Alert this run triaged or created, or null when the run is not linked to an alert
Show child attributes
Was this page helpful?
⌘I
{"docsConfig":{"theme":"linden","$schema":"https://mintlify.com/docs.json","name":"Cotool Documentation","colors":{"primary":"#A9D5F5","light":"#A9D5F5","dark":"#ADB7C2"},"logo":{"light":"https://mintcdn.com/cotool-bcb49c92/2D7q2Y6FoJjh0OqV/logo/light.svg?fit=max\u0026auto=format\u0026n=2D7q2Y6FoJjh0OqV\u0026q=85\u0026s=ed5fa6ba5fadea78cb6d1341380b9873","dark":"https://mintcdn.com/cotool-bcb49c92/2D7q2Y6FoJjh0OqV/logo/dark.svg?fit=max\u0026auto=format\u0026n=2D7q2Y6FoJjh0OqV\u0026q=85\u0026s=fab6122c7e0ad6a1e8299f49397231f5"},"favicon":"https://mintcdn.com/cotool-bcb49c92/YkFCFtl3swKv9Xqp/favicon.png?fit=max\u0026auto=format\u0026n=YkFCFtl3swKv9Xqp\u0026q=85\u0026s=4c02ec1d53713897f1c2b6f7815e864b","api":{"playground":{"display":"simple"},"examples":{"defaults":"all","languages":["curl","python","javascript","java","go"]}},"navbar":{"links":[{"href":"mailto:support@cotool.ai","label":"Support"}]},"footer":{"socials":{"x":"https://x.com/cotoolai","linkedin":"https://www.linkedin.com/company/cotool-ai","website":"https://cotool.ai"}},"integrations":{"ga4":{"measurementId":"G-RJSB18V7N5"},"gtm":{"tagId":"GTM-5BPJH7T2"}},"contextual":{"options":["copy","view"],"display":"header"},"styling":{"latex":false},"background":{"color":{"light":"#fcfeff","dark":"#0e0f12"}},"navigation":{"global":{"anchors":[{"anchor":"Blog","icon":"newspaper","href":"https://cotool.ai/blog"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"cotool-bcb49c92","hasAudioNarration":false,"actualSubdomain":"cotool-bcb49c92","customDomains":["docs.cotool.ai"],"gitSource":{"type":"github","owner":"cotool","repo":"cogent-client","deployBranch":"stable","contentDirectory":"docs","isPrivate":true,"mountPath":"","label":""},"feedback":{"thumbs":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6af1ef844fec639ad50f5578","clientVersion":"0.0.4094","searchFilterCounts":[{"language":"default","tag":"API Reference","count":159},{"language":"default","tag":"Endpoints","count":158},{"language":"default","tag":"Documentation","count":60},{"language":"default","tag":"Agents","count":30},{"language":"default","tag":"Alerts","count":23},{"language":"default","tag":"Integrations","count":17},{"language":"default","tag":"Agent Runs","count":14},{"language":"default","tag":"Agent Triggers","count":14},{"language":"default","tag":"Hunt","count":12},{"language":"default","tag":"Intel","count":11}]},"assistantConfig":{},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"api-reference/alerts/get-alert-for-run","slug":"/api-reference/alerts/get-alert-for-run","pageMetadata":{"title":"Get alert for run","description":"Resolve the alert a run triaged or created, used to link an agent run back to its alert.","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/for-run/{runId}","href":"/api-reference/alerts/get-alert-for-run","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Resolve the alert a run triaged or created, used to link an agent run back to its alert.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Get alert for run","description":"Resolve the alert a run triaged or created, used to link an agent run back to its alert.","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/for-run/{runId}","href":"/api-reference/alerts/get-alert-for-run","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"summary":"Get alert for run","description":"Resolve the alert a run triaged or created, used to link an agent run back to its alert.","tags":["Alerts"],"x-codeSamples":[{"lang":"shell","label":"cURL","source":"curl -X GET \"https://app.cotool.ai/api/alerts/for-run/:runId\" \\\n -H \"Authorization: Bearer YOUR_API_KEY\" \\\n -H \"Content-Type: application/json\""}],"parameters":["2404ee01-266a-4237-8789-7c68898dab43"],"responses":{"200":"676ad672-5b28-4879-a728-976ba815c745","400":"6e7ba836-4785-442d-b4bf-128123404553","401":"3b5e26f7-35ef-43bf-9f7a-ee0e91a3abac","403":"4e4134b1-88c1-4514-ae53-37e2c5ef97ff","500":"6e4312fc-c245-451e-9094-c45697b6635d"},"method":"get","type":"path","servers":["53704bd6-eab2-469b-8f22-00026b9bd3c3"],"security":["184f5505-5bc1-478d-aee9-f41f36c72d98"],"path":"/api/alerts/for-run/{runId}","baseUrlOptions":["https://app.cotool.ai"],"title":"Get