--- title: List reclassify submissions --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [Email Security](https://developers.cloudflare.com/api/resources/email_security) [Submissions](https://developers.cloudflare.com/api/resources/email_security/subresources/submissions) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # List reclassify submissions GET/accounts/{account\_id}/email-security/submissions Returns information for submissions made to reclassify emails. Shows the status, outcome, and disposition changes for reclassification requests made by users or the security team. Useful for tracking false positive/negative reports. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### P ath ParametersExpand Collapse account\_id: string Identifier. maxLength32 [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>) ##### Q uery ParametersExpand Collapse

direction: optional "asc"or "desc" The sorting direction.

One of the following: "asc" Link to this property "desc" Link to this property

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20direction%20%3E%20(schema)>) end: optional string The end of the search date range. Defaults to `now`. formatdate-time [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20end%20%3E%20(schema)>) escalated\_from\_user: optional boolean When true, return only submissions that were escalated by an end user (vs. by the security team). When false, return only submissions that were not escalated by an end user. When omitted, no filter is applied. [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20escalated_from_user%20%3E%20(schema)>)

order: optional "submission\_id"or "subject"or "original\_disposition"or 3 more Field to sort by.

One of the following: "submission\_id" Link to this property "subject" Link to this property "original\_disposition" Link to this property "requested\_disposition" Link to this property "outcome\_disposition" Link to this property "requested\_at" Link to this property

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20order%20%3E%20(schema)>)

original\_disposition: optional "MALICIOUS"or "SUSPICIOUS"or "SPOOF"or 3 more The disposition a message is submitted to have.

One of the following: "MALICIOUS" Link to this property "SUSPICIOUS" Link to this property "SPOOF" Link to this property "SPAM" Link to this property "BULK" Link to this property "NONE" Link to this property

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20original_disposition%20%3E%20(schema)>)

outcome\_disposition: optional "MALICIOUS"or "SUSPICIOUS"or "SPOOF"or 3 more The disposition a message is submitted to have.

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20outcome_disposition%20%3E%20(schema)>) page: optional number Current page within paginated list of results. minimum1 [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20page%20%3E%20(schema)>) per\_page: optional number The number of results per page. Maximum value is 1000. maximum1000 minimum1 [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20per_page%20%3E%20(schema)>) query: optional string Search term for filtering submissions. [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20query%20%3E%20(schema)>)

requested\_disposition: optional "MALICIOUS"or "SUSPICIOUS"or "SPOOF"or 3 more The disposition a message is submitted to have.

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20requested_disposition%20%3E%20(schema)>) start: optional string The beginning of the search date range. Defaults to `now - 30 days`. formatdate-time [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20start%20%3E%20(schema)>) status: optional string Filter by review status — `escalated`, `reviewed`, or `unreviewed`. [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20status%20%3E%20(schema)>) submission\_id: optional string Filter by a specific submission ID. [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20submission_id%20%3E%20(schema)>)

type: optional "TEAM"or "USER" Filter by who created the submission — TEAM for security team members or USER for end users.

One of the following: "TEAM" Link to this property "USER" Link to this property

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20type%20%3E%20(schema)>) ##### ReturnsExpand Collapse

errors: array of object {code, message, documentation\_url, source }

code: number minimum1000 Link to this property message: string Link to this property documentation\_url: optional string Link to this property

source: optional object {pointer }

pointer: optional string Link to this property

Link to this property

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)

messages: array of object {code, message, documentation\_url, source }

code: number minimum1000 Link to this property message: string Link to this property documentation\_url: optional string Link to this property

source: optional object {pointer }

pointer: optional string Link to this property

Link to this property

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20messages>) success: true Whether the API call was successful. [Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20success>)

result: optional array of object {requested\_at, submission\_id, customer\_status, 15 more }

requested\_at: string When the submission was requested (UTC). formatdate-time Link to this property submission\_id: string Link to this property

customer\_status: optional "escalated"or "reviewed"or "unreviewed"

One of the following: "escalated" Link to this property "reviewed" Link to this property "unreviewed" Link to this property

Link to this property

escalated\_as: optional "MALICIOUS"or "SUSPICIOUS"or "SPOOF"or 3 more The disposition a message is submitted to have.

Link to this property escalated\_at: optional string When the submission was escalated to the security team. formatdate-time Link to this property escalated\_by: optional string Email address of the user who escalated the submission. Link to this property escalated\_submission\_id: optional string Submission ID of the escalated team submission, when this user submission was escalated. Link to this property

original\_disposition: optional "MALICIOUS"or "SUSPICIOUS"or "SPOOF"or 3 more The disposition a message is submitted to have.

Link to this property original\_edf\_hash: optional string EDF hash of the original message. Link to this property original\_postfix\_id: optional string The postfix ID of the original message that was submitted. Link to this property outcome: optional string Processing outcome of the submission. Link to this property

outcome\_disposition: optional "MALICIOUS"or "SUSPICIOUS"or "SPOOF"or 3 more The disposition a message is submitted to have.

Link to this property requested\_by: optional string Email address of the user who requested the submission. Link to this property

requested\_disposition: optional "MALICIOUS"or "SUSPICIOUS"or "SPOOF"or 3 more The disposition a message is submitted to have.

Link to this property Deprecatedrequested\_ts: optional string Use requested_at instead. Deprecated, use requested_at instead. Link to this property status: optional string Processing status of the submission. Link to this property subject: optional string Subject line of the submitted message. Link to this property

type: optional "Team"or "User" Indicates whether a team member or an end user created the submission.

One of the following: "Team" Link to this property "User" Link to this property

Link to this property

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20result>)

result\_info: optional object {count, page, per\_page, total\_count }

count: optional number Total number of results for the requested service. Link to this property page: optional number Current page within paginated list of results. Link to this property per\_page: optional number Number of results per page of results. Link to this property total\_count: optional number Total results available without any search parameters. Link to this property

[Link to this property](<#(resource)%20email_security.submissions%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20result_info>) ### List reclassify submissions HTTP HTTPTypeScriptPythonGoTerraform ``` curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/email-security/submissions \ -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": [ { "requested_at": "2019-12-27T18:11:19.117Z", "submission_id": "submission_id", "customer_status": "escalated", "escalated_as": "MALICIOUS", "escalated_at": "2019-12-27T18:11:19.117Z", "escalated_by": "escalated_by", "escalated_submission_id": "escalated_submission_id", "original_disposition": "MALICIOUS", "original_edf_hash": "original_edf_hash", "original_postfix_id": "original_postfix_id", "outcome": "outcome", "outcome_disposition": "MALICIOUS", "requested_by": "requested_by", "requested_disposition": "MALICIOUS", "requested_ts": "requested_ts", "status": "status", "subject": "subject", "type": "Team" } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": [ { "requested_at": "2019-12-27T18:11:19.117Z", "submission_id": "submission_id", "customer_status": "escalated", "escalated_as": "MALICIOUS", "escalated_at": "2019-12-27T18:11:19.117Z", "escalated_by": "escalated_by", "escalated_submission_id": "escalated_submission_id", "original_disposition": "MALICIOUS", "original_edf_hash": "original_edf_hash", "original_postfix_id": "original_postfix_id", "outcome": "outcome", "outcome_disposition": "MALICIOUS", "requested_by": "requested_by", "requested_disposition": "MALICIOUS", "requested_ts": "requested_ts", "status": "status", "subject": "subject", "type": "Team" } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000 } } ```