Integrity

Integrity alerts for managers (never shown to the agent concerned): review, dismiss, reopen.

GET/v1/integrity/alerts

Integrity alerts

Newest day first, within your `calls.integrity` scope — never your own alerts.

Access: Signed-in members only (web or Android session) — not for API keys. Permission calls.integrity.

Parameters

statusquery: "open" | "reviewed" | "dismissed" | "cleared" | "all"
severityquery: "high" | "medium" | "low"
kindquery: string
member_idquery: Id
Opaque record id.
fromquery: string
toquery: string
cursorquery: string
Opaque cursor from the previous page (`meta.next_cursor`).
limitquery: integer

Response · 200

datarequired: array of IntegrityAlert
metarequired: PageMeta

Request

curl -X GET 'https://api.propzolo.com/v1/integrity/alerts' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": [
    {
      "id": "cmusrceel0000q7kaafxqi1om",
      "member": {
        "id": "cmusrceel0000q7kaafxqi1om",
        "name": "string"
      },
      "day": "string",
      "kind": "string",
      "kind_label": "string",
      "severity": "high",
      "title": "string",
      "detail": "string",
      "count": 0,
      "status": "open",
      "review_note": "string",
      "reviewed_by": {
        "id": "cmusrceel0000q7kaafxqi1om",
        "name": "string"
      },
      "reviewed_at": "2026-10-06T05:30:00.000Z",
      "first_seen_at": "2026-10-06T05:30:00.000Z",
      "last_seen_at": "2026-10-06T05:30:00.000Z"
    }
  ],
  "meta": {
    "next_cursor": "string",
    "has_more": true
  }
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/integrity/alerts/{id}

One integrity alert with its evidence

Access: Signed-in members only (web or Android session) — not for API keys. Permission calls.integrity.

Parameters

idpathrequired: Id
Opaque record id.

Response · 200

datarequired: IntegrityAlertDetail
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/integrity/alerts/{id}' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "member": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "name": "string"
    },
    "day": "string",
    "kind": "string",
    "kind_label": "string",
    "severity": "high",
    "title": "string",
    "detail": "string",
    "count": 0,
    "status": "open",
    "review_note": "string",
    "reviewed_by": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "name": "string"
    },
    "reviewed_at": "2026-10-06T05:30:00.000Z",
    "first_seen_at": "2026-10-06T05:30:00.000Z",
    "last_seen_at": "2026-10-06T05:30:00.000Z",
    "evidence": null
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/integrity/alerts/{id}/review

Review, dismiss or reopen an alert

reviewed · dismissed (a note is required) · open (look again). Audited.

Access: Signed-in members only (web or Android session) — not for API keys. Permission calls.integrity.

Parameters

idpathrequired: Id
Opaque record id.
Idempotency-Keyheader: string
Unique key (a UUID) per logical request. A retry with the same key and body replays the first response for 24 hours (marked Idempotent-Replayed: true); the same key with another body is a 409.

Request body

statusrequired: "reviewed" | "dismissed" | "open"
note: string or null

Response · 200

datarequired: IntegrityAlertDetail
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/integrity/alerts/{id}/review' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Idempotency-Key: 6c0f1d3e-…' \
  -H 'Content-Type: application/json' \
  -d '{"status":"reviewed","note":"string"}'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "member": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "name": "string"
    },
    "day": "string",
    "kind": "string",
    "kind_label": "string",
    "severity": "high",
    "title": "string",
    "detail": "string",
    "count": 0,
    "status": "open",
    "review_note": "string",
    "reviewed_by": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "name": "string"
    },
    "reviewed_at": "2026-10-06T05:30:00.000Z",
    "first_seen_at": "2026-10-06T05:30:00.000Z",
    "last_seen_at": "2026-10-06T05:30:00.000Z",
    "evidence": null
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/integrity/summary

Open integrity alerts in numbers

Access: Signed-in members only (web or Android session) — not for API keys. Permission calls.integrity.

Response · 200

datarequired: object
data.openrequired: integer
data.highrequired: integer
data.by_kindrequired: map of integer
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/integrity/summary' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "open": 0,
    "high": 0,
    "by_kind": {}
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

{ "data": [ { "id": "cmusrceel0000q7kaafxqi1om", "member": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string" }, "day": "string", "kind": "string", "kind_label": "string", "severity": "high", "title": "string", "detail": "string", "count": 0, "status": "open", "review_note": "string", "reviewed_by": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string" }, "reviewed_at": "2026-10-06T05:30:00.000Z", "first_seen_at": "2026-10-06T05:30:00.000Z", "last_seen_at": "2026-10-06T05:30:00.000Z" } ], "meta": { "next_cursor": "string", "has_more": true } }

{ "data": { "id": "cmusrceel0000q7kaafxqi1om", "member": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string" }, "day": "string", "kind": "string", "kind_label": "string", "severity": "high", "title": "string", "detail": "string", "count": 0, "status": "open", "review_note": "string", "reviewed_by": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string" }, "reviewed_at": "2026-10-06T05:30:00.000Z", "first_seen_at": "2026-10-06T05:30:00.000Z", "last_seen_at": "2026-10-06T05:30:00.000Z", "evidence": null }, "meta": {} }

curl -X POST 'https://api.propzolo.com/v1/integrity/alerts/{id}/review' \ -H 'Authorization: Bearer pz_live_…' \ -H 'Idempotency-Key: 6c0f1d3e-…' \ -H 'Content-Type: application/json' \ -d '{"status":"reviewed","note":"string"}'

GET/v1/integrity/summary

Open integrity alerts in numbers

Access: Signed-in members only (web or Android session) — not for API keys. Permission calls.integrity.

Response · 200

datarequired: object
data.openrequired: integer
data.highrequired: integer
data.by_kindrequired: map of integer
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/integrity/summary' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "open": 0,
    "high": 0,
    "by_kind": {}
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.