alert for run","codeSamples":[{"label":"cURL","lang":"shell","source":"curl -X GET \"https://app.cotool.ai/api/alerts/for-run/:runId\" \\\n -H \"Authorization: Bearer YOUR_API_KEY\" \\\n -H \"Content-Type: application/json\""}],"requestExampleLanguages":["bash","python","javascript","java","go"],"requiredOnlyExamples":false,"requestExampleType":"codeSamples","responseExampleType":"generated"},"dependencies":{"parameters":{"2404ee01-266a-4237-8789-7c68898dab43":{"in":"path","name":"runId","description":"Run UUID (chats.id) to resolve a linked alert for","schema":{"type":"string","format":"uuid","description":"Run UUID (chats.id) to resolve a linked alert for","isRequired":true,"uniqueKey":"","typeLabel":"string\u003cuuid>"},"required":true}},"responses":{"676ad672-5b28-4879-a728-976ba815c745":{"description":"Successful response","content":{"application/json":{"schema":{"type":"object","properties":{"alert":{"oneOf":[{"type":"object","properties":{"id":{"type":"string","format":"uuid","description":"Internal alert identifier","isRequired":true,"uniqueKey":"alert.oneOf.0.id","typeLabel":"string\u003cuuid>"},"displayId":{"type":"string","pattern":"^COT-\\d+$","description":"Human-readable alert identifier","isRequired":true,"uniqueKey":"alert.oneOf.0.displayId","typeLabel":"string"},"organizationId":{"type":"string","format":"uuid","description":"Organization that owns the alert","isRequired":true,"uniqueKey":"alert.oneOf.0.organizationId","typeLabel":"string\u003cuuid>"},"organizationName":{"type":"string","minLength":1,"description":"URL-safe organization name used in durable alert paths","isRequired":true,"uniqueKey":"alert.oneOf.0.organizationName","typeLabel":"string"},"title":{"type":"string","minLength":1,"description":"Human-readable alert title","isRequired":true,"uniqueKey":"alert.oneOf.0.title","typeLabel":"string"},"description":{"oneOf":[{"type":"string","description":"Markdown summary or details for the alert","isRequired":true,"uniqueKey":"alert.oneOf.0.description.oneOf.0","typeLabel":"string"},{"type":"null","description":"Markdown summary or details for the alert","isRequired":true,"uniqueKey":"alert.oneOf.0.description.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.description","typeLabel":"string | null"},"severity":{"oneOf":[{"type":"string","enum":["low","medium","high","critical",null],"description":"Alert severity when known","isRequired":true,"uniqueKey":"alert.oneOf.0.severity.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["low","medium","high","critical",null],"description":"Alert severity when known","isRequired":true,"uniqueKey":"alert.oneOf.0.severity.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.severity","typeLabel":"enum\u003cstring> | null"},"status":{"type":"string","enum":["open","in_progress","escalated","closed_true_positive","closed_false_positive","closed_true_positive_benign","dismissed","duplicate","expired"],"description":"Lifecycle status for a first-class alert. Terminal closed statuses include final disposition. Dismissed, duplicate, and expired alerts are archived and hidden from alert lists.","isRequired":true,"uniqueKey":"alert.oneOf.0.status","typeLabel":"enum\u003cstring>"},"duplicateCount":{"type":"integer","minimum":0,"description":"Number of alerts archived as duplicates of this alert. A high count means the same finding keeps recurring.","isRequired":true,"uniqueKey":"alert.oneOf.0.duplicateCount","typeLabel":"integer"},"source":{"type":"object","properties":{"category":{"type":"string","enum":["detection","trigger","hunt","api","agent"],"description":"Broad alert source category. Hunt covers threat-intel exposure alerts minted by the Hunt surface; api covers alerts submitted through an API source; agent covers alerts deliberately created by an agent.","isRequired":true,"uniqueKey":"alert.oneOf.0.source.category","typeLabel":"enum\u003cstring>"},"name":{"type":"string","enum":["cotool_detection","cotool_code","cotool_signal","hunt","hunt_v2","api","agent","jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon"],"description":"Filter-oriented alert source name. Trigger-created alerts use the trigger type.","isRequired":true,"uniqueKey":"alert.oneOf.0.source.name","typeLabel":"enum\u003cstring>"},"triggerType":{"oneOf":[{"type":"string","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"Trigger source when category is trigger","isRequired":true,"uniqueKey":"alert.oneOf.0.source.triggerType.