School API

Review

POST /school/skills/versions/{version_id}/reviews

Before you begin

Requires an authorized account in the school workspace. Class and role checks apply to each request.

POST/school/skills/versions/{version_id}/reviews

Workspace

Example request body

curl --request POST 'https://school.narb.cc/api/school/skills/versions/{version_id}/reviews' \
  --header 'Authorization: Bearer YOUR_TOKEN' \
  --header 'Content-Type: application/json' \
  --data '{}'

This builds a request example. Fill in required query values, then replace path placeholders and YOUR_TOKEN in your own environment. Use a token for a user with access to this workspace. Responses and permissions depend on your account and deployment. Never paste a private token into documentation.

Download the Nexus OpenAPI schema ↗
Import the schema into your API client. It describes the backend source; enabled routes depend on your workspace.

Authentication and scope#

Send requests to the workspace that owns the resource. Authentication does not by itself grant a school membership, class assignment, or administrator permission. School endpoints apply their role and class checks on the server.

Use a credential issued for that workspace with only the permissions your integration needs. Keep it on your server. Do not place credentials in a public website or a shared skill.

Parameters#

Name	Location	Required	Type
`version_id`	path	Yes	string
`tenant_id`	query	No	string or null

The tenant_id parameter is part of the engine schema. It does not authorize a caller to another school. Use the workspace and permissions assigned to your account.

Request body#

Content type: application/json.

Field	Type	Required	Details
`notes`	string	No	Maximum characters: `2000`. Default: `""`.

Request schema#

The schema includes field limits and required values. Referenced types are included in the downloadable OpenAPI file. Replace example identifiers with IDs from your workspace.

{
  "properties": {
    "notes": {
      "type": "string",
      "maxLength": 2000,
      "title": "Notes",
      "default": ""
    }
  },
  "additionalProperties": false,
  "type": "object",
  "title": "ReviewRequest"
}

Responses#

200#

Successful Response

{
  "properties": {
    "id": {
      "type": "string",
      "format": "uuid",
      "title": "Id"
    },
    "version_id": {
      "type": "string",
      "format": "uuid",
      "title": "Version Id"
    },
    "reviewer_user_id": {
      "type": "string",
      "format": "uuid",
      "title": "Reviewer User Id"
    },
    "notes": {
      "type": "string",
      "title": "Notes"
    },
    "approved_at": {
      "type": "string",
      "format": "date-time",
      "title": "Approved At"
    },
    "revoked_at": {
      "anyOf": [
        {
          "type": "string",
          "format": "date-time"
        },
        {
          "type": "null"
        }
      ],
      "title": "Revoked At"
    }
  },
  "additionalProperties": false,
  "type": "object",
  "required": [
    "id",
    "version_id",
    "reviewer_user_id",
    "notes",
    "approved_at",
    "revoked_at"
  ],
  "title": "ReviewResponse"
}

422#

Validation Error

{
  "properties": {
    "detail": {
      "items": {
        "$ref": "#/components/schemas/ValidationError"
      },
      "type": "array",
      "title": "Detail"
    }
  },
  "type": "object",
  "title": "HTTPValidationError"
}

Access and error handling#

A signed-out or expired session needs authentication. A denied request can mean the account lacks permission, class membership, an approved model, or an available allowance. Do not retry a write blindly after a network failure; first check whether it was recorded.

Treat validation errors as a request problem. Use the returned field details to correct the request. Resource identifiers do not confer access.

Schema version#

Generated from Nexus backend source fe1c3a07c793029d3d87191a68f89e481afd6bc8. Check your deployed version before integrating. Schema coverage is not a live acceptance test.