> ## Documentation Index > Fetch the complete documentation index at: https://bavlio.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Get Queue Item > Return a single queue item plus the linked classification row. Cross-tenant probes return **404** (not 403): an attacker must not be able to distinguish "this id does not exist" from "this id belongs to someone else" by status code alone. Two sequential reads instead of a PostgREST embed because the shared ``AsyncTable.execute`` does not emit the ``select`` query parameter to the wire, so ``select=*,reply_classifications(*)`` would be silently dropped and the join would never round-trip. The second read is skipped entirely when ``classification_id`` is null, which is the common case for v1 non-classifier writers. The classification read is filtered by BOTH ``id`` and ``user_id`` even though the queue row already passed tenant scoping. Defense in depth: if a bad FK or race ever wrote a cross-user classification_id into a queue row, service-role bypasses RLS and would otherwise leak the classification to the wrong tenant. Missing match returns classification=null (same as a missing FK). ## OpenAPI ````yaml https://api.bavlio.com/openapi.json get /api/v1/queue/{item_id} openapi: 3.1.0 info: title: Bavlio API description: >- Outreach automation API — lead enrichment, email campaigns, LinkedIn automation, and AI agent. Full docs at https://docs.bavlio.com. version: 1.0.0 x-guidance: product: Bavlio Data API protocols: - x402 description: >- Pay-per-call B2B data endpoints for AI agents. USDC on Base mainnet via x402 v2. See /openapi.json for pricing. Landing page + marketing details: https://bavlio.com/developers network: eip155:8453 docs_url: https://docs.bavlio.com x-payment-merchant-address: '0xcca4725e0e931982830bff523b141e1a7a58d3e7' servers: [] security: [] tags: - name: API Keys description: >- Create, list, and revoke API keys for programmatic access. JWT authentication required. - name: credits description: Credit balance, cost estimates, and transaction history. - name: campaigns description: Create, manage, launch, and monitor email campaigns. - name: campaign-personalization description: AI-powered email subject and body personalization for campaigns. - name: email-finder description: Find and verify email addresses for prospects. - name: sender-profiles description: Manage sender identity profiles for outreach. - name: sender-profile-chat description: Interactive chat for building sender profiles. - name: templates description: Email template CRUD. - name: suppression description: Do-not-contact suppression list management. - name: datasets description: Lead dataset listing, download, and updates. - name: user-extractions description: Uploaded lead file management and processing. - name: enrichment-chat description: Interactive chat for data enrichment sessions. - name: enrichment-processing description: Batch lead enrichment processing. - name: File Upload (CSV/Excel) description: Upload and preview CSV/Excel lead files. - name: connected-accounts description: LinkedIn account connections via Unipile. - name: linkedin-content description: LinkedIn post creation, scheduling, and management. - name: linkedin-playground description: Direct LinkedIn actions (profile lookup, messaging, engagement). - name: bavimail-proxy description: BaviMail domain, alias, and email management. - name: agent description: Bavi AI agent chat with SSE streaming. - name: notifications description: Notification preferences and delivery. - name: referral description: Referral code management and stats. - name: feedback description: User feedback submission. - name: authentication description: JWT token verification and user info. - name: users description: User quota and usage information. - name: Health description: Health checks and system status. - name: Personalization description: Core lead personalization engine. - name: Session Management description: Enrichment session lifecycle. - name: Session Processing description: Session data processing. - name: webhooks description: Inbound webhook handlers (Stripe, BaviMail, Unipile). paths: /api/v1/queue/{item_id}: get: tags: - review_queue summary: Get Queue Item description: |- Return a single queue item plus the linked classification row. Cross-tenant probes return **404** (not 403): an attacker must not be able to distinguish "this id does not exist" from "this id belongs to someone else" by status code alone. Two sequential reads instead of a PostgREST embed because the shared ``AsyncTable.execute`` does not emit the ``select`` query parameter to the wire, so ``select=*,reply_classifications(*)`` would be silently dropped and the join would never round-trip. The second read is skipped entirely when ``classification_id`` is null, which is the common case for v1 non-classifier writers. The classification read is filtered by BOTH ``id`` and ``user_id`` even though the queue row already passed tenant scoping. Defense in depth: if a bad FK or race ever wrote a cross-user classification_id into a queue row, service-role bypasses RLS and would otherwise leak the classification to the wrong tenant. Missing match returns classification=null (same as a missing FK). operationId: get_queue_item_api_v1_queue__item_id__get parameters: - name: item_id in: path required: true schema: type: string format: uuid title: Item Id responses: '200': description: Successful Response content: application/json: schema: $ref: '#/components/schemas/QueueItemDetail' '422': description: Validation Error content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' security: - HTTPBearer: [] components: schemas: QueueItemDetail: properties: id: type: string format: uuid title: Id user_id: type: string format: uuid title: User Id prospect_identifier: type: string title: Prospect Identifier prospect_identifier_type: type: string enum: - email - linkedin_provider_id - prospect_uuid title: Prospect Identifier Type channel: type: string enum: - email - linkedin title: Channel campaign_id: anyOf: - type: string format: uuid - type: 'null' title: Campaign Id campaign_name: anyOf: - type: string - type: 'null' title: Campaign Name campaign_lead_id: anyOf: - type: string format: uuid - type: 'null' title: Campaign Lead Id classification_id: anyOf: - type: string format: uuid - type: 'null' title: Classification Id triggering_engagement_id: anyOf: - type: string format: uuid - type: 'null' title: Triggering Engagement Id status: type: string enum: - pending - resolved - auto_resolved - expired title: Status resolution_action: anyOf: - type: string - type: 'null' title: Resolution Action resolution_action_params: anyOf: - additionalProperties: true type: object - type: 'null' title: Resolution Action Params resolution_note: anyOf: - type: string - type: 'null' title: Resolution Note resolved_by: anyOf: - type: string - type: 'null' title: Resolved By resolved_at: anyOf: - type: string - type: 'null' title: Resolved At notes: items: additionalProperties: true type: object type: array title: Notes created_at: type: string title: Created At expires_at: type: string title: Expires At reply_classification: anyOf: - additionalProperties: true type: object - type: 'null' title: Reply Classification type: object required: - id - user_id - prospect_identifier - prospect_identifier_type - channel - status - created_at - expires_at title: QueueItemDetail description: 'Detail-view projection: includes the joined classification row.' HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' type: array title: Detail type: object title: HTTPValidationError ValidationError: properties: loc: items: anyOf: - type: string - type: integer type: array title: Location msg: type: string title: Message type: type: string title: Error Type type: object required: - loc - msg - type title: ValidationError securitySchemes: HTTPBearer: type: http scheme: bearer ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.