---
title: "Send a chat-native turn to the in-product Aletheia assistant."
method: POST
path: "/aletheia-support/chat"
tags: ["Aletheia Support"]
---

# Send a chat-native turn to the in-product Aletheia assistant.

`POST /aletheia-support/chat`

## Request

- Base URL: `https://api.mnemom.ai/v1`
- URL: `https://api.mnemom.ai/v1/aletheia-support/chat`
- Auth: none required

DARK MVP (issue #2195): normalizes the chat-native `message` and runs it through the SAME answer-core the voice adapter uses, returning a chat-shaped result. Gated behind `ALETHEIA_SUPPORT_MVP_ENABLED` + the `ALETHEIA_SUPPORT_ALLOWLIST` identity allowlist (src/aletheia-support/gate.ts; defaults to the whole @mnemom.ai domain, and may be set to `*` to admit every authenticated identity) — every caller the gate doesn't allow (no user, wrong identity, or flag off) gets an identical 404, never a 401/403 that would reveal the route's existence or gating reason. Binds the real grounded answer core (`makeGroundedAnswerCore`); the fail-closed `denyAnswerCore` it originally shipped with was replaced when MNE-1937 landed.

## Request body

- object
  - `message` string, required: The caller's chat turn. Must be a non-empty string.
  - `session_id` string: Optional chat session id.
  - `locale` string: Optional BCP-47 locale.

## Response `200`

The core's answer, chat-shaped. `refused:true` means the core (or the adapter's length guard) withheld an ungrounded answer; `answer` is then a fixed canned refusal string, never model-generated.

- object
  - `answer` string, required
  - `grounding` object[], required
    - `id` string, required
    - `title` string
    - `url` string
    - `snippet` string
  - `refused` boolean, required
  - `refusalReason` string

## Other responses

- `400`: Bad request
- `403`: Cross-origin write refused (`cross_origin_rejected`). A state-changing request that carries the browser session cookie must come from a first-party origin (`Origin`, or failing that `Referer`) and must not send a form-style body (text/plain, urlencoded, multipart) the operation does not declare. Bearer and API-key callers are never subject to this check.
- `404`: Resource not found
- `429`: Rate-limit exceeded. The global per-IP limiter (100 requests/minute, applied to every `/v1/*` route) rejected this request. Back off until the window resets — `Retry-After` carries the cooldown in seconds and `X-RateLimit-Reset` the absolute reset time.
- `500`: Server error — request was well-formed but the server failed to fulfill it. Typically a downstream dependency (DB / RPC / external API) returned an unexpected error.

---

[API](https://skmtc.dev/mnemom/apis/mnemom-api.md) · [All operations](https://skmtc.dev/mnemom/apis/mnemom-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mnemom/apis/mnemom-api/revisions/274b7a6ea182?raw)