List cost-anomalies

GET

/cost-anomalies

• Current canonical versioned path (F3.API.01)

ML-detected cost anomalies per org/resource using IQR and Z-score methods (F2.AISTACK.13). Filled by cloud-connector daily cron (03:00 UTC).

Authorizations

• bearerAuth
• apiTokenAuth

Parameters

Query Parameters

pagination[page]

integer

pagination[pageSize]

integer

filters

Strapi REST filter syntax

object

sort

string

populate

string

Responses

200

OK

object

data

Array

object

org_id

required

Organisation documentId the anomaly belongs to.

string

resource_id

Cloud-instance documentId or service name. Null = org-total anomaly.

string

resource_type

string

Allowed values: cloud_instance service database network total

expected_usd

Expected cost derived from historical baseline (IQR median or mean).

number

actual_usd

required

Observed cost that triggered the anomaly.

number

deviation_pct

Signed percentage deviation: (actual - expected) / expected * 100.

number

detection_method

string

Allowed values: iqr z_score threshold

status

string

Allowed values: open acknowledged false_positive

acknowledged_at

string format: date-time

acknowledged_by

User ID (Strapi numeric id or email) who acknowledged the anomaly.

string

documentId

string

id

integer

createdAt

string format: date-time

updatedAt

string format: date-time

publishedAt

string format: date-time

nullable

meta

object

pagination

object

page

integer

pageSize

integer

pageCount

integer

total

integer

401

Missing or invalid authentication

403

Not authorized (tenant scope or capability)