Avnology ID
API ReferenceRisk

Report False Positive

Feed a false-positive signal back into the risk model.

Endpoint

POST /v1/risk/assessments/{id}:reportFalsePositive

Base URL: https://<Domain id="api"/>

Authentication: Bearer token with risk:write.

Marks an assessment as a confirmed false positive. Signals tagged this way are down-weighted for the associated identity + device combination in subsequent scoring.

Request Body

{ "note": "User confirmed Tokyo trip -- impossible-travel alert was valid but approved." }

Example

Get Risk Summary

Aggregated risk counts per level over a time range.

Governance

Access requests, periodic access reviews, and Separation-of-Duties rules.

On this page