Anomalies

Anomaly detection runs automatically on memory operations and surfaces through the Audit router. Novyx monitors for unusual patterns — rapid bulk operations, unexpected deletions, and behavioral outliers — and flags them in your audit trail.

Base URL: https://novyx-ram-api.fly.dev

Tier: Pro+

---

How anomaly detection works

Anomaly detection is not a separate API — it runs inline during memory operations and reports through existing endpoints:

1. Audit summary — The anomaly_count field in GET /v1/audit/summary counts server errors (5xx) that may indicate anomalous behavior
2. Audit verify — GET /v1/audit/verify (Pro+) runs Sentinel validation to check SHA-256 integrity of all memories, detecting tampering
3. Webhook alerts — If you have webhooks configured, anomaly events are delivered in real-time

Check for anomalies via audit summary

Python

from novyx import Novyx

nx = Novyx(api_key="nram_your_key")

summary = nx.audit_summary(since="2026-03-08T00:00:00Z")
print(f"Total operations: {summary['total_operations']}")
print(f"Errors: {summary['error_count']}")
print(f"Anomalies: {summary['anomaly_count']}")

TypeScript

import { Novyx } from "novyx";

const nx = new Novyx({ apiKey: "nram_your_key" });

const summary = await nx.auditSummary({ since: "2026-03-08T00:00:00Z" });
console.log(`Total operations: ${summary.total_operations}`);
console.log(`Errors: ${summary.error_count}`);
console.log(`Anomalies: ${summary.anomaly_count}`);

curl

curl "https://novyx-ram-api.fly.dev/v1/audit/summary?since=2026-03-08T00:00:00Z" \
  -H "Authorization: Bearer nram_your_key"

Verify memory integrity

Python

result = nx.audit_verify()
if result["valid"]:
    print("All memories pass integrity check")
else:
    print(f"Failures: {result['integrity_failures']}")

TypeScript

const result = await nx.auditVerify();
if (result.valid) {
  console.log("All memories pass integrity check");
} else {
  console.log(`Failures: ${result.integrity_failures}`);
}

curl

curl https://novyx-ram-api.fly.dev/v1/audit/verify \
  -H "Authorization: Bearer nram_your_key"

Response

{
  "valid": true,
  "timestamp": "2026-03-09T12:00:00Z"
}

---

Related endpoints

Endpoint	What it tells you
GET /v1/audit/summary	anomaly_count — number of 5xx errors in the period
GET /v1/audit/verify	SHA-256 integrity check across all memories
GET /v1/audit	Full audit trail with per-entry status codes
POST /v1/webhooks	Subscribe to anomaly events in real-time