Planissue-criteria
GET/repositories/{repo_id}/issues/{issue_id}/verification
The Proof-of-Done view — every criterion, its state, and the evidence that produced it
get_issue_verification
issue:read
A token needs theissue:readscope: Read work items and their settingsGranted bymcp_agent,mcp_agent_write,read_api,read_repository,write_api,write_repository.Every operation this scope unlocks
Returns whether the work item is unverified, verified or regressed, the commit and pipeline run that verified it or showed it regressed, every criterion with its state and latest evidence, and a summary count. Work items filed from a blueprint also get their criteria grouped by facet. Anyone who can see the repository's work items may read it.
Parameters
Path
- repo_idRepositoryId (string · uuid)Repository ID
- issue_idIssueId (integer · int64)Work-item iid
Responses
200Whether CI has proved this work item done, and what it read to decideapplication/json
criteriaarray of CriterionView
- The CriterionView schema
- created_atstring
- criterion_idCriterionId (string · uuid)The criterion's identifier. It never changes, so rewording or re-binding a criterion keeps its identity and its evidence.
- issue_uidIssueUid (string · uuid)
- satisfiedboolean
- stateCriterionStateunverifiedpassingfailingstalemanualA criterion's verdict.
- textstringThe human statement — the criterion's title. The label, not the identity.
- updated_atstring
- binding_exprstring or nulloptionalThe binding's
@-expression, as written. Absent for a manual criterion. - binding_keystring or nulloptionalThe normalised form of
binding_expr, which two equivalent spellings share. Absent for a manual criterion. - checkedbooleanoptionalWhether the box is ticked. Meaningful only for a manual criterion — a bound one is ticked by its
state, and ticking it by hand is refused with a409. - descriptionstring or nulloptionalAn optional longer description (markdown) — the per-criterion detail a flat checkbox could never hold.
evidenceEvidence or nulloptional
- The Evidence schema
- commit_shaCommitHash (string)
- observed_atstringWhen the run that produced the evidence finished, RFC 3339.
- pipeline_idPipelineId (string · uuid)
- pipeline_run_idPipelineRunId (string · uuid)
- node_run_idNodeRunId (string · uuid) or nulloptional
- valuenumber · double or nulloptional
- facet_categoryFacetCategory (string) or nulloptional
- facet_keyFacetKey (string) or nulloptionalThe blueprint facet this criterion belongs to, when a blueprint added it. Absent for a criterion written directly. A facet's state is rolled up from the criteria carrying its key.
- last_evidence_atstring or nulloptional
- last_evidence_commit_shaCommitHash (string) or nulloptional
- last_evidence_node_run_idNodeRunId (string · uuid) or nulloptional
- last_evidence_pipeline_idPipelineId (string · uuid) or nulloptionalThe pipeline whose run last provided evidence for this criterion. Only a later run of the same pipeline can make the criterion
stale. - last_evidence_run_idPipelineRunId (string · uuid) or nulloptional
- last_evidence_valuenumber · double or nulloptionalThe observed value, for a
MetricorCoveragebinding. - ordinalinteger · int32optional0–∞Position in the description, so the list round-trips in authoring order.
- required_for_closebooleanoptional
@optionalopts out. Everything else in a Definition of Done is required by definition.
summaryCriteriaSummary
- The CriteriaSummary schema
- requiredinteger · int320–∞Of the
required_for_closeones — the set that actually gatesVerifiedand a close. - required_satisfiedinteger · int320–∞
- satisfiedinteger · int320–∞
- totalinteger · int320–∞
- uidIssueUid (string · uuid)
- verificationVerificationStateunverifiedverifiedregressedWhether CI has proved the work item's acceptance criteria.
unverifieduntil a pipeline run proves them,verifiedonce one has, andregressedwhen a later run shows that evidence no longer holds. facetsarray of FacetRollupoptionalThe criteria grouped by blueprint facet, each with its overall state. Absent for an item filed as a built-in type; present for one filed as a custom type.
- The FacetRollup schema
- criterion_idsarray of CriterionId (string · uuid)The criteria under this facet, in ordinal order.
