Skip to main content
GET
cURL

Authorizations

Authorization
string
header
required

Your API key, sent as Authorization: Bearer <key>. A key is nrk_live_ or nrk_test_, a 26-character key id, _ and a 43-character secret. A key sees only its own environment's data.

Each key has one or more scopes: assess creates and reads assessments, records outcomes and reports key usage; history reads assessments, an account's current risk, the accounts whose risk changed and an account's history, records enforcements and erases an account; detailed adds the detailed view; webhooks registers, tests, rotates and deletes webhook endpoints; integrations registers and manages hosted provider integrations. A missing, unknown, revoked or expired key answers 401. A valid key without the scope an operation needs answers 403.

Query Parameters

changed_since
string

next_cursor from an earlier page, unchanged. Absent, the list starts from the oldest change.

Required string length: 1 - 256
Pattern: ^[A-Za-z0-9_-]+$
limit
integer
default:50

Most accounts per page.

Required range: 1 <= x <= 100
unenforced
boolean
default:false

true lists only accounts with a decision other than allow for some flow and no applied enforcement at their current risk_version.

Response

One page of the accounts whose risk changed after changed_since, oldest change first, with the cursor to poll from next.

Body of the 200 answer to GET /v1/accounts: the calling workspace's accounts whose risk changed after changed_since, in the environment of the calling key, oldest change first. An account is listed when its risk_version advanced and it has a current risk, and each item is the account exactly as GET /v1/accounts/{account_id} answers it. An account appears once per page, at its latest change; when its risk changes again later, it appears again on a later page with the newer risk_version. next_cursor is always present: pass it back as changed_since to read the changes made after this page.

items
Account · object[]
required
Maximum array length: 100
next_cursor
string
required

Opaque cursor after the last change this page read, bound to the workspace and the environment of the calling key. Pass it back unchanged as changed_since. It is present on every page, the last one included: when nothing changed after changed_since it is the cursor that was sent, so a poller keeps calling with the latest next_cursor. A tampered or foreign cursor answers 400 invalid_cursor. Consumers do not parse it.

Required string length: 1 - 256
Pattern: ^[A-Za-z0-9_-]+$