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"Trigger source when category is trigger","isRequired":true,"uniqueKey":"alert.oneOf.0.source.triggerType.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.source.triggerType","typeLabel":"enum\u003cstring> | null"}},"required":["category","name","triggerType"],"description":"Filter-oriented source attribution for an alert.","isRequired":true,"uniqueKey":"alert.oneOf.0.source","typeLabel":"object"},"detection":{"oneOf":[{"type":"object","properties":{"id":{"oneOf":[{"type":"string","format":"uuid","description":"Cotool detection identifier when known","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.id.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Cotool detection identifier when known","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.id.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.id","typeLabel":"string\u003cuuid> | null"},"agentId":{"oneOf":[{"type":"string","format":"uuid","description":"Cotool detection agent identifier when known","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.agentId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Cotool detection agent identifier when known","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.agentId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.agentId","typeLabel":"string\u003cuuid> | null"},"ruleId":{"oneOf":[{"type":"string","format":"uuid","description":"Platform detection rule identifier (detection_rules inventory) when an external detection was matched to a synced rule","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.ruleId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Platform detection rule identifier (detection_rules inventory) when an external detection was matched to a synced rule","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.ruleId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.ruleId","typeLabel":"string\u003cuuid> | null"},"name":{"type":"string","minLength":1,"description":"Detection display name","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.name","typeLabel":"string"},"kind":{"type":"string","enum":["cotool","cotool_code","cotool_signal","external"],"description":"Whether this detection attribution is internal or extracted. `cotool_signal` alerts were promoted from a signal; their name is the signal type, and `codeDetectionId` is the streaming detection that emitted it.","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0.kind","typeLabel":"enum\u003cstring>"},"codeDetectionId":{"oneOf":[{"type":"string","format":"uuid","description":"Code detection identifier when this alert came from Code Mode","uniqueKey":"alert.oneOf.0.detection.oneOf.0.codeDetectionId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Code detection identifier when this alert came from Code Mode","uniqueKey":"alert.oneOf.0.detection.oneOf.0.codeDetectionId.oneOf.1","typeLabel":"null"}],"uniqueKey":"alert.oneOf.0.detection.oneOf.0.codeDetectionId","typeLabel":"string\u003cuuid> | null"},"origin":{"oneOf":[{"type":"string","enum":["user","orchestrator",null],"description":"Origin of the Cotool detection agent when known. `orchestrator` marks a detection created by the retired Auto Detect feature.","uniqueKey":"alert.oneOf.0.detection.oneOf.0.origin.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["user","orchestrator",null],"description":"Origin of the Cotool detection agent when known. `orchestrator` marks a detection created by the retired Auto Detect feature.","uniqueKey":"alert.oneOf.0.detection.oneOf.0.origin.oneOf.1","typeLabel":"null"}],"uniqueKey":"alert.oneOf.0.detection.oneOf.0.origin","typeLabel":"enum\u003cstring> | null"}},"required":["id","agentId","ruleId","name","kind"],"description":"Detection attribution for the alert, when known.","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.0","typeLabel":"object"},{"type":"null","properties":{"id":{"oneOf":[{"type":"string","format":"uuid","description":"Cotool