---
title: "List Review Configurations"
method: GET
path: "/internal/config/reviewconfigurations"
tags: ["internal", "internal-config"]
---

# List Review Configurations

`GET /internal/config/reviewconfigurations`

## Query parameters

- `namespace` string, uuid, required

## Response `200`

Successful Response

- ReviewConfigurationResourceResponse[]
  - `api_version` 'config.kobalt/v1'
  - `kind` 'ReviewConfiguration'
  - `metadata` ResourceMetadataWithAnnotations, required — Response-only metadata that also carries server-derived annotations.
    - `name` string, required
    - `namespace` string, uuid, required
    - `uid` string, uuid, nullable
    - `annotations` object
  - `spec` ReviewConfigurationSpec, required
    - `review_type` 'initial' | 'periodic' | 'inventory_refresh' | 'initial_fintech' | 'periodic_fintech' | 'rm_scorecard' | 'initial_no_ira' | 'ira_only', required
    - `tasks` union[]
      - union
        - ServiceIRATaskSpec
          - `type` 'service_ira'
          - `template` string, nullable
          - `manual_inherent_risk_default` boolean
          - `request_due_in_days` integer
          - `overdue_notification_interval_days` integer, nullable
        - ServiceFormTaskSpec
          - `type` 'service_form'
          - `template` string, nullable
          - `request_due_in_days` integer
          - `overdue_notification_interval_days` integer, nullable
        - VendorIRATaskSpec
          - `type` 'vendor_ira'
          - `enabled` boolean
        - EvidencePacketReviewTaskSpec
          - `type` 'evidence_packet_review'
          - `auto_approve` boolean
          - `inherent_risk_template` string, nullable
          - `control_strength_labels` ControlStrengthLabel[]
            - `label` string, required
            - `description` string, required
            - `hex_color` string
        - ReviewReportingTaskSpec
          - `type` 'review_reporting'
          - `name` string, required
          - `project_name` string, nullable
          - `selection_logic` string, nullable
        - MetadataTaskSpec — ``set_key_dates``/``set_vendor_fields`` are intentionally unvalidated here even though a definition needs at least one to ever produce a ``MetadataTask`` (see ``is_functional`` on the DB model) — this spec must also round-trip an *existing* definition someone saved via the settings UI one toggle at a time (e.g. instructions typed before any flag is flipped), and a raising validator here would break exporting that state as config.
          - `type` 'review_metadata'
          - `instructions` string
          - `set_key_dates` boolean
          - `set_vendor_fields` boolean
          - `auto_apply_key_dates` boolean
    - `checklists` ReviewStageChecklistSpec[]
      - `stage` 'inherent_risk_assessment' | 'form_distribution' | 'requirements_gathering' | 'evidence_collection' | 'review' | 'review_reporting' | 'completed' | 'document_sourcing' | 'document_review', required
      - `items` ChecklistItemSpec[]
        - `title` string, required
        - `body` string, nullable
        - `assignee` string, nullable
        - `due_date` string, date, nullable
        - `note_requirement` 'DISABLED' | 'OPTIONAL' | 'REQUIRED' | 'REQUIRED_WHEN_NOT_APPLICABLE' — Whether settling an item asks the reviewer to say why.
        - `note_helper_text` string, nullable
        - `allow_not_applicable` boolean

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/kobaltlabs/apis/fastapi.md) · [All operations](https://skmtc.dev/kobaltlabs/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kobaltlabs/fastapi/revisions/425d5b8a3c17/schema)