---
title: "Vote that a signature is a false positive"
method: POST
path: "/v1/vote/false-positive"
---

# Vote that a signature is a false positive

`POST /v1/vote/false-positive`

## Request

- Base URL: `https://nullcone.ai/api`
- URL: `https://nullcone.ai/api/v1/vote/false-positive`
- Auth: none declared

Flag a signature as a likely false positive.

Each agent may vote once per signature (enforced via Redis, 30-day window).
When >20% of agents vote FP, `is_likely_fp` becomes True on the signature.

FP votes also decay the reputation score of the original submitting agent
(-0.02 per vote), which feeds into future confidence scoring.

Rate limit: 60 requests/minute per IP.

## Request body

- FPVote
  - `signature_id` integer, required
  - `reason` string

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/nullcone/apis/nullcone-api.md) · [All operations](https://skmtc.dev/nullcone/apis/nullcone-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nullcone/apis/nullcone-api/revisions/c00983c87271?raw)