Report status

Read limited report status without exposing private report data.

Read report status #

Set REPORT_ID to the report_id returned when your organization created the report.

Report status — cURL

# Run in your server environment. Requires reports:write.
curl --request GET "$GOWALY_BASE_URL/api/v1/reports/$REPORT_ID" \
  --header "Authorization: Bearer $GOWALY_API_KEY"

GET /api/v1/reports/{report_id} #

GET/api/v1/reports/{report_id}

Scope: reports:write
Environment: Customer Sandbox and Production
Required headers: Authorization

Request

GET /api/v1/reports/rpt_123e4567-e89b-42d3-a456-426614174000

Successful 200 response

{
  "request_id": "req_123e4567-e89b-42d3-a456-426614174000",
  "report_id": "rpt_123e4567-e89b-42d3-a456-426614174000",
  "public_reference_code": "GWA-DEMO-001",
  "partner_report_reference": "demo-report-001",
  "status": "pending",
  "display_status": "submitted",
  "scam_category": "Commerce",
  "scam_group": "Marketplace scams",
  "scam_subtype": "Fake merchant or buyer",
  "submitted_at": "2026-10-15T12:00:00.000Z",
  "updated_at": "2026-10-15T12:00:00.000Z",
  "evidence": {
    "total": 1,
    "confirmed": 0
  },
  "next_step": "Upload and confirm evidence"
}

Requires reports:write. Missing, cross-client, and cross-environment resources use the same generic 404 REPORT_NOT_FOUND response.

Response fields #

request_id
report_id
public_reference_code
partner_report_reference
status
display_status
scam_category
scam_group
scam_subtype
submitted_at
updated_at
evidence
next_step

evidence contains total and confirmed counts. Database status values are pending, verified, rejected. Display status values are submitted, verified, rejected.

Common errors #

HTTP	Meaning
401	Missing, invalid, or expired API key
403	Wrong environment or missing reports:write
404	Generic REPORT_NOT_FOUND without ownership disclosure
429	Burst rate or monthly quota exceeded

Private data stays private #

This response does not disclose identifiers, bank/account numbers, narratives, reporter identities, payment_details, storage paths, signed URLs, tenant IDs, or moderator notes.