---
title: "Request a Pacchetto di Distribuzione"
method: POST
path: "/api/v1/rest/conservazione/dips"
tags: ["Legal preservation"]
---

# Request a Pacchetto di Distribuzione

`POST /api/v1/rest/conservazione/dips`

## Request

- Base URL: `https://api.custodo.ai`
- URL: `https://api.custodo.ai/api/v1/rest/conservazione/dips`
- Auth: HTTP bearer

Ask for an exhibition: a verifiable ZIP with the documents, the sealed indexes, the Rapporti and the night’s Evidence. Mode «documento»/«selezione» takes package ids, document ids, or ids in another module’s terms (source_kind «email_message» + message ids); «estrazione»/«uscita» need conservazione:export and are the Titolare’s exit. A package id is accepted only if you can read every document in it (except in «uscita», and for conservazione:export holders); otherwise name the documents. Only documents you can read, that are already in a live package, and whose package holds nothing you cannot read (its sealed index and report name every document in it; conservazione:export holders are exempt) are included: the answer’s `skipped` counts the rest (notVisible, notPreserved, packageNotVisible), and a request left with nothing is refused.

## Headers

- `X-Tenant-Id` string, uuid

## Request body

- object
  - `mode` 'documento' | 'selezione' | 'estrazione' | 'uscita'
  - `purpose` string, required
  - `package_ids` string[]
  - `document_ids` string[]
  - `source_kind` string: The module name the source_refs are ids of: «email_message» for Email and PEC message ids (from email_search / email_get). Required with source_refs.
  - `source_refs` string[]: Ids in source_kind’s terms, resolved to the archive documents they were filed as; ones you cannot read or that were never filed count as not visible.

## Response `200`

Done. `data` is the tool’s own answer.

- RestResult
  - `ok` true, required
  - `data` unknown, required

## Other responses

- `400`: The arguments did not validate: `error.message` names the field, what it expects and what arrived.
- `401`: No API key, or one that is malformed, unknown, revoked or expired.
- `403`: The call never ran: the module is off for this organisation, the credential lacks the permission or the module, the tier does not cover it, or the tool is destructive and the key was not minted for that.
- `409`: The record is in a state that does not allow it — under legal hold, already sent, already closed. `error.code` says which.
- `422`: The tool ran and refused, in a sentence of its own (`TOOL_REFUSED`): the message says what to change. Retrying the same call will not help.
- `429`: The API key has spent its minute, or its day. Every request a key makes counts. See `Retry-After`.

---

[API](https://skmtc.dev/custodo/apis/custodo-integrazioni.md) · [All operations](https://skmtc.dev/custodo/apis/custodo-integrazioni/llms.txt) · [OpenAPI document](https://skmtc.dev/custodo/apis/custodo-integrazioni/revisions/16d336d3ec2a?raw)