> ## Documentation Index > Fetch the complete documentation index at: https://docs.cotool.ai/llms.txt > Use this file to discover all available pages before exploring further. # Confirm an alert feedback question > Confirm a question across the escalated alerts the reviewer was shown, closing each with its disposition. Alerts that are no longer escalated or no longer offer the explanation are skipped. Rejecting the question stops any closes still to come. ## OpenAPI ````yaml https://app.cotool.ai/api/docs/openapi.json post /api/alerts/feedback-questions/{questionId}/confirm openapi: 3.1.0 info: title: Cotool API version: 1.0.0 description: >- The Cotool REST API. Authenticate with an API key from `/settings/api-keys` sent as `Authorization: Bearer `. Authentication, error formats, pagination, and common integration recipes are documented in the [API overview](https://docs.cotool.ai/api-reference/introduction). Endpoints marked **Deprecated** keep working; each one's description names its replacement. servers: - url: https://app.cotool.ai description: Production server security: - ApiKeyAuth: [] tags: - name: Agents description: Create, update, run, and version agents. - name: Agent Runs description: Inspect agent runs, submit feedback, and read evaluation metrics. - name: Agent Triggers description: Webhook, schedule, and integration triggers that start agent runs. - name: Agents as Code description: Validate agents and skills defined as YAML in a Git repository. - name: Skills description: Reusable instructions and tool grants attached to agents. - name: Chat description: Chat sessions and their transcripts. - name: Alerts description: Alert triage, routing, and escalation notifications. - name: Output Destinations description: Webhook, Slack, Jira, and Linear destinations for agent output. - name: Detections description: Detection agents, detection hits, and the Cotool detection library. - name: Hunt description: Autonomous hunt threats, gaps, and settings. - name: Intel description: Threat-intelligence feed items, indicators, and sources. - name: Threat Model description: The organization threat model and its version history. - name: MITRE Coverage description: MITRE ATT&CK coverage across detections. - name: Tools description: Connected tool integrations and captured tool output. - name: CLIs description: Connected CLI integrations. - name: Artifacts description: Files and reports produced by agent runs. - name: Audit Logs description: Organization audit log export and event catalog. - name: Users description: Users, memberships, and the current session. - name: Roles description: Role-based permissions. - name: Organizations description: Organization-level metrics. paths: /api/alerts/feedback-questions/{questionId}/confirm: post: tags: - Alerts summary: Confirm an alert feedback question description: >- Confirm a question across the escalated alerts the reviewer was shown, closing each with its disposition. Alerts that are no longer escalated or no longer offer the explanation are skipped. Rejecting the question stops any closes still to come. parameters: - in: path name: questionId schema: type: string format: uuid required: true requestBody: content: application/json: schema: type: object properties: alertIds: type: array items: type: string format: uuid minItems: 1 maxItems: 100 description: >- The alerts the reviewer was shown for this question. Only these are closed, and only while they still offer it. commentBodyMarkdown: type: string minLength: 1 maxLength: 20000 description: Optional detail appended to each closed alert as a comment required: - alertIds responses: '200': description: Successful response content: application/json: schema: type: object properties: closedAlertIds: type: array items: type: string format: uuid skippedAlertIds: type: array items: type: string format: uuid description: >- Alerts left alone because they are no longer escalated or no longer offer the explanation stoppedAlertIds: type: array items: type: string format: uuid description: >- Alerts not closed because the question was marked as not true partway closedCodeDetectionIds: type: array items: type: string format: uuid description: Code detections that produced the closed alerts required: - closedAlertIds - skippedAlertIds - stoppedAlertIds - closedCodeDetectionIds '400': description: Bad request — input validation failed or the request was malformed content: application/json: schema: $ref: '#/components/schemas/ValidationError' '401': description: Unauthorized — missing or invalid API key / session content: application/json: schema: $ref: '#/components/schemas/Error' '403': description: Forbidden — the authenticated user lacks the required permissions content: application/json: schema: $ref: '#/components/schemas/PermissionError' '404': description: None of the alerts still offers the question. content: application/json: schema: type: object properties: error: type: string required: - error '409': description: The question was marked as not true before any alert closed. content: application/json: schema: type: object properties: error: type: string required: - error '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/Error' x-codeSamples: - lang: shell label: cURL source: >- curl -X POST "https://app.cotool.ai/api/alerts/feedback-questions/:questionId/confirm" \ -H "Authorization: Bearer YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{"alertIds":["string"],"commentBodyMarkdown":"string"}' components: schemas: ValidationError: type: object properties: error: type: string description: Error message describing what went wrong issues: type: array description: >- Detailed validation issues, present when request or response schema validation fails items: type: object additionalProperties: true required: - error Error: type: object properties: error: type: string description: Error message describing what went wrong required: - error PermissionError: type: object properties: error: type: string description: Error message describing what went wrong missingPerms: type: array description: Permissions the authenticated user is missing for this operation items: type: string required: - error securitySchemes: ApiKeyAuth: type: http scheme: bearer bearerFormat: API Key description: >- API Key authentication for programmatic access. Include your API key in the Authorization header as: `Bearer your_api_key_here` ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.