> ## Documentation Index > Fetch the complete documentation index at: https://docs.moonbounce.ai/llms.txt > Use this file to discover all available pages before exploring further. # List a decision's versions > Reads only. Lists the decision's versions, highest number (newest) first, with their question hashes but not their structures; getVersion returns a structure. Versions belong to the whole organization. 404 DECISION_UNKNOWN when the decision doesn't exist, with or without a cursor. Pass next_cursor as cursor while has_more is true. ## OpenAPI ````yaml /openapi.json get /v1/decisions/{decision_id}/versions openapi: 3.1.0 info: title: Moonbounce Decisions API version: 0.0.0 description: >- Moonbounce decisions: evaluate an item's state against a decision structure (System One questions, attributes you supply and aggregations over both), record feedback and import labeled examples, review a ranked queue, and improve the structure through suggestions that ship as code diffs, each with a preview (backtest) and an evidence label. **Authentication.** Send an API key as `Authorization: Bearer ` on every operation except `GET /health` and `POST /v1/validate`. Call the API from a server, never a browser: a key must not reach one, and the API sends no CORS headers. A key belongs to one organization and one environment: production, or test for a key with the `env:test` permission. Test traffic never counts as production traffic. **Requests.** JSON bodies (`Content-Type: application/json`) of at most 1 MB, parsed strictly: duplicate keys, lone surrogates, integers outside ±(2^53 - 1), `__proto__` keys, U+0000 and nesting deeper than 64 are a 400. **Retries.** Send an `Idempotency-Key` on every POST under /v1 that takes one (all but `POST /v1/validate` and `POST /v1/review/items/fill`, whose retry is another fill within the day's budget). Keep it for the request's retries. The same key with the same request returns the first stored result, marked `Idempotent-Replayed: true`, for 24 hours (410 if that result was since deleted); with another request it is 422 IDEMPOTENCY_KEY_REUSED. Keys are scoped to the organization and environment across every operation, so use a fresh key per request. A request that failed before its result was stored runs again when retried. 429 and 503 under /v1 may carry `Retry-After` (seconds); a daily QUOTA_EXCEEDED cap instead names its reset time. **Errors.** Every error under /v1 is `{"error": {"type", "message", "reason"?, "param"?, "details"?}}` (ErrorBody); `GET /health` answers its own shape. Every response carries a `Request-Id` header. Rate limits apply per key, and per client IP for requests without a valid key; a 429 RATE_LIMITED carries `Retry-After`. servers: - url: https://api.moonbounce.ai description: Production security: [] paths: /v1/decisions/{decision_id}/versions: get: tags: - decisions summary: List a decision's versions description: >- Reads only. Lists the decision's versions, highest number (newest) first, with their question hashes but not their structures; getVersion returns a structure. Versions belong to the whole organization. 404 DECISION_UNKNOWN when the decision doesn't exist, with or without a cursor. Pass next_cursor as cursor while has_more is true. operationId: listVersions parameters: - schema: $ref: '#/components/schemas/DecisionId' required: true description: >- A name you choose for this decision, such as `refund-exception`: a lowercase letter, then up to 127 of `a-z 0-9 _ . -`. Unique in your organization and shared by its test and production keys. The first registration or evaluation under a new one creates the decision. name: decision_id in: path - schema: type: integer minimum: 1 maximum: 100 default: 50 required: false name: limit in: query - schema: type: string minLength: 1 maxLength: 1024 description: The previous page's next_cursor. required: false description: The previous page's next_cursor. name: cursor in: query responses: '200': description: A version page content: application/json: examples: two_versions: summary: Both versions of the refund decision, newest first value: environment: production items: - structure_hash: >- sha256:08bdcc48471e664be5515a00666df06323ddd306ed41f7c7315dfc85d98e628f number: 2 question_hashes: item_used: >- sha256:2cd936709034818c3beca2574ca48ef400577728a20532924ed68f1ca1f26e3d defective: >- sha256:8dd4a69d6bfaf9fa766adcac7cfa1c4af7eff57a690a1e39666398bf85cd1869 created_at: '2026-11-06T15:30:00.000Z' - structure_hash: >- sha256:bdad6e5b1b879209305f1555b43ec62666a4d74a925280c66e54cc4dc07bb1ae number: 1 question_hashes: item_used: >- sha256:2cd936709034818c3beca2574ca48ef400577728a20532924ed68f1ca1f26e3d defective: >- sha256:8dd4a69d6bfaf9fa766adcac7cfa1c4af7eff57a690a1e39666398bf85cd1869 created_at: '2026-11-06T09:00:00.000Z' next_cursor: null has_more: false schema: $ref: '#/components/schemas/VersionPage' '400': description: 'Invalid request: `param` names the field at fault when one applies' content: application/json: schema: $ref: '#/components/schemas/ErrorBody' '401': description: Missing or invalid API key (reason KEY_INVALID) content: application/json: schema: $ref: '#/components/schemas/ErrorBody' '403': description: The key may not do this content: application/json: schema: $ref: '#/components/schemas/ErrorBody' '404': description: Not found, or not in this key's organization and environment content: application/json: schema: $ref: '#/components/schemas/ErrorBody' '429': description: >- RATE_LIMITED: retry after Retry-After seconds; QUOTA_EXCEEDED: details.reset_at gives the daily reset time (no Retry-After) headers: Retry-After: schema: type: string description: Seconds to wait before retrying, when waiting helps. required: false description: Seconds to wait before retrying, when waiting helps. content: application/json: schema: $ref: '#/components/schemas/ErrorBody' '503': description: >- Temporarily unavailable, with Retry-After (for example reason AUTH_UNAVAILABLE, ENGINE_UNAVAILABLE or STORE_UNAVAILABLE): retry with the same Idempotency-Key headers: Retry-After: schema: type: string description: Seconds to wait before retrying, when waiting helps. required: true description: Seconds to wait before retrying, when waiting helps. content: application/json: schema: $ref: '#/components/schemas/ErrorBody' security: - bearerAuth: - decisions:evaluate - bearerAuth: - decisions:develop components: schemas: DecisionId: type: string pattern: ^[a-z][a-z0-9_.-]{0,127}$ description: >- A name you choose for this decision, such as `refund-exception`: a lowercase letter, then up to 127 of `a-z 0-9 _ . -`. Unique in your organization and shared by its test and production keys. The first registration or evaluation under a new one creates the decision. VersionPage: type: object properties: environment: $ref: '#/components/schemas/Environment' next_cursor: type: - string - 'null' has_more: type: boolean items: type: array items: $ref: '#/components/schemas/DecisionVersion' required: - environment - next_cursor - has_more - items ErrorBody: type: object properties: error: type: object properties: type: $ref: '#/components/schemas/ErrorType' reason: type: string pattern: ^[A-Z][A-Z0-9_]+$ description: >- Set where a caller can act on it, one of the reasons in the ErrorReason schema. New reasons may be added: treat an unknown one by the status and `type`. message: type: string description: For people; don't parse it. param: type: string description: >- The request field at fault, as a dotted path (`attribute_values.region`, `claims.1.value`). details: type: object properties: issues: type: array items: $ref: '#/components/schemas/ErrorIssue' additionalProperties: {} required: - type - message additionalProperties: true x-moonbounce-sdk-known-fields: true required: - error additionalProperties: true x-moonbounce-sdk-known-fields: true Environment: type: string enum: - production - test description: >- The environment of the key that made the call: `production` or `test`. Evaluations, feedback, reviews and suggestions are separate per environment; decisions and their versions belong to the whole organization. DecisionVersion: type: object properties: structure_hash: $ref: '#/components/schemas/StructureHashOutput' number: $ref: '#/components/schemas/VersionNumber' question_hashes: type: object additionalProperties: $ref: '#/components/schemas/QuestionHash' description: >- Each question, by name, mapped to its hash (its definition without its name). A question's hash is what feedback about it is stored against. created_at: type: string format: date-time description: When the version was first registered. required: - structure_hash - number - question_hashes - created_at additionalProperties: true description: >- A registered structure: its hash, its number under the decision and each question's hash. x-moonbounce-sdk-known-fields: true ErrorType: type: string enum: - invalid_request - authentication - permission_denied - not_found - conflict - rate_limited - engine_failed - unavailable - internal ErrorIssue: type: object properties: param: type: string code: type: string pattern: ^[A-Z][A-Z0-9_]+$ description: >- Stable, extensible issue code; unknown codes still have a parameter and human-readable message. message: type: string required: - param - code - message additionalProperties: true x-moonbounce-sdk-known-fields: true StructureHashOutput: type: string pattern: ^sha256:[0-9a-f]{64}$ VersionNumber: type: integer minimum: 1 description: >- The version's number under its decision: 1 for the first structure registered, then 2, 3... in the order the organization registered them. For people; the hash is the version's identity. QuestionHash: type: string pattern: ^sha256:[0-9a-f]{64}$ securitySchemes: bearerAuth: type: http scheme: bearer description: >- An API key, sent as `Authorization: Bearer `. Each operation lists the scope its key needs: `decisions:evaluate` (evaluate and read evaluations), `decisions:feedback` (your app's feedback) or `decisions:develop` (everything else, including owner feedback and the review queue). An operation listing no scope takes any scoped key. A key with no scope, or without the operation's, gets 403 INSUFFICIENT_SCOPE. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.