Triage a finding.
action is one of ack, mute, dismiss, resolve, reopen or
assign; assign additionally requires assigned_to, and any action may
carry a free-text reason.
mute and dismiss record durable feedback keyed on the finding’s
fingerprint, which suppresses that pattern across EVERY audit in the
organization — not just the one you are looking at. reopen clears that
suppression. resolve records none, so a pattern that comes back is filed
again as new. ack keeps the finding visible but deprioritized.
Set X-AgentEye-Actor to attribute the action to a person; without it the
API key’s id is recorded instead. If the finding graduated into an issue,
the issue is updated to match on a best-effort basis — a failure there is
logged and does not fail the triage, which has already committed.
Authorizations
A scoped AgentEye API key. Mint one in the dashboard under Settings → API keys, or with POST /v1/keys. Each endpoint names the permission it requires; a key without it gets 403 and a required_permission field naming what was missing.
Path Parameters
The finding's id.
Body
Response
The action was applied.

