---
title: "Get recommendation"
method: GET
path: "/recommendation"
---

# Get recommendation

`GET /recommendation`

Get a risk recommendation for a client action reported to the SDK (via `triggerActionEvent()` call)

## Query parameters

- `action_token` string, required
- `user_id` string

## Response `200`

Recommendation

- RecommendationFull — unresolved $ref

## Other responses

- `400` — Bad request
- `401` — Invalid authentication
- `403` — Invalid authorization
- `429` — Rate limit reached
- `463` — Blacklisted token—Returned when Fraud Prevention detects repeated or abusive token/payload misuse within a short time window (e.g., reuse of expired tokens, token caching/automation, or repeated invalid requests, including highly repetitive invalid request values). The response body contains the underlying error code (e.g., expired session token). Clients should identify and stop the source of invalid requests. Other authorization failures that do not trigger blacklisting return 403 Forbidden.
- `500` — Internal error

---

[API](https://skmtc.dev/transmitsecurity/apis/recommendations.md) · [All operations](https://skmtc.dev/transmitsecurity/apis/recommendations/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/transmitsecurity/recommendations/revisions/b97f7971b65a/schema)