Get a firing FlowReview report

curl --request GET \
  --url https://api.checkfu.com/v1/automation-firings/{id}/flow-review \
  --header 'Authorization: Bearer <token>' \
  --header 'checkfu-version: <checkfu-version>'

import requests

url = "https://api.checkfu.com/v1/automation-firings/{id}/flow-review"

headers = {
    "checkfu-version": "<checkfu-version>",
    "Authorization": "Bearer <token>"
}

response = requests.get(url, headers=headers)

print(response.text)

const options = {
  method: 'GET',
  headers: {'checkfu-version': '<checkfu-version>', Authorization: 'Bearer <token>'}
};

fetch('https://api.checkfu.com/v1/automation-firings/{id}/flow-review', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.checkfu.com/v1/automation-firings/{id}/flow-review",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "checkfu-version: <checkfu-version>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.checkfu.com/v1/automation-firings/{id}/flow-review"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("checkfu-version", "<checkfu-version>")
	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.checkfu.com/v1/automation-firings/{id}/flow-review")
  .header("checkfu-version", "<checkfu-version>")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.checkfu.com/v1/automation-firings/{id}/flow-review")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["checkfu-version"] = '<checkfu-version>'
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "result": "passed",
  "criteria": [
    {
      "key": "<string>",
      "result": "pass",
      "explanation": "<string>",
      "event_ids": [
        "<string>"
      ]
    }
  ],
  "evidence_digest": "<string>",
  "through_event_id": "<string>",
  "route": {
    "model_routing_profile_key": "<string>",
    "model": "<string>",
    "tier": "<string>",
    "reason": "<string>",
    "access_source": {
      "kind": "workspace_credential",
      "provider": "<string>",
      "model_credential_id": "<string>",
      "model_credential_generation_id": "<string>"
    }
  },
  "usage": {
    "input_tokens": 1,
    "cached_input_tokens": 1,
    "cache_write_input_tokens": 1,
    "output_tokens": 1,
    "reasoning_output_tokens": 1,
    "total_tokens": 1
  },
  "evaluated_at": "<string>"
}

{
  "error": {
    "type": "validation.malformed",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#validation-malformed"
  }
}

{
  "error": {
    "type": "auth.invalid_key",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#auth-invalid-key"
  }
}

{
  "error": {
    "type": "auth.disabled_tenancy",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#auth-disabled-tenancy"
  }
}

{
  "error": {
    "type": "validation.not_found",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#validation-not-found"
  }
}

{
  "error": {
    "type": "budget.exceeded",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#budget-exceeded"
  }
}

{
  "error": {
    "type": "runtime.internal",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#runtime-internal"
  }
}

Get a firing FlowReview report

Read the retained detailed result of one passive FlowReview from the authoritative Session log. Criterion rows cite authorized Session event IDs but do not duplicate source content. Pending, unavailable, expired, erased, and ZDR detail fails honestly while the content-free firing summary remains readable.

Checkfu support posture: alpha; hosted. Required evidence journey: automation-firing. Deployment-specific readiness and the latest proven release are available from GET /v1/support/capabilities.

GET

automation-firings

{id}

flow-review

Get a firing FlowReview report

curl --request GET \
  --url https://api.checkfu.com/v1/automation-firings/{id}/flow-review \
  --header 'Authorization: Bearer <token>' \
  --header 'checkfu-version: <checkfu-version>'

import requests

url = "https://api.checkfu.com/v1/automation-firings/{id}/flow-review"

headers = {
    "checkfu-version": "<checkfu-version>",
    "Authorization": "Bearer <token>"
}

response = requests.get(url, headers=headers)

print(response.text)

const options = {
  method: 'GET',
  headers: {'checkfu-version': '<checkfu-version>', Authorization: 'Bearer <token>'}
};

fetch('https://api.checkfu.com/v1/automation-firings/{id}/flow-review', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.checkfu.com/v1/automation-firings/{id}/flow-review",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "checkfu-version: <checkfu-version>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.checkfu.com/v1/automation-firings/{id}/flow-review"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("checkfu-version", "<checkfu-version>")
	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.checkfu.com/v1/automation-firings/{id}/flow-review")
  .header("checkfu-version", "<checkfu-version>")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.checkfu.com/v1/automation-firings/{id}/flow-review")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["checkfu-version"] = '<checkfu-version>'
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "result": "passed",
  "criteria": [
    {
      "key": "<string>",
      "result": "pass",
      "explanation": "<string>",
      "event_ids": [
        "<string>"
      ]
    }
  ],
  "evidence_digest": "<string>",
  "through_event_id": "<string>",
  "route": {
    "model_routing_profile_key": "<string>",
    "model": "<string>",
    "tier": "<string>",
    "reason": "<string>",
    "access_source": {
      "kind": "workspace_credential",
      "provider": "<string>",
      "model_credential_id": "<string>",
      "model_credential_generation_id": "<string>"
    }
  },
  "usage": {
    "input_tokens": 1,
    "cached_input_tokens": 1,
    "cache_write_input_tokens": 1,
    "output_tokens": 1,
    "reasoning_output_tokens": 1,
    "total_tokens": 1
  },
  "evaluated_at": "<string>"
}

{
  "error": {
    "type": "validation.malformed",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#validation-malformed"
  }
}

{
  "error": {
    "type": "auth.invalid_key",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#auth-invalid-key"
  }
}

{
  "error": {
    "type": "auth.disabled_tenancy",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#auth-disabled-tenancy"
  }
}

{
  "error": {
    "type": "validation.not_found",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#validation-not-found"
  }
}

{
  "error": {
    "type": "budget.exceeded",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#budget-exceeded"
  }
}

{
  "error": {
    "type": "runtime.internal",
    "message": "<string>",
    "more": "https://docs.checkfu.com/reference/errors#runtime-internal"
  }
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

checkfu-version

enum<string>

required

Available options:

2026-08-27

Path Parameters

string

required

Pattern: ^afire_[0-9a-f]{32}$

Response

passed requires every criterion to pass; any concern or unknown requires concerns

result

enum<string>

required

Available options:

passed,

concerns

criteria

object[]

required

Required array length: 1 - 16 elements

Show child attributes

evidence_digest

string

required

Pattern: ^sha256:[0-9a-f]{64}$

through_event_id

string

required

Pattern: ^evt_[0-9a-f]{32}$

route

object

required

Show child attributes

usage

object

required

Show child attributes

evaluated_at

string

required

Developer tools

Canonical tables

Author protocols

Generated HTTP API

Get a firing FlowReview report

Authorizations

Headers

Path Parameters

Response