> ## Documentation Index
> Fetch the complete documentation index at: https://docs.useanima.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Get orgs anomaly alerts



## OpenAPI

````yaml /openapi.json get /orgs/{orgId}/anomaly-alerts
openapi: 3.1.1
info:
  title: Anima API
  version: 0.1.0
  description: >-
    The Anima API provides programmatic access to unified infrastructure for AI
    agents: create and manage agents; send and receive email; place phone calls
    and send/receive SMS and voice; store and retrieve vault credentials; manage
    agent identity; and configure webhooks for real-time events. Authenticate
    using a Bearer token or an API key passed via the X-API-Key header.
  contact:
    name: Anima Labs
    url: https://useanima.sh
    email: support@useanima.sh
  license:
    name: MIT
    url: https://opensource.org/licenses/MIT
servers:
  - url: https://api.useanima.sh/v1
    description: Production
security:
  - BearerAuth: []
  - ApiKeyAuth: []
tags:
  - name: Agents
    description: Create and manage AI agents with email and phone capabilities
  - name: Inboxes
    description: Manage email inboxes and their configurations
  - name: Messages
    description: Send, receive, and search email messages
  - name: Webhooks
    description: Register and manage webhook subscriptions for real-time events
  - name: Organizations
    description: Manage organizations and team settings
  - name: Domains
    description: Configure and verify custom email domains
  - name: Phone
    description: Manage phone numbers and SMS/voice capabilities
  - name: Invoices
    description: Track invoices, match receipts, and reconcile payments
  - name: Billing
    description: View usage, tiers, and billing information
  - name: Security
    description: Configure security policies and access controls
  - name: Vault
    description: Store and retrieve encrypted secrets
  - name: API Keys
    description: Create and manage API keys for programmatic access
paths:
  /orgs/{orgId}/anomaly-alerts:
    get:
      operationId: anomaly.listAlerts
      parameters:
        - name: orgId
          in: path
          required: true
          schema:
            type: string
            description: Organization identifier
        - name: agentId
          in: query
          required: false
          schema:
            type: string
            description: Filter by agent identifier
          allowEmptyValue: true
          allowReserved: true
        - name: metric
          in: query
          required: false
          schema:
            enum:
              - email_send_rate
              - sms_send_rate
              - vault_access_rate
              - api_call_rate
              - unique_recipients
            type: string
            description: Filter by metric type
          allowEmptyValue: true
          allowReserved: true
        - name: severity
          in: query
          required: false
          schema:
            enum:
              - INFO
              - WARNING
              - CRITICAL
            type: string
            description: Filter by severity
          allowEmptyValue: true
          allowReserved: true
        - name: status
          in: query
          required: false
          schema:
            enum:
              - TRIGGERED
              - ACKNOWLEDGED
              - RESOLVED
              - FALSE_POSITIVE
            type: string
            description: Filter by status
          allowEmptyValue: true
          allowReserved: true
        - name: cursor
          in: query
          required: false
          schema:
            type: string
            description: Pagination cursor
          allowEmptyValue: true
          allowReserved: true
        - name: limit
          in: query
          required: false
          schema:
            default: 20
            type: integer
            minimum: 1
            maximum: 100
            description: Maximum number of alerts to return
          allowEmptyValue: true
          allowReserved: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
                properties:
                  items:
                    type: array
                    items:
                      type: object
                      properties:
                        id:
                          type: string
                          description: Unique alert identifier
                        orgId:
                          type: string
                          description: Organization identifier
                        agentId:
                          type: string
                          description: Agent identifier
                        metric:
                          enum:
                            - email_send_rate
                            - sms_send_rate
                            - vault_access_rate
                            - api_call_rate
                            - unique_recipients
                          type: string
                          description: Type of metric being tracked
                        severity:
                          enum:
                            - INFO
                            - WARNING
                            - CRITICAL
                          type: string
                          description: Severity level of the anomaly alert
                        status:
                          enum:
                            - TRIGGERED
                            - ACKNOWLEDGED
                            - RESOLVED
                            - FALSE_POSITIVE
                          type: string
                          description: Current status of the anomaly alert
                        baselineValue:
                          type: number
                          description: Expected baseline value
                        actualValue:
                          type: number
                          description: Observed actual value
                        zScore:
                          type: number
                          description: Z-score of the deviation
                        ruleId:
                          anyOf:
                            - type: string
                            - type: 'null'
                          description: Identifier of the rule that triggered this alert
                        details:
                          type: object
                          additionalProperties: {}
                          description: Additional details about the anomaly
                        acknowledgedBy:
                          anyOf:
                            - type: string
                            - type: 'null'
                          description: User who acknowledged the alert
                        acknowledgedAt:
                          anyOf:
                            - type: string
                            - type: 'null'
                          description: ISO 8601 timestamp when acknowledged
                        resolvedBy:
                          anyOf:
                            - type: string
                            - type: 'null'
                          description: User who resolved the alert
                        resolvedAt:
                          anyOf:
                            - type: string
                            - type: 'null'
                          description: ISO 8601 timestamp when resolved
                        createdAt:
                          type: string
                          description: ISO 8601 timestamp when alert was created
                        updatedAt:
                          type: string
                          description: ISO 8601 timestamp when alert was last updated
                      required:
                        - id
                        - orgId
                        - agentId
                        - metric
                        - severity
                        - status
                        - baselineValue
                        - actualValue
                        - zScore
                        - ruleId
                        - details
                        - acknowledgedBy
                        - acknowledgedAt
                        - resolvedBy
                        - resolvedAt
                        - createdAt
                        - updatedAt
                      description: An anomaly detection alert
                    description: List of anomaly alerts
                  nextCursor:
                    anyOf:
                      - type: string
                      - type: 'null'
                    description: Cursor for the next page, null if no more results
                required:
                  - items
                  - nextCursor
                description: Paginated list of anomaly alerts
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        JWT Bearer token obtained from authentication. Pass as: Authorization:
        Bearer <token>
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-API-Key
      description: 'API key for programmatic access. Pass as: X-API-Key: <your-key>'

````