- facet_keyFacetKey (string)
- requiredbooleanWhether any criterion under the facet gates close.
- satisfiedbooleanGreen iff every required criterion under the facet is satisfied — the same set the merge gate keys on, so the rollup is presentational and never a second source of truth.
- facet_categoryFacetCategory (string) or nulloptional
- regressed_atstring or nulloptional
- regressed_from_shaCommitHash (string) or nulloptional
- regressed_run_idPipelineRunId (string · uuid) or nulloptional
- verified_atstring or nulloptional
- verified_at_shaCommitHash (string) or nulloptional
- verified_run_idPipelineRunId (string · uuid) or nulloptional
200 exampleSynthesized example
{
"criteria": [
{
"created_at": "2026-10-14T00:58:25Z",
"criterion_id": "20fa5f7a-2cf6-477d-acca-b2cdedd95bd0",
"issue_uid": "2b212014-1e39-4804-b56c-eff27e31d9ec",
"satisfied": false,
"state": "unverified",
"text": "text-88cf",
"updated_at": "2026-10-12T19:03:03Z"
},
{
"created_at": "2026-10-16T17:11:40Z",
"criterion_id": "30cc5f32-f626-49a6-a27d-38099d35944c",
"issue_uid": "b5e7abca-f4d1-46ac-8fee-4037a05fb79e",
"satisfied": false,
"state": "unverified",
"text": "text-9630",
"updated_at": "2026-10-14T13:35:24Z"
}
],
"summary": {
"required": 35,
"required_satisfied": 51,
"satisfied": 16,
"total": 7
},
"uid": "99186eab-6c04-4b59-9e7c-568c976926b3",
"verification": "unverified",
"facets": [
{
"criterion_ids": [],
"facet_key": "facet-key-8bf0",
"required": false,
"satisfied": false
},
{
"criterion_ids": [],
"facet_key": "facet-key-dae6",
"required": false,
"satisfied": false
}
],
"regressed_at": "2026-10-15T01:41:48Z",
"regressed_from_sha": "2bb1dbd8b2b0b6331cb04c5ccc6ea5066244ad59",
"regressed_run_id": "9e2b7c41-3d5a-4f8e-b1c2-7a6d5e4f3c2b",
"verified_at": "2026-10-09T05:00:03Z",
"verified_at_sha": "c156524c2820c42ee80d37cec5bc79952aaf0462",
"verified_run_id": "9e2b7c41-3d5a-4f8e-b1c2-7a6d5e4f3c2b"
}
400Bad request — a path parameter is not a well-formed value of its typeapplication/json
Error codes
- BAD_REQUESTThe request is malformed: a parameter or a body field is not a well-formed value of its type
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
400 exampleSynthesized example
{
"error": {
"code": "code-491d",
"message": "Pin a page's payload to the build that rendered it"
}
}
401Unauthenticated — no credential, or an invalid oneapplication/json
Error codes
- UNAUTHORIZEDNo credential was sent, or the one sent is invalid, expired or revoked
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
401 exampleSynthesized example
{
"error": {
"code": "code-af76",
"message": "Label every synthesized example"
}
}
403Forbidden — the caller's access level or token scope is insufficientapplication/json
Error codes
- FORBIDDENYou are signed in but may not do this here;
reasonnames the permission or the rule that refused it - INSUFFICIENT_SCOPEThe access token lacks the scope this operation needs;
required_scopenames it - PERMISSION_REQUIREDYou need a permission you do not hold here; the message names it
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
403 exampleSynthesized example
{
"error": {
"code": "code-db07",
"message": "Label every synthesized example"
}
}
404Work item not foundapplication/json
Error codes
- NOT_FOUNDThe resource does not exist — or exists and you cannot see it: a private resource you have no access to answers exactly as an absent one does
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
404 exampleSynthesized example
{
"error": {
"code": "code-fe4a",
"message": "Label every synthesized example"
}
}
CLI
gitmoap issue-criteria get-issue-verification
- --repo-ididRepository ID (id or owner/repo path)
- --issue-ididWork-item iid