> ## Documentation Index > Fetch the complete documentation index at: https://docs.coderabbit.ai/llms.txt > Use this file to discover all available pages before exploring further. # List runtime validation attempts for a finding > Lists runtime validation attempts for one finding identity, up to 25 per page. Pass the findingIdentityId that get_security_runtime_validation_capability returns when available is true as finding_identity_id. Requires runtime validation to be enabled for the organization. Follow next_cursor with the same repository and finding identity. > [tab] CLI Tool > > ```bash > coderabbit api request "/security/repositories/$REPOSITORY_ID/validations?finding_identity_id=$FINDING_IDENTITY_ID" > ``` > > To install and sign in to the CLI, see [Call from the CLI](https://docs.coderabbit.ai/api/cli.md). > [tab] MCP Server > > An agent connected to the [CodeRabbit MCP server](https://docs.coderabbit.ai/api/mcp.md) runs this operation as the `list_security_runtime_validations` tool. The connection selects the organization, so the arguments have no `org_id` or `org_name`. > > ```json > { > "method": "tools/call", > "params": { > "name": "list_security_runtime_validations", > "arguments": { > "repository_id": "", > "finding_identity_id": "" > } > } > } > ``` ## OpenAPI ````yaml /openapi.json get /v1/security/repositories/{repository_id}/validations openapi: 3.0.0 info: title: CodeRabbit API version: 1.0.0 description: >- Read and manage CodeRabbit reviews, coding tasks, Verify, Triage, security findings, Knowledge Base, configuration, and users for your organization. servers: - url: https://api.coderabbit.ai description: US region - url: https://api.eu.coderabbit.ai description: EU region security: - ApiKeyAuth: [] tags: - name: Organizations and repositories - name: Pull requests and reviews - name: Coding Agent - name: Coding environments - name: Verify - name: Triage - name: Security - name: Knowledge Base - name: Automations - name: Reports - name: Configuration - name: Connections - name: Users and roles - name: Usage and metrics paths: /v1/security/repositories/{repository_id}/validations: get: tags: - Security summary: List runtime validation attempts for a finding description: >- Lists runtime validation attempts for one finding identity, up to 25 per page. Pass the findingIdentityId that get_security_runtime_validation_capability returns when available is true as finding_identity_id. Requires runtime validation to be enabled for the organization. Follow next_cursor with the same repository and finding identity. operationId: list_security_runtime_validations parameters: - name: repository_id in: path required: true schema: type: string minLength: 1 maxLength: 255 - name: org_id in: query required: false schema: type: string minLength: 1 description: >- Organization for a workspace key: the Git-provider organization ID (scope.provider_organization_id) or the CodeRabbit organization ID (scope.id, or id from list organizations). Supply either org_id or org_name, never both. Omit for organization keys and MCP connections. allowEmptyValue: true allowReserved: true - name: org_name in: query required: false schema: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9-]{0,38}$ description: >- GitHub organization login, such as coderabbitai, not its display name. Matched case-insensitively within the authenticated workspace. Supply either org_name or org_id, never both; omit for organization keys and MCP connections. allowEmptyValue: true allowReserved: true - name: finding_identity_id in: query required: true schema: type: string format: uuid allowEmptyValue: true allowReserved: true - name: limit in: query required: false schema: type: integer minimum: 1 maximum: 25 allowEmptyValue: true allowReserved: true - name: cursor in: query required: false schema: type: string minLength: 1 maxLength: 4096 description: >- Opaque next_cursor from the previous page. Keep the same repository and finding identity. allowEmptyValue: true allowReserved: true responses: '200': description: OK content: application/json: schema: type: object properties: attempts: type: array items: anyOf: - anyOf: - type: object properties: schemaVersion: enum: - 1 status: enum: - pending locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false progress: anyOf: - type: object properties: schemaVersion: enum: - 1 locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false taskId: type: string minLength: 1 maxLength: 256 writerGeneration: type: integer minimum: 0 sequence: type: integer minimum: 0 executionStatus: enum: - queued - running - waiting - completed - canceled - failed type: string occurredAt: type: string format: date-time reason: anyOf: - type: object properties: code: enum: - setup_failed - missing_dependency - authentication_fixture_failed - source_changed - timeout - canceled - invalid_test - execution_failed - insufficient_evidence - evidence_publication_failed type: string message: type: string minLength: 1 maxLength: 4096 required: - code - message additionalProperties: false - type: string nullable: true enum: - null required: - schemaVersion - locator - taskId - writerGeneration - sequence - executionStatus - occurredAt - reason additionalProperties: false - type: string nullable: true enum: - null required: - schemaVersion - status - locator - progress additionalProperties: false - type: object properties: schemaVersion: enum: - 1 status: enum: - available receipt: type: object properties: schemaVersion: enum: - 1 locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false taskId: type: string minLength: 1 maxLength: 256 testedRevision: anyOf: - type: string pattern: ^(?:[a-f0-9]{40}|[a-f0-9]{64})$ - type: string nullable: true enum: - null manifest: type: object properties: artifactId: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$ sha256: type: string pattern: ^[a-f0-9]{64}$ required: - artifactId - sha256 additionalProperties: false conclusion: enum: - reproduced - not_reproduced - inconclusive type: string summary: type: string minLength: 1 maxLength: 4096 reason: anyOf: - type: object properties: code: enum: - setup_failed - missing_dependency - authentication_fixture_failed - source_changed - timeout - canceled - invalid_test - execution_failed - insufficient_evidence - evidence_publication_failed type: string message: type: string minLength: 1 maxLength: 4096 required: - code - message additionalProperties: false - type: string nullable: true enum: - null publishedAt: type: string format: date-time required: - schemaVersion - locator - taskId - testedRevision - manifest - conclusion - summary - reason - publishedAt additionalProperties: false required: - schemaVersion - status - receipt additionalProperties: false - type: object properties: schemaVersion: enum: - 1 status: enum: - unavailable locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false reason: enum: - not_published failure: type: object properties: code: enum: - setup_failed - missing_dependency - authentication_fixture_failed - source_changed - timeout - canceled - invalid_test - execution_failed - insufficient_evidence - evidence_publication_failed type: string message: type: string minLength: 1 maxLength: 4096 required: - code - message additionalProperties: false required: - schemaVersion - status - locator - reason - failure additionalProperties: false - type: object properties: schemaVersion: enum: - 1 status: enum: - unavailable reason: enum: - expired - deleted - missing - corrupt type: string receipt: type: object properties: schemaVersion: enum: - 1 locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false taskId: type: string minLength: 1 maxLength: 256 testedRevision: anyOf: - type: string pattern: ^(?:[a-f0-9]{40}|[a-f0-9]{64})$ - type: string nullable: true enum: - null manifest: type: object properties: artifactId: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$ sha256: type: string pattern: ^[a-f0-9]{64}$ required: - artifactId - sha256 additionalProperties: false conclusion: enum: - reproduced - not_reproduced - inconclusive type: string summary: type: string minLength: 1 maxLength: 4096 reason: anyOf: - type: object properties: code: enum: - setup_failed - missing_dependency - authentication_fixture_failed - source_changed - timeout - canceled - invalid_test - execution_failed - insufficient_evidence - evidence_publication_failed type: string message: type: string minLength: 1 maxLength: 4096 required: - code - message additionalProperties: false - type: string nullable: true enum: - null publishedAt: type: string format: date-time required: - schemaVersion - locator - taskId - testedRevision - manifest - conclusion - summary - reason - publishedAt additionalProperties: false required: - schemaVersion - status - reason - receipt additionalProperties: false - anyOf: - type: object properties: schemaVersion: enum: - 2 status: enum: - available receipt: type: object properties: schemaVersion: enum: - 2 mode: enum: - manual_reproducer guideStatus: enum: - ready - partial - unavailable type: string locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false taskId: type: string minLength: 1 maxLength: 256 testedRevision: type: string pattern: ^(?:[a-f0-9]{40}|[a-f0-9]{64})$ manifest: type: object properties: artifactId: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$ sha256: type: string pattern: ^[a-f0-9]{64}$ required: - artifactId - sha256 additionalProperties: false summary: type: string minLength: 1 maxLength: 4096 publishedAt: type: string format: date-time required: - schemaVersion - mode - guideStatus - locator - taskId - testedRevision - manifest - summary - publishedAt additionalProperties: false required: - schemaVersion - status - receipt additionalProperties: false - type: object properties: schemaVersion: enum: - 2 status: enum: - unavailable reason: enum: - expired - deleted - missing - corrupt type: string receipt: type: object properties: schemaVersion: enum: - 2 mode: enum: - manual_reproducer guideStatus: enum: - ready - partial - unavailable type: string locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false taskId: type: string minLength: 1 maxLength: 256 testedRevision: type: string pattern: ^(?:[a-f0-9]{40}|[a-f0-9]{64})$ manifest: type: object properties: artifactId: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$ sha256: type: string pattern: ^[a-f0-9]{64}$ required: - artifactId - sha256 additionalProperties: false summary: type: string minLength: 1 maxLength: 4096 publishedAt: type: string format: date-time required: - schemaVersion - mode - guideStatus - locator - taskId - testedRevision - manifest - summary - publishedAt additionalProperties: false required: - schemaVersion - status - reason - receipt additionalProperties: false - anyOf: - type: object properties: schemaVersion: enum: - 3 status: enum: - available receipt: type: object properties: schemaVersion: enum: - 3 mode: enum: - qa_reproducer locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false taskId: type: string minLength: 1 maxLength: 256 testedRevision: type: string pattern: ^(?:[a-f0-9]{40}|[a-f0-9]{64})$ manifest: type: object properties: artifactId: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$ sha256: type: string pattern: ^[a-f0-9]{64}$ required: - artifactId - sha256 additionalProperties: false guide: type: object properties: validationId: type: string format: uuid manifest: type: object properties: artifactId: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$ sha256: type: string pattern: ^[a-f0-9]{64}$ required: - artifactId - sha256 additionalProperties: false required: - validationId - manifest additionalProperties: false conclusion: enum: - reproduced - not_reproduced - inconclusive type: string summary: type: string minLength: 1 maxLength: 4096 reason: anyOf: - type: object properties: code: enum: - setup_failed - missing_dependency - authentication_fixture_failed - source_changed - timeout - canceled - invalid_test - execution_failed - insufficient_evidence - evidence_publication_failed type: string message: type: string minLength: 1 maxLength: 4096 required: - code - message additionalProperties: false - type: string nullable: true enum: - null severityAssessment: type: object properties: intrinsicSeverity: enum: - critical - high - medium - low type: string reachability: enum: - external - internal - unreachable - unknown type: string exploitability: enum: - trivial - moderate - difficult - theoretical - unknown type: string assumptions: type: array maxItems: 16 items: type: string minLength: 1 maxLength: 1000 findingVersion: type: string pattern: ^[a-f0-9]{64}$ previousSeverity: enum: - critical - high - medium - low type: string severity: enum: - critical - high - medium - low type: string rationale: type: string minLength: 1 maxLength: 4096 evidenceArtifactIds: type: array minItems: 1 maxItems: 64 items: type: string minLength: 1 maxLength: 128 required: - intrinsicSeverity - reachability - exploitability - assumptions - findingVersion - previousSeverity - severity - rationale - evidenceArtifactIds additionalProperties: false publishedAt: type: string format: date-time required: - schemaVersion - mode - locator - taskId - testedRevision - manifest - guide - conclusion - summary - reason - publishedAt additionalProperties: false required: - schemaVersion - status - receipt additionalProperties: false - type: object properties: schemaVersion: enum: - 3 status: enum: - unavailable reason: enum: - expired - deleted - missing - corrupt type: string receipt: type: object properties: schemaVersion: enum: - 3 mode: enum: - qa_reproducer locator: type: object properties: schemaVersion: enum: - 1 validationId: type: string format: uuid organizationId: type: string format: uuid workspaceId: type: string format: uuid repository: type: object properties: provider: enum: - github - gitlab - bitbucket - azure-devops type: string id: type: string minLength: 1 maxLength: 256 required: - provider - id additionalProperties: false findingIdentityId: type: string format: uuid findingOccurrenceId: type: string minLength: 1 maxLength: 256 scanId: type: string format: uuid required: - schemaVersion - validationId - organizationId - workspaceId - repository - findingIdentityId - findingOccurrenceId - scanId additionalProperties: false taskId: type: string minLength: 1 maxLength: 256 testedRevision: type: string pattern: ^(?:[a-f0-9]{40}|[a-f0-9]{64})$ manifest: type: object properties: artifactId: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$ sha256: type: string pattern: ^[a-f0-9]{64}$ required: - artifactId - sha256 additionalProperties: false guide: type: object properties: validationId: type: string format: uuid manifest: type: object properties: artifactId: type: string pattern: ^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$ sha256: type: string pattern: ^[a-f0-9]{64}$ required: - artifactId - sha256 additionalProperties: false required: - validationId - manifest additionalProperties: false conclusion: enum: - reproduced - not_reproduced - inconclusive type: string summary: type: string minLength: 1 maxLength: 4096 reason: anyOf: - type: object properties: code: enum: - setup_failed - missing_dependency - authentication_fixture_failed - source_changed - timeout - canceled - invalid_test - execution_failed - insufficient_evidence - evidence_publication_failed type: string message: type: string minLength: 1 maxLength: 4096 required: - code - message additionalProperties: false - type: string nullable: true enum: - null severityAssessment: type: object properties: intrinsicSeverity: enum: - critical - high - medium - low type: string reachability: enum: - external - internal - unreachable - unknown type: string exploitability: enum: - trivial - moderate - difficult - theoretical - unknown type: string assumptions: type: array maxItems: 16 items: type: string minLength: 1 maxLength: 1000 findingVersion: type: string pattern: ^[a-f0-9]{64}$ previousSeverity: enum: - critical - high - medium - low type: string severity: enum: - critical - high - medium - low type: string rationale: type: string minLength: 1 maxLength: 4096 evidenceArtifactIds: type: array minItems: 1 maxItems: 64 items: type: string minLength: 1 maxLength: 128 required: - intrinsicSeverity - reachability - exploitability - assumptions - findingVersion - previousSeverity - severity - rationale - evidenceArtifactIds additionalProperties: false publishedAt: type: string format: date-time required: - schemaVersion - mode - locator - taskId - testedRevision - manifest - guide - conclusion - summary - reason - publishedAt additionalProperties: false required: - schemaVersion - status - reason - receipt additionalProperties: false next_cursor: anyOf: - type: string - type: string nullable: true enum: - null required: - attempts - next_cursor '400': description: Bad request content: application/json: schema: type: object properties: error: type: object properties: code: enum: - invalid_request type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '401': description: Unauthorized content: application/json: schema: type: object properties: error: type: object properties: code: enum: - unauthenticated type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '403': description: Forbidden content: application/json: schema: type: object properties: error: type: object properties: code: enum: - forbidden type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '404': description: Not found content: application/json: schema: type: object properties: error: type: object properties: code: enum: - not_found type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '409': description: Conflict content: application/json: schema: type: object properties: error: type: object properties: code: enum: - head_changed - conflict type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '412': description: Precondition failed content: application/json: schema: type: object properties: error: type: object properties: code: enum: - precondition_failed type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '413': description: Content too large content: application/json: schema: type: object properties: error: type: object properties: code: enum: - payload_too_large type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '429': description: Too many requests content: application/json: schema: type: object properties: error: type: object properties: code: enum: - rate_limit_exceeded type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '500': description: Internal server error content: application/json: schema: type: object properties: error: type: object properties: code: enum: - internal_error type: string message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false '503': description: Service unavailable content: application/json: schema: type: object properties: error: type: object properties: code: type: string enum: - unavailable message: type: string retry_after: type: integer minimum: 0 exclusiveMinimum: true required: - code - message additionalProperties: false required: - error additionalProperties: false components: securitySchemes: ApiKeyAuth: type: apiKey in: header name: x-coderabbitai-api-key description: >- See [Authentication](/api/authentication) for the key types and where to create a key. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.