---
title: "Message Security Override"
method: POST
path: "webhooks_events_messageSecurityOverride"
---

# Message Security Override

`POST webhooks_events_messageSecurityOverride` (webhook)

## Headers

- `svix-id` string, required: ID of webhook message.
- `svix-signature` string, required: Signature of webhook message.
- `svix-timestamp` string, date-time, required: Timestamp of webhook message.

## Payload

- EventsMessageSecurityOverrideEvent: Someone released a message Agent Armor held for review. Its `message.received` is sent to your agents as well, and the two can arrive in either order. Sent once per message and inbox; `event_id` is stable. Not sent for messages labeled `spam`, `blocked`, `unauthenticated`, or `trash`.
  - `type` 'event', required
  - `event_type` 'message.security.override', required
  - `event_id` string, required: ID of the event. It is the same on every retry and redelivery of the event and on every webhook or WebSocket subscription that receives it, so use it to deduplicate. The format varies by event type; treat it as an opaque string.
  - `message` EventsMessageSecurityOverride, required: The message someone released, and the record of the release. Fetch the message for its content.
    - `organization_id` string, required: ID of organization.
    - `inbox_id` string, required: The ID of the inbox.
    - `message_id` string, required: ID of message.
    - `manual_override` AgentArmorAgentArmorManualOverride, required: The record of a release of a message Agent Armor held for review.
      - `override_id` string, required: ID of the release, and the `event_id` of its `message.security.override` event.
      - `actor` union, required: Who released the message.
        - object
          - `kind` 'api_key', required: Discriminator value: api_key
          - `api_key_id` string, required: The API key that released it.
        - object
          - `kind` 'console', required: Discriminator value: console
      - `reason` string, required: Why it was released, as given by whoever released it.
      - `original_verdict` 'review', required: The verdict that held the message.
      - `released_at` string, date-time, required: When it was released.

## Acknowledgement `200`

Webhook received successfully

---

[API](https://skmtc.dev/agentmail-to/apis/api.md) - [All operations](https://skmtc.dev/agentmail-to/apis/api/llms.txt) - [OpenAPI document](https://skmtc.dev/agentmail-to/apis/api/revisions/a9792efe7bdf?raw)