---
title: "Get feedback on requests made to an API"
method: GET
path: "/test/fraud-prevention-headers/{api}/validation-feedback"
---

# Get feedback on requests made to an API

`GET /test/fraud-prevention-headers/{api}/validation-feedback`

Use this resource to get feedback on fraud prevention headers submitted by your application in sandbox. You'll get detailed feedback on the most recent request to each endpoint of a supported API.

## Path parameters

- `api` 'business-details-mtd' | 'business-income-source-summary-mtd' | 'business-source-adjustable-summary-mtd' | 'cis-deductions-mtd' | 'individual-calculations-mtd' | 'individual-losses-mtd' | 'individuals-business-end-of-period-statement-mtd' | 'individuals-charges-mtd' | 'individuals-disclosures-mtd' | 'individuals-expenses-mtd' | 'individuals-income-received-mtd' | 'individuals-reliefs-mtd' | 'individuals-state-benefits-mtd' | 'obligations-mtd' | 'other-deductions-mtd' | 'property-business-mtd' | 'self-assessment-mtd' | 'self-assessment-accounts-mtd' | 'self-assessment-assist-mtd' | 'self-employment-business-mtd' | 'vat-mtd' | 'individuals-capital-gains-income-mtd' | 'individuals-dividends-income-mtd' | 'individuals-employments-income-mtd' | 'individuals-foreign-income-mtd' | 'individuals-insurance-policies-income-mtd' | 'individuals-other-income-mtd' | 'individuals-pensions-income-mtd' | 'individuals-savings-income-mtd' | 'self-assessment-individual-details-mtd', required — Identifies the API to get feedback on.

## Query parameters

- `connectionMethod` 'BATCH_PROCESS_DIRECT' | 'DESKTOP_APP_DIRECT' | 'DESKTOP_APP_VIA_SERVER' | 'MOBILE_APP_DIRECT' | 'MOBILE_APP_VIA_SERVER' | 'OTHER_DIRECT' | 'OTHER_VIA_SERVER' | 'WEB_APP_VIA_SERVER' — If your application uses more than 1 connection method, you can use this query parameter to filter by connection method.

## Headers

- `Accept` string, required
- `Authorization` string, required

## Response `200`

- object — API request validation feedback
  - `requests` object[], required — A list containing feedback on the latest request submitted to each API endpoint.
    - `path` string, required — The path the request was submitted to.
    - `method` string, required — The HTTP method used for the request.
    - `requestTimestamp` string, required — The timestamp of when the request was submitted.
    - `code` union, required — A machine-readable code indicating the validation result for the request.
      - 'VALID_HEADERS' — basic checks show that the header values supplied appear to be valid.
      - 'INVALID_HEADERS' — at least 1 of the header values supplied is not valid, check errors and warnings.
      - 'POTENTIALLY_INVALID_HEADERS' — at least 1 of the header values supplied is potentially invalid, check warnings.
      - 'NO_HEADERS' — the request did not have any fraud prevention headers.
    - `headers` object[], required — A list containing each of the Gov-* headers submitted with the request.
      - `header` string, required — The name of the header.
      - `value` string — The value submitted for this header.
      - `code` union, required — A machine-readable code indicating the validation result for the header.
        - 'VALID_HEADER' — basic checks show that the header value supplied is valid.
        - 'INVALID_HEADER' — the header value supplied is not valid, check errors and warnings.
        - 'POTENTIALLY_INVALID_HEADER' — the header value supplied is potentially invalid, check warnings.
        - 'MISSING_HEADER' — header required for the connection method is not supplied.
        - 'UNEXPECTED_HEADER' — header is not needed for the connection method, is not a fraud prevention header, or is not spelt correctly.
        - 'TEST_SCENARIO_HEADER' — header is used in sandbox testing to trigger different test scenarios.
      - `errors` string[], required — A list of error messages in the validation result for the header value.
      - `warnings` string[], required — A list of warning messages in the validation result for the header value.
    - `crossValidation` object[], required — A list of validations involving multiple headers.
      - `headers` string[], required — A list of the headers included in the validation.
      - `code` union, required — A machine-readable code indicating the result of cross validation.
        - 'VALID_HEADERS' — cross checks identified no problems with the headers.
        - 'INVALID_HEADERS' — cross checks identified one or more problems with the headers, check errors.
      - `errors` string[], required — A list of error messages resulting from cross validation of header values.

---

[API](https://skmtc.dev/hmrc/apis/txm-fph-validator-api.md) · [All operations](https://skmtc.dev/hmrc/apis/txm-fph-validator-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hmrc/txm-fph-validator-api/revisions/afc3053ce245/schema)