---
title: "Query outbound (egress) Safe House evaluations"
method: GET
path: "/safe-house/cbd/evaluations"
tags: ["Safe House"]
deprecated: true
---

# Query outbound (egress) Safe House evaluations

`GET /safe-house/cbd/evaluations`

## Request

- Base URL: `https://api.mnemom.ai/v1`
- URL: `https://api.mnemom.ai/v1/safe-house/cbd/evaluations`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Mnemom-Api-Key`

> **Deprecated.**

Same shape as `/safe-house/evaluations`, but scoped to outbound (egress) screening — exfiltration detection on agent-originated traffic.

## Query parameters

- `after` string

## Response `200`

Evaluation page.

- SafeHouseEvaluationPage
  - `data` SafeHouseEvaluation[], required
    - `id` string
    - `agent_id` string
    - `session_id` string, nullable
    - `mode` string
    - `surface` string, nullable
    - `verdict` 'pass' | 'warn' | 'quarantine' | 'block'
    - `threats` object[], nullable
      - `type` string
      - `confidence` number
    - `overall_risk` number, nullable
    - `detector_scores` object, nullable
    - `detection_sources` unknown
    - `session_multiplier` number, nullable
    - `duration_ms` integer, nullable
    - `request_id` string, nullable: The gateway's per-proxied-request id (ADR-065 mnemom_request_id), when the gateway wrote this row with a request-scoped logger. Null on rows written before migration 548 or by a caller with no request context.
    - `turn_index` integer, nullable: The turn's ordinal within its conversation, when known at the write site. Mirrors integrity_checkpoints.turn_index (migration 384).
    - `carried` boolean: true = a replay of a verdict this session already recorded for the same content on the same surface (a carried re-flag, not a fresh firing); false = a fresh screen. Count detections with carried = false (database/migrations/550).
    - `first_evaluation_id` string, nullable: On a carried row: the id of the fresh sh_evaluations row whose verdict it carries (soft pointer, no FK). NULL on fresh rows, or when the first row id is unknown.
    - `created_at` string, date-time
  - `pagination` object, required
    - `total` integer, nullable
    - `limit` integer
    - `after` string, nullable
  - `meta` object

## Other responses

- `400`: Bad request
- `401`: Authentication required
- `403`: Forbidden
- `404`: Resource not found
- `429`: Rate-limit exceeded. The global per-IP limiter (100 requests/minute, applied to every `/v1/*` route) rejected this request. Back off until the window resets — `Retry-After` carries the cooldown in seconds and `X-RateLimit-Reset` the absolute reset time.
- `500`: Server error — request was well-formed but the server failed to fulfill it. Typically a downstream dependency (DB / RPC / external API) returned an unexpected error.

---

[API](https://skmtc.dev/mnemom/apis/mnemom-api.md) · [All operations](https://skmtc.dev/mnemom/apis/mnemom-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mnemom/apis/mnemom-api/revisions/e13923bd55ef?raw)