---
title: "POST /projects/{projectId}/agent-candidates/scores"
method: POST
path: "/projects/{projectId}/agent-candidates/scores"
---

# POST /projects/{projectId}/agent-candidates/scores

`POST /projects/{projectId}/agent-candidates/scores`

## Request

- Base URL: `https://api.caveman.so/api/v1`
- URL: `https://api.caveman.so/api/v1/projects/{projectId}/agent-candidates/scores`
- Auth: one of:
  - OAuth 2
    - Authorization code: `/api/v1/oauth/authorize`
    - Token URL: `/api/v1/oauth/token` scopes: `proposal:draft`
  - HTTP bearer
  - API key in cookie `cave_access`
  - API key in cookie `__Secure-cave_identity.session_token`

POST /api/v1/projects/{projectId}/agent-candidates/scores on the Caveman Cloud control plane. Requires the proposal:draft scope. Exposed to autonomous agents as the score action of the caveman_candidates_write tool (write access). Try an improvement case's ideas before they ship. Only an improvement session's case token may call it; a try authorizes nothing and a winner still reaches a person through the Inbox.

## Request body

- object
  - `commit` string, required: The full lowercase 40-hex SHA of the commit to score (git rev-parse HEAD).
  - `note` string, required: What the commit tries, in 1 to 300 characters.

## Response `2XX`

Successful response. Exact status depends on synchronous or durable delivery outcome.

## Other responses

- `4XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.
- `5XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.

---

[API](https://skmtc.dev/caveman/apis/caveman-cloud-api.md) - [All operations](https://skmtc.dev/caveman/apis/caveman-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/caveman/apis/caveman-cloud-api/revisions/508312d01cfc?raw)