Files

Upload a file

Uploads the raw bytes of one evidence file. Send the file MIME type as Content-Type, or application/octet-stream. The response is the updated report: use its new revision for your next change.

On a draft, the file attaches to the report. Before a final decision, the file waits as message evidence until you send it with a message.

Limits: 10 files on a draft, 10 MiB for each file, 10 pending message files, and 40 files on a report in total. To upload the same bytes with the same file ID again is safe.

PUT

api

reports

{report_id}

files

{file_id}

Upload a file

curl --request PUT \
  --url https://kalligator.com/api/reports/{report_id}/files/{file_id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: */*' \
  --data '<string>'

import requests

url = "https://kalligator.com/api/reports/{report_id}/files/{file_id}"

payload = "<string>"
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "*/*"
}

response = requests.put(url, data=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': '*/*'},
  body: '<string>'
};

fetch('https://kalligator.com/api/reports/{report_id}/files/{file_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "id": "<string>",
  "program_id": "<string>",
  "program_name": "<string>",
  "status": "draft",
  "display_status": "<string>",
  "title": "<string>",
  "revision": 123,
  "created_at": "<string>",
  "updated_at": "<string>",
  "submitted_at": "<string>",
  "withdrawn_at": "<string>",
  "asset": "<string>",
  "description": "<string>",
  "cvss_vector": "<string>",
  "attachments": {},
  "submission": {
    "submitted_at": "<string>",
    "attachments": {},
    "content": {
      "title": "<string>",
      "asset": "<string>",
      "description": "<string>",
      "cvss_vector": ""
    },
    "program": {
      "policy_version": 123,
      "name": "<string>",
      "scope": "<string>",
      "exclusions": "<string>",
      "rules": "<string>",
      "eligibility": "<string>",
      "disclosure": "<string>",
      "rewards": {}
    },
    "stripe": {
      "status": "<string>",
      "checked_at": "<string>"
    }
  },
  "decision": {
    "outcome": "accepted",
    "at": "<string>",
    "message": "<string>"
  },
  "payout": {
    "status": "approving",
    "amount_cents": 123,
    "approved_at": "<string>",
    "transferred_at": "<string>",
    "received_at": "<string>",
    "payout_failed_at": "<string>"
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "current": {
    "id": "<string>",
    "program_id": "<string>",
    "program_name": "<string>",
    "status": "draft",
    "display_status": "<string>",
    "title": "<string>",
    "revision": 123,
    "created_at": "<string>",
    "updated_at": "<string>",
    "submitted_at": "<string>",
    "withdrawn_at": "<string>",
    "asset": "<string>",
    "description": "<string>",
    "cvss_vector": "<string>",
    "attachments": {},
    "submission": {
      "submitted_at": "<string>",
      "attachments": {},
      "content": {
        "title": "<string>",
        "asset": "<string>",
        "description": "<string>",
        "cvss_vector": ""
      },
      "program": {
        "policy_version": 123,
        "name": "<string>",
        "scope": "<string>",
        "exclusions": "<string>",
        "rules": "<string>",
        "eligibility": "<string>",
        "disclosure": "<string>",
        "rewards": {}
      },
      "stripe": {
        "status": "<string>",
        "checked_at": "<string>"
      }
    },
    "decision": {
      "outcome": "accepted",
      "at": "<string>",
      "message": "<string>"
    },
    "payout": {
      "status": "approving",
      "amount_cents": 123,
      "approved_at": "<string>",
      "transferred_at": "<string>",
      "received_at": "<string>",
      "payout_failed_at": "<string>"
    }
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "current": {
    "id": "<string>",
    "program_id": "<string>",
    "program_name": "<string>",
    "status": "draft",
    "display_status": "<string>",
    "title": "<string>",
    "revision": 123,
    "created_at": "<string>",
    "updated_at": "<string>",
    "submitted_at": "<string>",
    "withdrawn_at": "<string>",
    "asset": "<string>",
    "description": "<string>",
    "cvss_vector": "<string>",
    "attachments": {},
    "submission": {
      "submitted_at": "<string>",
      "attachments": {},
      "content": {
        "title": "<string>",
        "asset": "<string>",
        "description": "<string>",
        "cvss_vector": ""
      },
      "program": {
        "policy_version": 123,
        "name": "<string>",
        "scope": "<string>",
        "exclusions": "<string>",
        "rules": "<string>",
        "eligibility": "<string>",
        "disclosure": "<string>",
        "rewards": {}
      },
      "stripe": {
        "status": "<string>",
        "checked_at": "<string>"
      }
    },
    "decision": {
      "outcome": "accepted",
      "at": "<string>",
      "message": "<string>"
    },
    "payout": {
      "status": "approving",
      "amount_cents": 123,
      "approved_at": "<string>",
      "transferred_at": "<string>",
      "received_at": "<string>",
      "payout_failed_at": "<string>"
    }
  }
}

Authorizations

Authorization

string

header

required

A Firebase ID token, or a Kalligator API key (kal_…).

Path Parameters

report_id

string<uuid4>

required

The report ID.

file_id

string<uuid4>

required

A UUIDv4 that you make for this file.

Query Parameters

name

string

required

The file name, for example request.txt. No folder separators or control characters.

Required string length: 1 - 180

revision

integer

required

The current report revision.

Required range: x >= 0

Body

*/*

The raw file bytes. Send the file type as Content-Type.

The body is of type file.

Response

Successful Response

string

required

program_id

string

required

program_name

string

required

status

enum<string>

required

The report status. See the report lifecycle guide.

