ocr.primary of ANY capture on the verification — useful for looking up a verification by a plate/tag number captured in-frame). status/verdict/reason_code/from/to are validated: an invalid value 400s rather than silently returning an unfiltered page. Because a page can be filtered after the underlying DDB page is fetched (notably caravana), a response with fewer than limit items and a defined next_cursor does NOT mean the list is exhausted — keep paging.

GET /v1/verifications

List (and search) tenant verifications, newest first

cURL

curl --request GET \
  --url https://platform-staging.get-rial.com/v1/verifications \
  --cookie rial_session=

200

{
  "items": [
    {
      "id": "vfy_01HXYZABCDEFGHJKMNPQRSTVWX",
      "status": "completed",
      "capture_url": "https://verify.get-rial.com/v/vfy_01HXYZABCDEFGHJKMNPQRSTVWX",
      "created_at": "2026-05-28T13:00:00.000Z",
      "expires_at": "2026-05-28T14:00:00.000Z",
      "captures_count": 3,
      "config": {
        "max_captures": 3,
        "steps": [
          {
            "key": "capture_1",
            "type": "image",
            "description": "",
            "min": 3,
            "max": 3
          }
        ],
        "signals_required": [
          "screen",
          "ai"
        ],
        "context": {
          "kind": "damage_claim",
          "summary": "Toyota Corolla front bumper"
        },
        "webhook_url": "https://api.acmeinsurance.com/rial/webhooks",
        "metadata": {
          "claim_id": "CLM-9912"
        }
      },
      "narrative": "Front bumper damaged after low-speed collision in supermarket parking lot.",
      "verdict": {
        "label": "verified",
        "score": 0.92,
        "signals": {
          "screen_detection": {
            "screen_detected": false,
            "confidence": 0.97
          },
          "ai_detection": {
            "label": "likely_human",
            "confidence": 0.88
          }
        }
      }
    },
    {
      "id": "vfy_01HXYZABCDEFGHJKMNPQRSTVWX",
      "status": "pending",
      "capture_url": "https://verify.get-rial.com/v/vfy_01HXYZABCDEFGHJKMNPQRSTVWX",
      "created_at": "2026-05-28T13:00:00.000Z",
      "expires_at": "2026-05-28T14:00:00.000Z",
      "captures_count": 0,
      "config": {
        "max_captures": 3,
        "steps": [
          {
            "key": "capture_1",
            "type": "image",
            "description": "",
            "min": 3,
            "max": 3
          }
        ],
        "signals_required": [
          "screen",
          "ai"
        ],
        "context": {
          "kind": "damage_claim",
          "summary": "Toyota Corolla front bumper"
        },
        "webhook_url": "https://api.acmeinsurance.com/rial/webhooks",
        "metadata": {
          "claim_id": "CLM-9912"
        }
      }
    }
  ],
  "next_cursor": "eyJwayI6ICJWRlkjdmZ5XzAxLi4uIiwic2siOiAiTUVUQSJ9"
}

Authorizations

cookieSessionbearerApiKey

rial_session · string · cookie · required

Dashboard / operator session cookie. Set by /v1/auth/google/callback after Google OAuth, JWT signed with the rotating rial-platform/session-signing HMAC. Read on every request the SPA makes with credentials: include. Browser-only — server-to-server callers use bearerApiKey instead.

Query Parameters

limit · integer

Soft cap; adapters may return fewer.

Required range: 1 <= x <= 100

Example:

20

cursor · string

Opaque cursor from a previous response. Treat as a black box.

status · enum<string>

Exact match on verification status.

Available options: pending, partially_captured, completed, expired, failed, abandoned

verdict · enum<string>

Exact match on verdict.label. Pending verifications never match.

Available options: verified, suspicious, failed

reason_code · enum<string>

Exact match on verdict.reason_code. Verifications with no verdict, or a verified verdict, never match.

Available options: screen_detected, ai_generated, context_mismatch, reverse_search_match, depth_anomaly

from · string

Inclusive lower bound on created_at. ISO 8601 date or date-time.

Example:

"2026-07-01T00:00:00.000Z"

to · string

Inclusive upper bound on created_at. ISO 8601 date or date-time.

Example:

"2026-07-31T23:59:59.999Z"

metadata.<key> · string

Exact match against config.metadata[<key>]. Repeatable with different keys (ANDed). Literal param name is metadata. followed by the metadata key, e.g. metadata.client_label=estancia-la-julia.

Example:

"estancia-la-julia"

caravana · string

Exact match against ocr.primary of any capture on the verification.

Example:

"AB123CD"

Response

200

application/json

A page of verifications matching the filters. next_cursor absent means no more pages.

items · object[] · required

Array of Verification objects.

next_cursor · string