curl --request POST \
--url https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge \
--header 'Authorization: Bearer <token>'import requests
url = "https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge"
headers = {"Authorization": "Bearer <token>"}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
fetch('https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge"
req, _ := http.NewRequest("POST", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"mcp_server_id": "<string>",
"change_kind": "<string>",
"tool_name": "<string>",
"severity": "<string>",
"status": "<string>",
"to_version": 123,
"snapshot_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"policy_status_at_eval": "<string>",
"created_at": "2023-11-07T05:31:56Z",
"from_version": 123,
"detail": {},
"acknowledged_at": "2023-11-07T05:31:56Z",
"acknowledged_by": "<string>",
"resolved_at": "2023-11-07T05:31:56Z",
"resolved_by": "<string>",
"resolution": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>",
"input": "<unknown>",
"ctx": {}
}
]
}Acknowledge Policy Impact
open -> acknowledged.
404 if the impact doesn’t exist (or belongs to another org/policy); 409 if
it isn’t open. Both policy_id and impact_id are typed as
UUIDs, so a malformed id in the URL 422s here rather than reaching the
query and raising an unhandled asyncpg.DataError (=> 500) against a
UUID column. This is deliberately stricter than admin_v2’s
plain-str path-param convention.
curl --request POST \
--url https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge \
--header 'Authorization: Bearer <token>'import requests
url = "https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge"
headers = {"Authorization": "Bearer <token>"}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
fetch('https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge"
req, _ := http.NewRequest("POST", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://{host}/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"mcp_server_id": "<string>",
"change_kind": "<string>",
"tool_name": "<string>",
"severity": "<string>",
"status": "<string>",
"to_version": 123,
"snapshot_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"policy_status_at_eval": "<string>",
"created_at": "2023-11-07T05:31:56Z",
"from_version": 123,
"detail": {},
"acknowledged_at": "2023-11-07T05:31:56Z",
"acknowledged_by": "<string>",
"resolved_at": "2023-11-07T05:31:56Z",
"resolved_by": "<string>",
"resolution": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>",
"input": "<unknown>",
"ctx": {}
}
]
}Authorizations
A Barndoor API key, sent as Authorization: Bearer <key>. Keys are prefixed bdai_ and are opaque — do not attempt to decode one. Interchangeable with an OAuth 2.0 access token.
Response
Successful Response
One policy.policy_impact row, as returned by the impact list/detail routes.
Built with model_validate(row, from_attributes=True) directly off the ORM
row — the field set below is a straight projection of
policy_service.db.policy_impact.PolicyImpact, so there is no hand-mapping
to drift out of sync.