Skip to main content
GET
Get risk configuration
Read stored thresholds and notification preferences. An empty updated_at means defaults have not yet been persisted. A notification switch does not prove that an email or webhook was delivered.

Authorizations

X-API-Key
string
header
required

API key for machine-to-machine authentication

Response

Current workspace result

auto_case_threshold
integer
Required range: 0 <= x <= 100
auto_block_threshold
integer
Required range: 0 <= x <= 100
auto_challenge_threshold
integer
Required range: 0 <= x <= 100
email_alerts_enabled
boolean

Stored notification preference; not proof of email delivery.

webhook_alerts_enabled
boolean

Stored notification preference; not a SIEM destination configuration.

siem_format
enum<string>
Available options:
json,
cef,
leef
tenant_id
string<uuid>
updated_at
string

RFC3339 when stored; empty for untouched defaults.