Report a component failure (unenrolled device)

D270 token-authenticated mint for a device with NO certificate (bootstrap/updater/scanner beacons). The body token is the
credential; every token failure is one uniform 401. Targets the quarantined logs/<tenant>/_unverified/ key;
claimed identity fields are logged as CLAIMS, never joined to device rows. Bounds per Q386; refusal WARNs gated first-per-tenant-per-hour.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Request body for POST /logs/unverified (D270, strict). The enrollmentToken is the credential (never logged, never
persisted); the remaining fields are bounded claims for the ops log line.

string | null

The run-scoped log id, format YYYYMMDDTHHMMSSZ-<uuid> (≤53); the idempotency key and the object-key tail.

int64 | null

The declared compressed byte size of the bundle to PUT. Required, integer ≥0; over the (smaller) unverified cap → 413.

string | null

The reporting component: "bootstrap", "updater", or "scanner".

string | null

The fleet enrollment token ({tokenId}.{secret}) — the credential establishing the tenant.

string | null

The component's structured failure outcome (its own vocabulary, e.g. verify-failed). Required.

string | null

Optional failure stage within the outcome (e.g. signature, hash-pin).

string | null

Optional platform/arch descriptor (e.g. darwin-arm64).

string | null

Optional reporting component's version (e.g. 1.3.0).

string | null

Optional CLAIMED device id (the scanner derives one pre-enrollment; bootstrap/updater have none). Unproven — never joined to device rows.

string | null

Optional CLAIMED hostname (the device-context PII posture). Unproven — an ops correlation aid only.

Headers
string
enum
Defaults to application/json-patch+json

Generated from available request content types

Allowed:
Response
200

Success

Language
Credentials
Header
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here!