Api Testsets List

GET

https://api.respan.ai/api/testsets/

GET

/api/testsets/

$ curl https://api.respan.ai/api/testsets/ \
>      -H "Authorization: Bearer <token>"

200Retrieved

1 {
2   "count": 25,
3   "results": [
4     {
5       "updated_by": {
6         "id": 1,
7         "email": "string",
8         "name": "string",
9         "username": "string",
10         "first_name": "string",
11         "last_name": "string"
12       },
13       "tags": [
14         {
15           "id": "string",
16           "name": "string",
17           "color": "string",
18           "created_at": "2024-01-15T09:30:00Z",
19           "updated_at": "2024-01-15T09:30:00Z"
20         }
21       ],
22       "name": "string",
23       "organization": 1,
24       "testset_unique_id": "string",
25       "project": "string",
26       "created_at": "2024-01-15T09:30:00Z",
27       "description": "string",
28       "updated_at": "2024-01-15T09:30:00Z",
29       "row_count": 1,
30       "column_count": 1,
31       "max_insertions_before_rebalance": 1,
32       "used_row_indexes": [
33         1.1
34       ],
35       "current_max_row_index": 1.1,
36       "column_definitions": [
37         null
38       ],
39       "starred": true,
40       "created_by": 1
41     }
42   ],
43   "next": "string",
44   "previous": "string",
45   "total_count": 100,
46   "current_filters": {},
47   "filters_data": {}
48 }

Mixin that provides automatic organization injection and cross-org write protection.

This mixin handles ALL organization-related write behavior:

CREATE: Injects organization (user’s org for JWT, target org for API key superadmin)
UPDATE/DELETE: Allows same-org writes; cross-org JWT writes require the caller’s scope-aware is_superadmin() (active staff write scope). API key superadmin can write anywhere.

This is DATA SANITIZATION, not permission. Permission classes handle authentication and authorization (can they write at all?). This mixin handles where they write to.

Inherits from:

JWTAuthUtils: is_jwt_auth(), is_jwt_token_format()
PermissionUtils: is_read_operation(), is_write_operation(), is_same_org()
OrgScopeMixin: is_superadmin(), get_organization(), inject_*_organization()

Behavior:

post(): Calls inject_target_organization() for CREATE operations
patch()/put(): Calls inject_user_organization() for UPDATE operations
perform_update(): Allows cross-org UPDATE for JWT auth only with active staff write scope
perform_destroy(): Allows cross-org DELETE for JWT auth only with active staff write scope

Usage: class MyView(OrganizationInjectionMixin, JWTAndAPIKeyAuthenticationViewMixin, ListCreateAPIView):

All org injection and cross-org protection automatic!

pass

Note: SuperAdminMixin inherits from this mixin, so views using SuperAdminMixin automatically get these safe defaults.

Mixin that provides automatic organization injection and cross-org write protection. This mixin handles ALL organization-related write behavior: - CREATE: Injects organization (user's org for JWT, target org for API key superadmin) - UPDATE/DELETE: Allows same-org writes; cross-org JWT writes require the caller's scope-aware ``is_superadmin()`` (active staff write scope). API key superadmin can write anywhere. This is DATA SANITIZATION, not permission. Permission classes handle authentication and authorization (can they write at all?). This mixin handles where they write to. Inherits from: - JWTAuthUtils: is_jwt_auth(), is_jwt_token_format() - PermissionUtils: is_read_operation(), is_write_operation(), is_same_org() - OrgScopeMixin: is_superadmin(), get_organization(), inject_*_organization() Behavior: - post(): Calls inject_target_organization() for CREATE operations - patch()/put(): Calls inject_user_organization() for UPDATE operations - perform_update(): Allows cross-org UPDATE for JWT auth only with active staff write scope - perform_destroy(): Allows cross-org DELETE for JWT auth only with active staff write scope Usage: class MyView(OrganizationInjectionMixin, JWTAndAPIKeyAuthenticationViewMixin, ListCreateAPIView): # All org injection and cross-org protection automatic! pass Note: SuperAdminMixin inherits from this mixin, so views using SuperAdminMixin automatically get these safe defaults.

Authentication

AuthorizationBearer

JWT access token or Respan API key

Query parameters

pageintegerOptional

A page number within the paginated result set.

page_sizeintegerOptional

Number of results to return per page.

Response

countinteger

resultslist of objects

nextstring or nullformat: "uri"

previousstring or nullformat: "uri"

total_countinteger

current_filtersobject

Pydantic model for FilterParamDict. A dictionary that maps metric names to their filter parameters.

Each key is a metric name (str), and each value can be:

A single MetricFilterParamPydantic (one condition)
A List[MetricFilterParamPydantic] (multiple conditions for same metric)
A FilterBundlePydantic (nested filter bundle with connector)

Note: Uses extra=“allow” for dynamic metric name fields. The pydantic_extra annotation tells Pydantic what types to expect for extra fields, and generates typed additionalProperties in JSON Schema.

filters_dataobject