Reports

Submit a report

Submits a draft and starts triage. The report moves to triaging. Kalligator freezes the report content, its ready files, and the program policy at this time.

Submission needs all of these:

A verified email.
A Stripe payout account with status ready.
A title, an asset, and a description with text below the template headings.
No unfinished file uploads.
A program with open intake and a reward pool that is not paused.
Fewer than five active reports.

To submit again with the same revision is safe. The API returns the submitted report and does not start a second triage.

POST

api

reports

{report_id}

submit

Submit a report

curl --request POST \
  --url https://kalligator.com/api/reports/{report_id}/submit \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "revision": 1
}'

import requests

url = "https://kalligator.com/api/reports/{report_id}/submit"

payload = { "revision": 1 }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({revision: 1})
};

fetch('https://kalligator.com/api/reports/{report_id}/submit', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "id": "<string>",
  "program_id": "<string>",
  "program_name": "<string>",
  "status": "draft",
  "display_status": "<string>",
  "title": "<string>",
  "revision": 123,
  "created_at": "<string>",
  "updated_at": "<string>",
  "submitted_at": "<string>",
  "withdrawn_at": "<string>",
  "asset": "<string>",
  "description": "<string>",
  "cvss_vector": "<string>",
  "attachments": {},
  "submission": {
    "submitted_at": "<string>",
    "attachments": {},
    "content": {
      "title": "<string>",
      "asset": "<string>",
      "description": "<string>",
      "cvss_vector": ""
    },
    "program": {
      "policy_version": 123,
      "name": "<string>",
      "scope": "<string>",
      "exclusions": "<string>",
      "rules": "<string>",
      "eligibility": "<string>",
      "disclosure": "<string>",
      "rewards": {}
    },
    "stripe": {
      "status": "<string>",
      "checked_at": "<string>"
    }
  },
  "decision": {
    "outcome": "accepted",
    "at": "<string>",
    "message": "<string>"
  },
  "payout": {
    "status": "approving",
    "amount_cents": 123,
    "approved_at": "<string>",
    "transferred_at": "<string>",
    "received_at": "<string>",
    "payout_failed_at": "<string>"
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "current": {
    "id": "<string>",
    "program_id": "<string>",
    "program_name": "<string>",
    "status": "draft",
    "display_status": "<string>",
    "title": "<string>",
    "revision": 123,
    "created_at": "<string>",
    "updated_at": "<string>",
    "submitted_at": "<string>",
    "withdrawn_at": "<string>",
    "asset": "<string>",
    "description": "<string>",
    "cvss_vector": "<string>",
    "attachments": {},
    "submission": {
      "submitted_at": "<string>",
      "attachments": {},
      "content": {
        "title": "<string>",
        "asset": "<string>",
        "description": "<string>",
        "cvss_vector": ""
      },
      "program": {
        "policy_version": 123,
        "name": "<string>",
        "scope": "<string>",
        "exclusions": "<string>",
        "rules": "<string>",
        "eligibility": "<string>",
        "disclosure": "<string>",
        "rewards": {}
      },
      "stripe": {
        "status": "<string>",
        "checked_at": "<string>"
      }
    },
    "decision": {
      "outcome": "accepted",
      "at": "<string>",
      "message": "<string>"
    },
    "payout": {
      "status": "approving",
      "amount_cents": 123,
      "approved_at": "<string>",
      "transferred_at": "<string>",
      "received_at": "<string>",
      "payout_failed_at": "<string>"
    }
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "current": {
    "id": "<string>",
    "program_id": "<string>",
    "program_name": "<string>",
    "status": "draft",
    "display_status": "<string>",
    "title": "<string>",
    "revision": 123,
    "created_at": "<string>",
    "updated_at": "<string>",
    "submitted_at": "<string>",
    "withdrawn_at": "<string>",
    "asset": "<string>",
    "description": "<string>",
    "cvss_vector": "<string>",
    "attachments": {},
    "submission": {
      "submitted_at": "<string>",
      "attachments": {},
      "content": {
        "title": "<string>",
        "asset": "<string>",
        "description": "<string>",
        "cvss_vector": ""
      },
      "program": {
        "policy_version": 123,
        "name": "<string>",
        "scope": "<string>",
        "exclusions": "<string>",
        "rules": "<string>",
        "eligibility": "<string>",
        "disclosure": "<string>",
        "rewards": {}
      },
      "stripe": {
        "status": "<string>",
        "checked_at": "<string>"
      }
    },
    "decision": {
      "outcome": "accepted",
      "at": "<string>",
      "message": "<string>"
    },
    "payout": {
      "status": "approving",
      "amount_cents": 123,
      "approved_at": "<string>",
      "transferred_at": "<string>",
      "received_at": "<string>",
      "payout_failed_at": "<string>"
    }
  }
}

Authorizations

Authorization

string

header

required

A Firebase ID token, or a Kalligator API key (kal_…).

Path Parameters

report_id

string<uuid4>

required

The ID of your draft.

Body

application/json

revision

integer

required

The current revision of the draft.

Required range: x >= 0

Response

Successful Response

string

required

program_id

string

required

program_name

string

required

status

enum<string>

required

The report status. See the report lifecycle guide.

