Create a draft review session, optionally with initial file content.

POST /api/v1/draft-reviews

File content fields are literal UTF-8 payloads. Commentary never treats submitted paths as local files to read.

Access

Use a credential with commentary.comments.write.

Provider access, workspace membership, and agent grants are enforced separately. A token does not expand access to a repository or resource. Set up developer access.

Parameters

Name	Location	Type	Required	Description
`X-Commentary-Workspace-Id`	header	string	No	Must match the credential workspace. This header cannot widen grant authority.
`X-Correlation-Id`	header	string	No

Request body

Required. Supported content types: application/json.

Field	Type	Required	Description
`collaboration`	ReviewCollaboration	No
`title`	string	Yes
`description`	string	No
`sourceType`	`"api"` · `"mcp"` · `"cli"` · `"agent_api"`	No
`agentAlias`	string or null	No	Stable per-agent identifier for agent-authored activity. clientName is not a substitute; the connected human identity remains visible.
`files`	array of DraftReviewFileInput	No
`gitBase`	DraftGitBase	No
`base`	DraftGitBase	No

Call the endpoint

Replace path placeholders and your credential. For body operations, create request.json using the required fields above; this command does not invent resource identifiers or consent.

curl --request POST \
  'https://commentary.dev/api/v1/draft-reviews' \
  --header 'Authorization: Bearer <your-token>' \
  --header 'Content-Type: application/json' \
  --data-binary @request.json

Responses

Status	Meaning	Payload
`201`	Successful response.	object
`400`	The request was invalid.	ExternalError
`401`	Authentication is required.	ExternalError
`403`	The token or session does not have permission for this resource.	ExternalError
`404`	The resource was not found.	ExternalError
`429`	The request was rate limited.	ExternalError

Successful response fields

Field	Type	Required	Description
`ok`	`true`	No
`draftReview`	DraftReview	No
`sessionId`	string	No
`reviewUrl`	string	No	Format: uri.

Recover from errors

Use the returned status and error body. Correct invalid fields before retrying; reconnect or narrow the target for authentication and permission errors. For conditional writes, reload the latest version before preparing a new request. Respect rate-limit headers and retry only when the operation’s idempotency contract permits it.

Operation ID: createDraftReview. Download the OpenAPI contract for complete constraints and code generation. Browse endpoints.