getUserSecretsBlocked

Prompt-secret-scan blocks for a single user: blocked prompt count, total secret matches, and a per-rule breakdown (rule id, label, count, last blocked at). Never returns secret values.

Examples

GraphQL

query GetUserSecretsBlocked($user: String!, $dateRange: VibeSecDateRange) {
  getUserSecretsBlocked(user: $user, dateRange: $dateRange) {
    detected
    blocked
    byRule {
      ruleId
      label
      count
      detectedCount
      lastBlockedAt
      lastActivityAt
    }
  }
}

Variables

This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.

{
  "user": "example",
  "dateRange": {
    "from": 1749000000000,
    "to": 1749900000000
  }
}

cURL

curl -X POST \
https://api.cloud.ox.security/api/apollo-gateway \
-H 'Content-Type: application/json' \
-H 'Authorization: YOUR_API_TOKEN' \
-d '{
 "query": "query GetUserSecretsBlocked($user: String!, $dateRange: VibeSecDateRange) { getUserSecretsBlocked(user: $user, dateRange: $dateRange) { detected blocked byRule { ruleId label count detectedCount lastBlockedAt lastActivityAt } } }",
 "variables": {
    "user": "example",
    "dateRange": {
      "from": 1749000000000,
      "to": 1749900000000
    }
  }
}'

Node.js

const query = 'query GetUserSecretsBlocked($user: String!, $dateRange: VibeSecDateRange) { getUserSecretsBlocked(user: $user, dateRange: $dateRange) { detected blocked byRule { ruleId label count detectedCount lastBlockedAt lastActivityAt } } }';

fetch("https://api.cloud.ox.security/api/apollo-gateway", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  body: JSON.stringify({
    query: query,
    // This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    variables: {
      user: "example",
      dateRange: {
        from: 1749000000000,
        to: 1749900000000
      }
    }
  })
})
.then(response => response.json())
.then(result => console.log(JSON.stringify(result, null, 2)))
.catch(error => console.error('Error:', error));

Python

import requests

query = 'query GetUserSecretsBlocked($user: String!, $dateRange: VibeSecDateRange) { getUserSecretsBlocked(user: $user, dateRange: $dateRange) { detected blocked byRule { ruleId label count detectedCount lastBlockedAt lastActivityAt } } }'

response = requests.post(
  "https://api.cloud.ox.security/api/apollo-gateway",
  headers={
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  json={
    "query": query,
    # This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    "variables": {
      "user": "example",
      "dateRange": {
        "from": 1749000000000,
        "to": 1749900000000
      }
    }
  }
)

if response.status_code == 200:
    result = response.json()
    print(result)
else:
    print(f"Error: {response.status_code}")
    print(response.text)

Arguments

You can use the following argument(s) to customize your getUserSecretsBlocked query.

Argument	Description	Supported fields
user String! required
dateRange VibeSecDateRange		from Float to Float

Fields

Return type: VibeSecUserSecretsBlockedResponse!

You can use the following field(s) to specify what information your getUserSecretsBlocked query will return. Please note that some fields may have their own subfields.

Field	Description	Supported fields
detected Int!	Total secret matches found across the user's blocked prompts
blocked Int!	Number of prompts blocked by the prompt secret scan; equals UserStatsItem.secretsBlocked
byRule [VibeSecUserSecretRuleItem!]!	Per-rule breakdown (blocked and detected) sorted by count descending	ruleId String! label String! count Int! detectedCount Int! lastBlockedAt DateTime lastActivityAt DateTime!