---
title: "List cases"
method: GET
path: "/v2/{tenant_slug}/cases"
tags: ["Cases"]
---

# List cases

`GET /v2/{tenant_slug}/cases`

List fraud cases for a tenant, optionally filtered by account or status.

## Path parameters

- `tenant_slug` string, required — Tenant DNS slug (lowercase letters, digits, and hyphens; 3-100 characters).

## Query parameters

- `status` 'OPEN' | 'CLOSED'
- `website_account_id` string, nullable — Filter cases by the end-user account they originated from.
- `user_is_blocked` boolean, nullable — Filter cases by whether the associated end-user account is blocked.

## Response `200`

Successful Response

- APIResponseCaseListResponse
  - `data` CaseListResponse, required
    - `cases` CaseListItemResponse[], required — List of cases for the tenant
      - `case_id` string, required — Unique case identifier used in `/cases/{case_id}` paths
      - `website_account_id` string — Identifier of the end user's website account; defaults to `UNKNOWN` when the account cannot be resolved
      - `created_at` string, date-time, required — Time the case was opened (RFC 3339 / ISO 8601 UTC)
      - `status` 'OPEN' | 'CLOSED', required
      - `overall_risk_score` integer, required — Aggregate risk score across all fraud signals, on a 1-5 scale (1=lowest risk, 5=highest risk)

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `422` — Request Validation Failed
- `500` — Internal Server Error

---

[API](https://skmtc.net/urbanfox/apis/urbanfox-customer-api.md) · [All operations](https://skmtc.net/urbanfox/apis/urbanfox-customer-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/urbanfox/urbanfox-customer-api/revisions/e99fd9028c60/schema)