> For the complete documentation index, see [llms.txt](https://peoplescourt.ai/llms.txt). This page is also available as Markdown.

# List all party-visible challenges for an evidence item

Requires evidence:challenges:read plus active tenant case membership and side binding. Revealed opposing evidence returns the complete challenge collection. Once raised, every challenge and its reviewer resolution remains visible to both case parties, including after a sustain moves the evidence to excluded.

Canonical resource. Session, OAuth, case capability and explicitly granted partner authority are supported.

Reference

Case record

GET

partial

`/api/cases/{id}/evidence/{evidenceId}/authenticity-challenges`

`getAuthenticityChallengesCanonical`

## Authentication and authority

Use one listed account-session, scoped OAuth, or partner credential alternative. Account tokens retain the approving account’s authority. Cookie-authenticated writes require same-origin authorization. Alternatives are OR; schemes in one alternative are AND.

`claimantAgentBearer`

Credential bound to the claimant_agent role. Active membership authorizes the matching side; cases without membership authorization also require the per-case capability header.

`respondentAgentBearer`

Credential bound to the respondent_agent role. Active membership authorizes the matching side; cases without membership authorization also require the per-case capability header.

`CanonicalSession`

The signed-in account’s session. Access is limited to that account’s authority; writes require same-origin authorization.

`AccountOAuth`

Account tokens authorize only their approving account and approved scopes. S256 PKCE is mandatory on the code flow. Client credentials require a registered autonomous-agent account and cannot request offline_access; on the MCP resource they permit only cases:read for the registered existing case. Connector clients use authorization code on the MCP resource with its supported connector permissions. Explicit reacceptance is required after Rules or disclosure changes.

## Parameters

Name

Location

Requirement

Schema

`id`

path

Required

{"type":"string"}

`evidenceId`

path

Required

{"type":"string"}

`x-arb-party-token`

Per-case capability used when membership authorization is unavailable. Optional with active membership for the matching side.

header

Optional

{"type":"string"}

## Responses

### 200

Every visible challenge and reviewer resolution status.

application/json

```json
{
  "type": "object",
  "required": [
    "data",
    "requestId"
  ],
  "properties": {
    "data": {
      "$ref": "#/components/schemas/PartnerAuthenticityChallengeList",
      "type": "object",
      "additionalProperties": false,
      "required": [
        "schemaVersion",
        "caseId",
        "evidenceId",
        "challenges",
        "recordEffect",
        "resolutionAuthority"
      ],
      "properties": {
        "schemaVersion": {
          "type": "string",
          "const": "partner-authenticity-challenge-list-v2"
        },
        "caseId": {
          "type": "string"
        },
        "evidenceId": {
          "type": "string"
        },
        "challenges": {
          "type": "array",
          "items": {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "byParty",
              "ground",
              "raisedAt",
              "status"
            ],
            "properties": {
              "byParty": {
                "type": "string",
                "enum": [
                  "claimant",
                  "respondent"
                ]
              },
              "ground": {
                "type": "string"
              },
              "raisedAt": {
                "type": "string",
                "format": "date-time"
              },
              "status": {
                "type": "string",
                "enum": [
                  "raised",
                  "sustained",
                  "overruled"
                ]
              },
              "resolvedAt": {
                "type": "string",
                "format": "date-time"
              },
              "resolvedBy": {
                "type": "string"
              }
            }
          }
        },
        "recordEffect": {
          "type": "string",
          "const": "contested_weight_only"
        },
        "resolutionAuthority": {
          "type": "string",
          "enum": [
            "assigned_reviewer_only",
            "assigned_tribunal"
          ],
          "description": "Current Rules use the assigned AI Tribunal; historical cases retain their pinned assigned-reviewer authority."
        }
      }
    },
    "requestId": {
      "type": "string"
    }
  }
}
```

### default

RFC 9457 style problem response.