detection identifier when known"},{"type":"null","format":"uuid","description":"Cotool detection identifier when known"}]},"agentId":{"oneOf":[{"type":"string","format":"uuid","description":"Cotool detection agent identifier when known"},{"type":"null","format":"uuid","description":"Cotool detection agent identifier when known"}]},"codeDetectionId":{"oneOf":[{"type":"string","format":"uuid","description":"Code detection identifier when this alert came from Code Mode"},{"type":"null","format":"uuid","description":"Code detection identifier when this alert came from Code Mode"}]},"ruleId":{"oneOf":[{"type":"string","format":"uuid","description":"Platform detection rule identifier (detection_rules inventory) when an external detection was matched to a synced rule"},{"type":"null","format":"uuid","description":"Platform detection rule identifier (detection_rules inventory) when an external detection was matched to a synced rule"}]},"name":{"type":"string","minLength":1,"description":"Detection display name"},"kind":{"type":"string","enum":["cotool","cotool_code","cotool_signal","external"],"description":"Whether this detection attribution is internal or extracted. `cotool_signal` alerts were promoted from a signal; their name is the signal type, and `codeDetectionId` is the streaming detection that emitted it."},"origin":{"oneOf":[{"type":"string","enum":["user","orchestrator",null],"description":"Origin of the Cotool detection agent when known. `orchestrator` marks a detection created by the retired Auto Detect feature."},{"type":"null","enum":["user","orchestrator",null],"description":"Origin of the Cotool detection agent when known. `orchestrator` marks a detection created by the retired Auto Detect feature."}]}},"required":["id","agentId","ruleId","name","kind"],"description":"Detection attribution for the alert, when known.","isRequired":true,"uniqueKey":"alert.oneOf.0.detection.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.detection","typeLabel":"object | null"},"createdBy":{"type":"string","enum":["agent","trigger","system"],"description":"Actor class that created the alert.","isRequired":true,"uniqueKey":"alert.oneOf.0.createdBy","typeLabel":"enum\u003cstring>"},"originAgentId":{"oneOf":[{"type":"string","format":"uuid","description":"Agent that produced or owns the source flow","isRequired":true,"uniqueKey":"alert.oneOf.0.originAgentId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Agent that produced or owns the source flow","isRequired":true,"uniqueKey":"alert.oneOf.0.originAgentId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.originAgentId","typeLabel":"string\u003cuuid> | null"},"originTriggerId":{"oneOf":[{"type":"string","format":"uuid","description":"Trigger that created this alert, when source is an external trigger","isRequired":true,"uniqueKey":"alert.oneOf.0.originTriggerId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Trigger that created this alert, when source is an external trigger","isRequired":true,"uniqueKey":"alert.oneOf.0.originTriggerId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.originTriggerId","typeLabel":"string\u003cuuid> | null"},"originRunId":{"oneOf":[{"type":"string","format":"uuid","description":"Run that minted the alert, stored as chats.id","isRequired":true,"uniqueKey":"alert.oneOf.0.originRunId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Run that minted the alert, stored as chats.id","isRequired":true,"uniqueKey":"alert.oneOf.0.originRunId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.originRunId","typeLabel":"string\u003cuuid> | null"},"originDetectionHitId":{"oneOf":[{"type":"string","format":"uuid","description":"Detection hit that produced this alert, when applicable","isRequired":true,"uniqueKey":"alert.oneOf.0.originDetectionHitId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Detection hit that produced this alert, when applicable","isRequired":true,"uniqueKey":"alert.oneOf.0.originDetectionHitId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.originDetectionHitId","typeLabel":"string\u003cuuid> | null"},"codeDetectionId":{"oneOf":[{"type":"string","format":"uuid","description":"Code detection that produced this alert, when