preventedRisks

List persisted risk-mitigated agent activities (guidelines provided/applied, tool calls blocked) for the calling org, newest first, with total count. Powers the VibeSec Risks Prevented page and survives beyond the 7-day Agent Activity Log TTL.

Examples

GraphQL

query PreventedRisks($input: RisksPreventedInput!) {
  preventedRisks(input: $input) {
    items
    total
  }
}

Variables

This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.

{
  "input": {
    "limit": 100,
    "offset": 0,
    "filter": {
      "activityType": ["Prompt"],
      "oxAction": ["NoGuidelinesNeeded"],
      "user": ["[e-mail]"],
      "source": ["Cursor"],
      "from": "example",
      "to": "example"
    }
  }
}

cURL

curl -X POST \
https://api.cloud.ox.security/api/apollo-gateway \
-H 'Content-Type: application/json' \
-H 'Authorization: YOUR_API_TOKEN' \
-d '{
 "query": "query PreventedRisks($input: RisksPreventedInput!) { preventedRisks(input: $input) { items total } }",
 "variables": {
    "input": {
      "limit": 100,
      "offset": 0,
      "filter": {
        "activityType": ["Prompt"],
        "oxAction": ["NoGuidelinesNeeded"],
        "user": ["[e-mail]"],
        "source": ["Cursor"],
        "from": "example",
        "to": "example"
      }
    }
  }
}'

Node.js

const query = 'query PreventedRisks($input: RisksPreventedInput!) { preventedRisks(input: $input) { items total } }';

fetch("https://api.cloud.ox.security/api/apollo-gateway", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  body: JSON.stringify({
    query: query,
    // This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    variables: {
      input: {
        limit: 100,
        offset: 0,
        filter: {
          activityType: ["Prompt"],
          oxAction: ["NoGuidelinesNeeded"],
          user: ["[e-mail]"],
          source: ["Cursor"],
          from: "example",
          to: "example"
        }
      }
    }
  })
})
.then(response => response.json())
.then(result => console.log(JSON.stringify(result, null, 2)))
.catch(error => console.error('Error:', error));

Python

import requests

query = 'query PreventedRisks($input: RisksPreventedInput!) { preventedRisks(input: $input) { items total } }'

response = requests.post(
  "https://api.cloud.ox.security/api/apollo-gateway",
  headers={
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  json={
    "query": query,
    # This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    "variables": {
      "input": {
        "limit": 100,
        "offset": 0,
        "filter": {
          "activityType": ["Prompt"],
          "oxAction": ["NoGuidelinesNeeded"],
          "user": ["[e-mail]"],
          "source": ["Cursor"],
          "from": "example",
          "to": "example"
        }
      }
    }
  }
)

if response.status_code == 200:
    result = response.json()
    print(result)
else:
    print(f"Error: {response.status_code}")
    print(response.text)

Arguments

You can use the following argument(s) to customize your preventedRisks query.

Argument	Description	Supported fields
input RisksPreventedInput! required		limit Int offset Int filter RisksPreventedFilter

Fields

Return type: RisksPreventedResponse!

You can use the following field(s) to specify what information your preventedRisks query will return. Please note that some fields may have their own subfields.

Field	Description	Supported fields
items [AgentActivityListItem!]!	List of prevented risks matching the query criteria	id ID! updatedAt DateTime! activityType AgentActivityType! activityLabel String! oxAction OxAction! oxActionLabel String! userEmail String userRole String source VibeCodeSource! sessionId String hostId String machineId String
total Int!	Total number of prevented risks matching the query criteria