---
title: "Record a private evidence scan result"
method: POST
path: "/v1/internal/owner-evidence/scan-results"
tags: ["Moderated Actions"]
---

# Record a private evidence scan result

`POST /v1/internal/owner-evidence/scan-results`

## Request

- Base URL: `https://loppee.com`
- URL: `https://loppee.com/v1/internal/owner-evidence/scan-results`
- Auth: API key in header `X-Loppee-Scan-Callback-Token`

Render Workflow callback bound to one upload intent by a secret header. Clean files finalize automatically; unsafe files are quarantined.

## Request body

- object
  - `intent_id` string, required
  - `result` 'clean' | 'infected' | 'error', required
  - `scanner` 'clamav', required
  - `scanner_version` string, required
  - `file_sha256` string, required
  - `signature` string

## Response `200`

Record a private evidence scan result response

- object: Finalized evidence or quarantine receipt.

## Other responses

- `400`: ErrorResponse
- `401`: ErrorResponse
- `403`: ErrorResponse
- `404`: ErrorResponse
- `409`: ErrorResponse
- `413`: ErrorResponse
- `429`: RateLimitError
- `default`: ErrorResponse

---

[API](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents.md) · [All operations](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents/llms.txt) · [OpenAPI document](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents/revisions/37285f7cddcd?raw)