applicable","isRequired":true,"uniqueKey":"alert.oneOf.0.codeDetectionId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Code detection that produced this alert, when applicable","isRequired":true,"uniqueKey":"alert.oneOf.0.codeDetectionId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.codeDetectionId","typeLabel":"string\u003cuuid> | null"},"originCodeDetectionHitId":{"oneOf":[{"type":"string","format":"uuid","description":"Code-detection hit that produced this alert, when applicable","isRequired":true,"uniqueKey":"alert.oneOf.0.originCodeDetectionHitId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Code-detection hit that produced this alert, when applicable","isRequired":true,"uniqueKey":"alert.oneOf.0.originCodeDetectionHitId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.originCodeDetectionHitId","typeLabel":"string\u003cuuid> | null"},"externalProvider":{"oneOf":[{"type":"string","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"External trigger provider such as jira, linear, email, or webhook","isRequired":true,"uniqueKey":"alert.oneOf.0.externalProvider.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"External trigger provider such as jira, linear, email, or webhook","isRequired":true,"uniqueKey":"alert.oneOf.0.externalProvider.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.externalProvider","typeLabel":"enum\u003cstring> | null"},"externalRef":{"oneOf":[{"type":"string","description":"Provider-native event, ticket, message, or alert identifier","isRequired":true,"uniqueKey":"alert.oneOf.0.externalRef.oneOf.0","typeLabel":"string"},{"type":"null","description":"Provider-native event, ticket, message, or alert identifier","isRequired":true,"uniqueKey":"alert.oneOf.0.externalRef.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.externalRef","typeLabel":"string | null"},"externalUrl":{"oneOf":[{"type":"string","format":"uri","description":"Provider-native URL for the originating object","isRequired":true,"uniqueKey":"alert.oneOf.0.externalUrl.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Provider-native URL for the originating object","isRequired":true,"uniqueKey":"alert.oneOf.0.externalUrl.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.externalUrl","typeLabel":"string\u003curi> | null"},"assignedAgentId":{"oneOf":[{"type":"string","format":"uuid","description":"Response agent currently assigned to triage this alert","isRequired":true,"uniqueKey":"alert.oneOf.0.assignedAgentId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Response agent currently assigned to triage this alert","isRequired":true,"uniqueKey":"alert.oneOf.0.assignedAgentId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.assignedAgentId","typeLabel":"string\u003cuuid> | null"},"triageRunId":{"oneOf":[{"type":"string","format":"uuid","description":"Latest response-agent triage run for this alert, stored as chats.id","isRequired":true,"uniqueKey":"alert.oneOf.0.triageRunId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Latest response-agent triage run for this alert, stored as chats.id","isRequired":true,"uniqueKey":"alert.oneOf.0.triageRunId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.triageRunId","typeLabel":"string\u003cuuid> | null"},"dedupeKey":{"oneOf":[{"type":"string","description":"Stable key used for idempotent alert creation","isRequired":true,"uniqueKey":"alert.oneOf.0.dedupeKey.oneOf.0","typeLabel":"string"},{"type":"null","description":"Stable key used for idempotent alert creation","isRequired":true,"uniqueKey":"alert.oneOf.0.dedupeKey.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.dedupeKey","typeLabel":"string | null"},"createdAt":{"type":"string","description":"ISO timestamp when the alert was created","isRequired":true,"uniqueKey":"alert.oneOf.0.createdAt","typeLabel":"string"},"updatedAt":{"type":"string","description":"ISO timestamp when the alert was last updated","isRequired":true,"uniqueKey":"alert.oneOf.0.updatedAt","typeLabel":"string"},"firstTriagedAt":{"oneOf":[{"type":"string","description":"ISO timestamp when triage first started","isRequired":true,"uniqueKey":"alert.oneOf.0.firstTriagedAt.oneOf.0","typeLabel":"string"},{"type":"null","description":"ISO timestamp when triage first started","isRequired":true,"uniqueKey":"alert.oneOf.0.firstTriagedAt.