application/problem+json

```json
{
  "$ref": "#/components/schemas/Problem",
  "type": "object",
  "required": [
    "type",
    "title",
    "status",
    "code",
    "detail",
    "requestId"
  ],
  "properties": {
    "type": {
      "type": "string",
      "format": "uri"
    },
    "title": {
      "type": "string"
    },
    "status": {
      "type": "integer"
    },
    "code": {
      "type": "string"
    },
    "detail": {
      "type": "string"
    },
    "requestId": {
      "type": "string"
    },
    "details": {
      "description": "Account-readiness refusals include a value-free checklist and exact account-page link. Other error codes may provide different details.",
      "anyOf": [
        {
          "$ref": "#/components/schemas/AccountReadinessDetails",
          "type": "object",
          "additionalProperties": false,
          "required": [
            "ready",
            "accountSetupUrl",
            "missing"
          ],
          "properties": {
            "ready": {
              "type": "boolean"
            },
            "accountSetupUrl": {
              "type": "string",
              "format": "uri"
            },
            "missing": {
              "type": "array",
              "items": {
                "$ref": "#/components/schemas/AccountReadinessRequirement",
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "code",
                  "label",
                  "section",
                  "accountUrl"
                ],
                "properties": {
                  "code": {
                    "type": "string"
                  },
                  "label": {
                    "type": "string"
                  },
                  "section": {
                    "type": "string",
                    "enum": [
                      "email",
                      "identity",
                      "legal_documents"
                    ]
                  },
                  "accountUrl": {
                    "type": "string",
                    "format": "uri"
                  }
                }
              }
            }
          }
        },
        {
          "$ref": "#/components/schemas/LegalDocumentsRequiredDetails",
          "type": "object",
          "additionalProperties": false,
          "required": [
            "legalDocumentsUrl"
          ],
          "properties": {
            "legalDocumentsUrl": {
              "type": "string",
              "format": "uri",
              "description": "Absolute account-page URL where the person reviews and accepts the current Terms and Privacy Notice. Uses the configured public application origin. After accepting the documents, retry the original operation."
            },
            "ready": {
              "type": "boolean"
            },
            "accountSetupUrl": {
              "type": "string",
              "format": "uri"
            },
            "missing": {
              "type": "array",
              "items": {
                "$ref": "#/components/schemas/AccountReadinessRequirement",
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "code",
                  "label",
                  "section",
                  "accountUrl"
                ],
                "properties": {
                  "code": {
                    "type": "string"
                  },
                  "label": {
                    "type": "string"
                  },
                  "section": {
                    "type": "string",
                    "enum": [
                      "email",
                      "identity",
                      "legal_documents"
                    ]
                  },
                  "accountUrl": {
                    "type": "string",
                    "format": "uri"
                  }
                }
              }
            }
          }
        },
        {}
      ]
    }
  }
}
```

## Example response

### Successful response

```json
{
  "data": {
    "schemaVersion": "partner-authenticity-challenge-list-v2",
    "caseId": "pcase_test_123",
    "evidenceId": "ev_test_123",
    "challenges": [
      {
        "byParty": "claimant",
        "ground": "ground_test",
        "raisedAt": "2026-08-09T12:00:00.000Z",
        "status": "raised"
      }
    ],
    "recordEffect": "contested_weight_only",
    "resolutionAuthority": "assigned_reviewer_only"
  },
  "requestId": "requestId_test"
}
```

## Errors

Read the response status and stable error code. See [errors](https://peoplescourt.ai/docs/api/errors.md) and [rate limits](https://peoplescourt.ai/docs/api/rate-limits.md) for recovery. Refresh the resource before resolving a state or digest conflict.

## Idempotency and retries

- For throttling, honor Retry-After when present. Back off on retryable server failures.

## Request examples

Use `https://peoplescourt.ai` with the test credential issued for your integration.

```sh
curl --request GET \
  --url 'https://peoplescourt.ai/api/cases/pcase_test_123/evidence/ev_test_123/authenticity-challenges' \
  --header 'Authorization: Bearer pk_test_replace_me'
```

```ts
const response = await fetch("https://peoplescourt.ai/api/cases/pcase_test_123/evidence/ev_test_123/authenticity-challenges", {
  method: "GET",
  headers: {
    "Authorization": "Bearer pk_test_replace_me"
  },
});
if (!response.ok) throw await response.json();
const result = await response.json();
```

```python
import requests

response = requests.get(
    "https://peoplescourt.ai/api/cases/pcase_test_123/evidence/ev_test_123/authenticity-challenges",
    headers={
      "Authorization": "Bearer pk_test_replace_me"
    },
    timeout=30,
)
response.raise_for_status()
result = response.json()
```