Available options:

draft,

triaging,

needs_info,

paused,

human_review,

accepted,

rejected,

duplicate,

insufficient_info,

withdrawn

display_status

string

required

The status text that the website shows.

title

string

required

revision

integer

required

Increases when you save the draft, upload or remove a file, submit, or withdraw. Send the latest value with your next change.

created_at

string | null

required

updated_at

string | null

required

submitted_at

string | null

required

withdrawn_at

string | null

required

asset

string

required

description

string

required

cvss_vector

string

required

attachments

Attachments · object

required

Files on the report, by file ID.

Show child attributes

submission

Submission · object | null

required

The frozen copy of the report, files, and program policy at submission. null for a draft.

Show child attributes

decision

Decision · object | null

required

The final decision and an optional message. null until a decision.

Show child attributes

payout

Payout · object | null

Your reward payment. null until the Kalligator team approves the reward.

Show child attributes

Submit a report

curl --request POST \
  --url https://kalligator.com/api/reports/{report_id}/submit \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "revision": 1
}'

import requests

url = "https://kalligator.com/api/reports/{report_id}/submit"

payload = { "revision": 1 }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({revision: 1})
};

fetch('https://kalligator.com/api/reports/{report_id}/submit', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "id": "<string>",
  "program_id": "<string>",
  "program_name": "<string>",
  "status": "draft",
  "display_status": "<string>",
  "title": "<string>",
  "revision": 123,
  "created_at": "<string>",
  "updated_at": "<string>",
  "submitted_at": "<string>",
  "withdrawn_at": "<string>",
  "asset": "<string>",
  "description": "<string>",
  "cvss_vector": "<string>",
  "attachments": {},
  "submission": {
    "submitted_at": "<string>",
    "attachments": {},
    "content": {
      "title": "<string>",
      "asset": "<string>",
      "description": "<string>",
      "cvss_vector": ""
    },
    "program": {
      "policy_version": 123,
      "name": "<string>",
      "scope": "<string>",
      "exclusions": "<string>",
      "rules": "<string>",
      "eligibility": "<string>",
      "disclosure": "<string>",
      "rewards": {}
    },
    "stripe": {
      "status": "<string>",
      "checked_at": "<string>"
    }
  },
  "decision": {
    "outcome": "accepted",
    "at": "<string>",
    "message": "<string>"
  },
  "payout": {
    "status": "approving",
    "amount_cents": 123,
    "approved_at": "<string>",
    "transferred_at": "<string>",
    "received_at": "<string>",
    "payout_failed_at": "<string>"
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "current": {
    "id": "<string>",
    "program_id": "<string>",
    "program_name": "<string>",
    "status": "draft",
    "display_status": "<string>",
    "title": "<string>",
    "revision": 123,
    "created_at": "<string>",
    "updated_at": "<string>",
    "submitted_at": "<string>",
    "withdrawn_at": "<string>",
    "asset": "<string>",
    "description": "<string>",
    "cvss_vector": "<string>",
    "attachments": {},
    "submission": {
      "submitted_at": "<string>",
      "attachments": {},
      "content": {
        "title": "<string>",
        "asset": "<string>",
        "description": "<string>",
        "cvss_vector": ""
      },
      "program": {
        "policy_version": 123,
        "name": "<string>",
        "scope": "<string>",
        "exclusions": "<string>",
        "rules": "<string>",
        "eligibility": "<string>",
        "disclosure": "<string>",
        "rewards": {}
      },
      "stripe": {
        "status": "<string>",
        "checked_at": "<string>"
      }
    },
    "decision": {
      "outcome": "accepted",
      "at": "<string>",
      "message": "<string>"
    },
    "payout": {
      "status": "approving",
      "amount_cents": 123,
      "approved_at": "<string>",
      "transferred_at": "<string>",
      "received_at": "<string>",
      "payout_failed_at": "<string>"
    }
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "current": {
    "id": "<string>",
    "program_id": "<string>",
    "program_name": "<string>",
    "status": "draft",
    "display_status": "<string>",
    "title": "<string>",
    "revision": 123,
    "created_at": "<string>",
    "updated_at": "<string>",
    "submitted_at": "<string>",
    "withdrawn_at": "<string>",
    "asset": "<string>",
    "description": "<string>",
    "cvss_vector": "<string>",
    "attachments": {},
    "submission": {
      "submitted_at": "<string>",
      "attachments": {},
      "content": {
        "title": "<string>",
        "asset": "<string>",
        "description": "<string>",
        "cvss_vector": ""
      },
      "program": {
        "policy_version": 123,
        "name": "<string>",
        "scope": "<string>",
        "exclusions": "<string>",
        "rules": "<string>",
        "eligibility": "<string>",
        "disclosure": "<string>",
        "rewards": {}
      },
      "stripe": {
        "status": "<string>",
        "checked_at": "<string>"
      }
    },
    "decision": {
      "outcome": "accepted",
      "at": "<string>",
      "message": "<string>"
    },
    "payout": {
      "status": "approving",
      "amount_cents": 123,
      "approved_at": "<string>",
      "transferred_at": "<string>",
      "received_at": "<string>",
      "payout_failed_at": "<string>"
    }
  }
}

Overview

Programs

Reports

Files

Messages

Account

API keys

Submit a report

Authorizations

Path Parameters

Body

Response