---
title: "Start Simulation"
method: POST
path: "/v1/red-team-simulations"
tags: ["Red-Team Simulations"]
---

# Start Simulation

`POST /v1/red-team-simulations`

Start a red-team test. Confirm-gated: call once to preview, then again with confirmed=true.

## Headers

- `X-API-Key` string, required

## Request body

- StartSimulationRequest
  - `agent_id` integer, required — Target agent to red-team.
  - `config` object, nullable — Overrides for max_levels/max_branches_per_node/max_total_dhs/max_call_duration_minutes/recon_count/objective/extension/harm_categories/harm_first. Clamped to the mandatory ceilings. Content-safety probes run by default; pass harm_categories=[] for an OWASP-only test.
  - `confirmed` boolean

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/getbluejay/apis/bluejay-api.md) · [All operations](https://skmtc.net/getbluejay/apis/bluejay-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/getbluejay/bluejay-api/revisions/4ef94eeb836d/schema)