Authentication
Authenticated with a secret key (rd_sk_…) or a client token.
A client token must carry the feedback scope, or the request fails 403 permission_error
(insufficient_scope). Feedback is always stamped with the caller’s authenticated tenant (and, for
a client token, its end-user subject), so a caller can only ever write into its own tenant.
Request body
Example
Response
200 OK:
comment is present only when one was stored. rating is echoed in the shape you sent ('up' /
'down' or the 1–5 number).
Feedback is idempotent by
(request_id, end_user) with last-write-wins: re-submitting overwrites
the prior rating. Any Idempotency-Key header is redundant and is ignored. Submitting feedback
immediately after a response — before the request’s async log row has landed — is supported; the
feedback is accepted and stamped from your authenticated context.Errors
Failures use the error envelope:400invalid_request_error— a malformed body (invalid_request) ormetadataover the 4096-byte limit (metadata_too_large, withparam: "metadata").403permission_error— a client token missing thefeedbackscope (insufficient_scope).404not_found_error— arequest_idthat belongs to a different project/environment or (for a client token) a different end user (request_not_found, a uniform response that is never an existence oracle).