Available options:

draft,

triaging,

needs_info,

paused,

human_review,

accepted,

rejected,

duplicate,

insufficient_info,

withdrawn

display_status

string

required

The status text that the website shows.

title

string

required

revision

integer

required

Increases when you save the draft, upload or remove a file, submit, or withdraw. Send the latest value with your next change.

created_at

string | null

required

updated_at

string | null

required

submitted_at

string | null

required

withdrawn_at

string | null

required

asset

string

required

description

string

required

cvss_vector

string

required

attachments

Attachments · object

required

Files on the report, by file ID.

Show child attributes

submission

Submission · object | null

required

The frozen copy of the report, files, and program policy at submission. null for a draft.

Show child attributes

decision

Decision · object | null

required

The final decision and an optional message. null until a decision.

Show child attributes

payout

Payout · object | null

Your reward payment. null until the Kalligator team approves the reward.

Show child attributes

Upload a file

curl --request PUT \
  --url https://kalligator.com/api/reports/{report_id}/files/{file_id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: */*' \
  --data '<string>'

import requests

url = "https://kalligator.com/api/reports/{report_id}/files/{file_id}"

payload = "<string>"
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "*/*"
}

response = requests.put(url, data=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': '*/*'},
  body: '<string>'
};

fetch('https://kalligator.com/api/reports/{report_id}/files/{file_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "id": "<string>",
  "program_id": "<string>",
  "program_name": "<string>",
  "status": "draft",
  "display_status": "<string>",
  "title": "<string>",
  "revision": 123,
  "created_at": "<string>",
  "updated_at": "<string>",
  "submitted_at": "<string>",
  "withdrawn_at": "<string>",
  "asset": "<string>",
  "description": "<string>",
  "cvss_vector": "<string>",
  "attachments": {},
  "submission": {
    "submitted_at": "<string>",
    "attachments": {},
    "content": {
      "title": "<string>",
      "asset": "<string>",
      "description": "<string>",
      "cvss_vector": ""
    },
    "program": {
      "policy_version": 123,
      "name": "<string>",
      "scope": "<string>",
      "exclusions": "<string>",
      "rules": "<string>",
      "eligibility": "<string>",
      "disclosure": "<string>",
      "rewards": {}
    },
    "stripe": {
      "status": "<string>",
      "checked_at": "<string>"
    }
  },
  "decision": {
    "outcome": "accepted",
    "at": "<string>",
    "message": "<string>"
  },
  "payout": {
    "status": "approving",
    "amount_cents": 123,
    "approved_at": "<string>",
    "transferred_at": "<string>",
    "received_at": "<string>",
    "payout_failed_at": "<string>"
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "current": {
    "id": "<string>",
    "program_id": "<string>",
    "program_name": "<string>",
    "status": "draft",
    "display_status": "<string>",
    "title": "<string>",
    "revision": 123,
    "created_at": "<string>",
    "updated_at": "<string>",
    "submitted_at": "<string>",
    "withdrawn_at": "<string>",
    "asset": "<string>",
    "description": "<string>",
    "cvss_vector": "<string>",
    "attachments": {},
    "submission": {
      "submitted_at": "<string>",
      "attachments": {},
      "content": {
        "title": "<string>",
        "asset": "<string>",
        "description": "<string>",
        "cvss_vector": ""
      },
      "program": {
        "policy_version": 123,
        "name": "<string>",
        "scope": "<string>",
        "exclusions": "<string>",
        "rules": "<string>",
        "eligibility": "<string>",
        "disclosure": "<string>",
        "rewards": {}
      },
      "stripe": {
        "status": "<string>",
        "checked_at": "<string>"
      }
    },
    "decision": {
      "outcome": "accepted",
      "at": "<string>",
      "message": "<string>"
    },
    "payout": {
      "status": "approving",
      "amount_cents": 123,
      "approved_at": "<string>",
      "transferred_at": "<string>",
      "received_at": "<string>",
      "payout_failed_at": "<string>"
    }
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "current": {
    "id": "<string>",
    "program_id": "<string>",
    "program_name": "<string>",
    "status": "draft",
    "display_status": "<string>",
    "title": "<string>",
    "revision": 123,
    "created_at": "<string>",
    "updated_at": "<string>",
    "submitted_at": "<string>",
    "withdrawn_at": "<string>",
    "asset": "<string>",
    "description": "<string>",
    "cvss_vector": "<string>",
    "attachments": {},
    "submission": {
      "submitted_at": "<string>",
      "attachments": {},
      "content": {
        "title": "<string>",
        "asset": "<string>",
        "description": "<string>",
        "cvss_vector": ""
      },
      "program": {
        "policy_version": 123,
        "name": "<string>",
        "scope": "<string>",
        "exclusions": "<string>",
        "rules": "<string>",
        "eligibility": "<string>",
        "disclosure": "<string>",
        "rewards": {}
      },
      "stripe": {
        "status": "<string>",
        "checked_at": "<string>"
      }
    },
    "decision": {
      "outcome": "accepted",
      "at": "<string>",
      "message": "<string>"
    },
    "payout": {
      "status": "approving",
      "amount_cents": 123,
      "approved_at": "<string>",
      "transferred_at": "<string>",
      "received_at": "<string>",
      "payout_failed_at": "<string>"
    }
  }
}

Overview

Programs

Reports

Files

Messages

Account

API keys

Upload a file

Authorizations

Path Parameters

Query Parameters

Body

Response