List a workspace's rule evaluations

List how a workspace's rulesets, and its repositories' own, judged changes across its repositories, newest first, with 30 days of insights.

GET/workspaces/{workspace}/rules/evaluations

Members only.

Authentication: Required. Send an access token as Authorization: Bearer.
MCP tool: workspace with action rule_evaluations, and the same inputs
Scope: An access token needs workspace:read.

Path parameters

Name	Type	Required	Description
`workspace`	string	Yes	The workspace’s slug, e.g. “flagon-io”.

Query parameters

Name	Type	Required	Description
`ruleset_id`	string	No	Only this ruleset’s evaluations.
`verdict`	string	No	Only evaluations that came out this way. One of `pass`, `fail`, `bypass`.
`problems_only`	boolean	No	Only evaluations that broke a rule: failed, would have failed, or bypassed.
`before`	string	No	An evaluation’s id (rev_…): only older ones. The page’s next.
`limit`	integer	No	How many, 1 to 100; 30 by default.

Example request

curl https://api.g1t.sh/workspaces/flagon-io/rules/evaluations \
  -H "Authorization: Bearer $G1T_TOKEN"

Example response

A successful request answers 200 with:

{
  "evaluations": [
    {
      "id": "rev_01kq3c4d5e6f7g8h9j0k1m2n3p",
      "repo_id": "rep_01kq0f3a7b8c9d0e1f2g3h4j5k",
      "workspace": "flagon-io",
      "ruleset_id": "rs_01kq3a8b9c0d1e2f3g4h5j6k7m",
      "ruleset_name": "Protect main",
      "enforcement": "active",
      "action": "push",
      "git_ref": "refs/heads/main",
      "actor": "g1t",
      "actor_kind": "agent",
      "verdict": "fail",
      "violations": [
        {
          "rule": "pull_request",
          "ruleset_id": "rs_01kq3a8b9c0d1e2f3g4h5j6k7m",
          "ruleset_name": "Protect main",
          "enforcement": "active",
          "message": "Changes to main must be made through a pull request.",
          "remedy": "Push a branch, open a pull request into main, and merge it."
        }
      ],
      "number": null,
      "sha": "9f3c2a1b7e6d5c4b3a2918f7e6d5c4b3a2918f7e",
      "repository": "flagon-io/hello",
      "created_at": "2026-10-07T14:02:11.318Z"
    }
  ],
  "next": null,
  "insights": {
    "days": 30,
    "total": 214,
    "passed": 198,
    "blocked": 9,
    "would_block": 5,
    "bypassed": 2,
    "by_ruleset": [
      {
        "ruleset_id": "rs_01kq3a8b9c0d1e2f3g4h5j6k7m",
        "ruleset_name": "Protect main",
        "enforcement": "active",
        "total": 120,
        "blocked": 9,
        "would_block": 0,
        "bypassed": 2
      }
    ],
    "by_rule": [
      {
        "rule": "pull_request",
        "count": 7
      },
      {
        "rule": "non_fast_forward",
        "count": 2
      }
    ]
  }
}

Errors

A failed request answers with one of these statuses and a body like {"error": {"code": "not_found", "message": "Repository not found."}}. See errors.

Status	Code	When
401	`unauthenticated`	A token is required, or the one sent is not valid.
403	`forbidden`	The token is valid but not allowed to do this, such as a member-only change or an agent token outside its repository.
404	`not_found`	It does not exist, or you cannot see it.
422	`invalid`	The input is not valid. `message` says which field and why.