Skip to main content
POST
Run Leaderboard

Authorizations

apikey
string
header
required

Headers

X-Enkrypt-Policy
string

Optional. The name of a saved Code of Conduct policy to label the run with. There is deliberately no body field for this — the request model rejects unknown keys.

Body

application/json

POST /v1/leaderboard payload.

Frozen recipe: corpus, attacks, and judge are not caller-configurable — that is what keeps scores comparable between models.

target
ModelConfig · object
required
run_name
string | null
Required string length: 1 - 200
user_metadata
User Metadata · object | null

Response

Successful Response

The accepted run. run_id is the value to carry into the run endpoints (GET /rt/runs/{run_id}, /records, /results, /stream).

Do not follow the *_url fields verbatim. They are relative and are not guaranteed to carry the /rt/ prefix this API is published under, so requesting one as given can return 400. Build the URL from run_id and the paths documented here instead - /rt/runs/{run_id}/records is the resource you want. The same applies to records_url on the results payload.

websocket_url is the Server-Sent Events progress stream (/rt/runs/{run_id}/stream) despite its name. The live log socket is logs_url - a relative path to join onto wss://api.enkryptai.com/wss/redteam/v1/logs/tasks/. See the Stream Run Logs (WebSocket) endpoint.