Accepts website reviews without an account, widget token, scan, cookies, or CSRF token.
Send JSON with Accept: application/json; browser callers should use credentials: omit.
Stores source website and trigger demo in the existing reviews table and publishes immediately, regardless of star rating.
Name and email are self-reported; an email match never links a guest review to an Oyster account.
Rating is required (1–5); optional comments are trimmed, with blank values stored as null.
Queues the existing configured Slack and team email alerts after commit.
Limited to 5 submission attempts per minute per caller, independently of GET requests.
Inform reviewers that their name, rating, comment, and any team reply are public by default.
Email and context ID remain private. Only super admins can hide, restore, or reply in Admin → Reviews.
Submitted publication, reply, source, user, vendor, and trigger fields are ignored.