---
title: "Report action result"
method: POST
path: "/action/result"
---

# Report action result

`POST /action/result`

Reports the result of an action that a recommendation was issued for. This includes whether the user successfully completed the action, and what type of challenge was given to the user (if any).

## Request body

- ActionResult
  - `action_token` string, required — The token return when the action event was reported
  - `result` 'success' | 'failure' | 'incomplete', required — The action result.
  - `user_id` string — Opaque identifier of the user in your system. Rejected (400) if provided as "null", "undefined", "none", or empty/whitespace-only; leading/trailing whitespace is otherwise trimmed.
  - `private_user_identifier` string — Identifier containing sensitive user data. Mosaic will encrypt and securely store this data.
  - `challenge_type` 'sms_otp' | 'email_otp' | 'totp' | 'push_otp' | 'voice_otp' | 'idv' | 'captcha' | 'password' | 'passkey' — Type of challenge used, in case a challenge was recommended for this action event

## Response `201`

Action result has been received and stored successfully.

## Other responses

- `400` — Bad request
- `401` — Invalid authentication
- `403` — Invalid authorization
- `429` — Rate limit reached
- `463` — Blacklisted token—Returned when Fraud Prevention detects repeated or abusive token/payload misuse within a short time window (e.g., reuse of expired tokens, token caching/automation, or repeated invalid requests, including highly repetitive invalid request values). The response body contains the underlying error code (e.g., expired session token). Clients should identify and stop the source of invalid requests. Other authorization failures that do not trigger blacklisting return 403 Forbidden.
- `500` — Internal error

---

[API](https://skmtc.net/transmitsecurity/apis/client-actions.md) · [All operations](https://skmtc.net/transmitsecurity/apis/client-actions/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/transmitsecurity/client-actions/versions/e61344db812d/schema)