> ## Documentation Index
> Fetch the complete documentation index at: https://evalgate.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Create red team generate

> Requires scopes: red_team:run



## OpenAPI

````yaml /api-reference/openapi.json post /api/red-team/attack-cases/generate
openapi: 3.1.0
info:
  title: EvalGate API
  version: 3.7.6
  description: EvalGate API. See docs/api-contract.md for stability commitments.
servers:
  - url: https://evalgate.com
    description: Production
  - url: http://localhost:3000
    description: Local
security: []
paths:
  /api/red-team/attack-cases/generate:
    post:
      tags:
        - red team
      summary: Create red team generate
      description: 'Requires scopes: red_team:run'
      operationId: post_red_team_attack_cases_generate
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostApiRedTeamAttackCasesGenerateRequest'
      responses:
        '201':
          description: Successful response
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/PostApiRedTeamAttackCasesGenerateResponse201ApplicationJson
        '400':
          $ref: '#/components/responses/ValidationError'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '409':
          $ref: '#/components/responses/Conflict'
        '429':
          $ref: '#/components/responses/RateLimited'
        '500':
          $ref: '#/components/responses/InternalError'
      security:
        - bearerAuth:
            - red_team:run
components:
  schemas:
    PostApiRedTeamAttackCasesGenerateRequest:
      type: object
      properties:
        provider:
          type: string
        objective:
          type: string
        category:
          oneOf:
            - type: string
              enum:
                - prompt_injection
            - type: string
              enum:
                - data_exfiltration_privacy
            - type: string
              enum:
                - harmful_content
            - type: string
              enum:
                - misinformation_hallucination
            - type: string
              enum:
                - authorization_bypass
            - type: string
              enum:
                - tool_misuse
            - type: string
              enum:
                - excessive_agency
            - type: string
              enum:
                - insecure_output_handling
            - type: string
              enum:
                - sensitive_data_disclosure
            - type: string
              enum:
                - policy_evasion
            - type: string
              enum:
                - denial_of_wallet
            - type: string
              enum:
                - jailbreak_robustness
        riskPackVersionId:
          type: string
        count:
          type: number
        modelPreference:
          type: string
      additionalProperties: false
      required:
        - provider
        - objective
        - category
        - riskPackVersionId
    PostApiRedTeamAttackCasesGenerateResponse201ApplicationJson:
      type: object
      properties:
        cases:
          type: array
          items:
            type: object
            properties:
              input:
                type: string
              severity:
                oneOf:
                  - type: string
                    enum:
                      - low
                  - type: string
                    enum:
                      - medium
                  - type: string
                    enum:
                      - high
                  - type: string
                    enum:
                      - critical
              id:
                type: string
              createdAt:
                type: string
                format: date-time
              organizationId:
                $ref: '#/components/schemas/OrganizationId'
              createdBy:
                type: string
              contentHash:
                type: string
              source:
                type: string
              category:
                oneOf:
                  - type: string
                    enum:
                      - prompt_injection
                  - type: string
                    enum:
                      - data_exfiltration_privacy
                  - type: string
                    enum:
                      - harmful_content
                  - type: string
                    enum:
                      - misinformation_hallucination
                  - type: string
                    enum:
                      - authorization_bypass
                  - type: string
                    enum:
                      - tool_misuse
                  - type: string
                    enum:
                      - excessive_agency
                  - type: string
                    enum:
                      - insecure_output_handling
                  - type: string
                    enum:
                      - sensitive_data_disclosure
                  - type: string
                    enum:
                      - policy_evasion
                  - type: string
                    enum:
                      - denial_of_wallet
                  - type: string
                    enum:
                      - jailbreak_robustness
              reviewRationale:
                oneOf:
                  - type: 'null'
                  - type: string
              reviewedBy:
                oneOf:
                  - type: 'null'
                  - type: string
              reviewedAt:
                oneOf:
                  - type: 'null'
                  - type: string
                    format: date-time
              reviewStatus:
                type: string
              riskPackVersionId:
                type: string
              caseKey:
                type: string
              technique:
                type: string
              expectedSafeBehavior:
                type: string
              successIndicators:
                type: array
                items:
                  type: string
              generatedModelCallId:
                oneOf:
                  - type: 'null'
                  - type: string
            additionalProperties: false
            required:
              - input
              - severity
              - id
              - createdAt
              - organizationId
              - createdBy
              - contentHash
              - source
              - category
              - reviewRationale
              - reviewedBy
              - reviewedAt
              - reviewStatus
              - riskPackVersionId
              - caseKey
              - technique
              - expectedSafeBehavior
              - successIndicators
              - generatedModelCallId
        modelCallId:
          type: string
      additionalProperties: false
      required:
        - cases
        - modelCallId
    OrganizationId:
      type: string
      format: uuid
    ApiError:
      type: object
      properties:
        error:
          type: object
          properties:
            code:
              type: string
              enum:
                - UNAUTHORIZED
                - FORBIDDEN
                - NOT_FOUND
                - VALIDATION_ERROR
                - RATE_LIMITED
                - CONFLICT
                - INTERNAL_ERROR
                - SERVICE_UNAVAILABLE
                - QUOTA_EXCEEDED
                - NO_ORG_MEMBERSHIP
                - CROSS_ORG_REFERENCE
                - INCOMPLETE
                - MALFORMED
            message:
              type: string
            details: {}
            requestId:
              type: string
              format: uuid
          required:
            - code
            - message
      required:
        - error
  responses:
    ValidationError:
      description: Validation error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    Unauthorized:
      description: Unauthorized
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    Forbidden:
      description: Forbidden
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    NotFound:
      description: Resource not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    Conflict:
      description: Conflict
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    RateLimited:
      description: Rate limit exceeded
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    InternalError:
      description: Internal server error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: API Key or Session Token

````