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.firstTriagedAt","typeLabel":"string | null"},"resolvedAt":{"oneOf":[{"type":"string","description":"ISO timestamp when the alert reached a terminal closed status","isRequired":true,"uniqueKey":"alert.oneOf.0.resolvedAt.oneOf.0","typeLabel":"string"},{"type":"null","description":"ISO timestamp when the alert reached a terminal closed status","isRequired":true,"uniqueKey":"alert.oneOf.0.resolvedAt.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.resolvedAt","typeLabel":"string | null"},"derivedDisposition":{"oneOf":[{"type":"string","enum":["true_positive","false_positive","true_positive_benign",null],"description":"Disposition derived from terminal alert status","isRequired":true,"uniqueKey":"alert.oneOf.0.derivedDisposition.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["true_positive","false_positive","true_positive_benign",null],"description":"Disposition derived from terminal alert status","isRequired":true,"uniqueKey":"alert.oneOf.0.derivedDisposition.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.derivedDisposition","typeLabel":"enum\u003cstring> | null"},"originAgentName":{"oneOf":[{"type":"string","description":"Display name for the origin agent, when available","isRequired":true,"uniqueKey":"alert.oneOf.0.originAgentName.oneOf.0","typeLabel":"string"},{"type":"null","description":"Display name for the origin agent, when available","isRequired":true,"uniqueKey":"alert.oneOf.0.originAgentName.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.originAgentName","typeLabel":"string | null"},"assignedAgentName":{"oneOf":[{"type":"string","description":"Display name for the assigned triage agent, when available","isRequired":true,"uniqueKey":"alert.oneOf.0.assignedAgentName.oneOf.0","typeLabel":"string"},{"type":"null","description":"Display name for the assigned triage agent, when available","isRequired":true,"uniqueKey":"alert.oneOf.0.assignedAgentName.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.assignedAgentName","typeLabel":"string | null"},"triggerSource":{"oneOf":[{"type":"string","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"Trigger source for external-trigger alerts","isRequired":true,"uniqueKey":"alert.oneOf.0.triggerSource.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"Trigger source for external-trigger alerts","isRequired":true,"uniqueKey":"alert.oneOf.0.triggerSource.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert.oneOf.0.triggerSource","typeLabel":"enum\u003cstring> | null"},"duplicateOfAlertId":{"oneOf":[{"type":"string","format":"uuid","description":"Canonical alert this alert duplicates, when status is duplicate","uniqueKey":"alert.oneOf.0.duplicateOfAlertId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"Canonical alert this alert duplicates, when status is duplicate","uniqueKey":"alert.oneOf.0.duplicateOfAlertId.oneOf.1","typeLabel":"null"}],"uniqueKey":"alert.oneOf.0.duplicateOfAlertId","typeLabel":"string\u003cuuid> | null"},"resolvedByType":{"oneOf":[{"type":"string","enum":["human","agent","system",null],"description":"Actor class that moved the alert to its terminal status. Null while the alert is not closed.","uniqueKey":"alert.oneOf.0.resolvedByType.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["human","agent","system",null],"description":"Actor class that moved the alert to its terminal status. Null while the alert is not closed.","uniqueKey":"alert.oneOf.0.resolvedByType.oneOf.1","typeLabel":"null"}],"uniqueKey":"alert.oneOf.0.resolvedByType","typeLabel":"enum\u003cstring> | null"},"resolvedByUserId":{"oneOf":[{"type":"string","format":"uuid","description":"User who closed the alert, when a human closed it","uniqueKey":"alert.oneOf.0.resolvedByUserId.oneOf.0","typeLabel":"string\u003cuuid>"},{"type":"null","format":"uuid","description":"User who closed the alert, when a human closed it","uniqueKey":"alert.oneOf.0.resolvedByUserId.oneOf.1","typeLabel":"null"}],"uniqueKey":"alert.oneOf.0.resolvedByUserId","typeLabel":"string\u003cuuid> | null"},"resolvedByAgentName":{"oneOf":[{"type":"string","description":"Display name of the agent that closed the alert, when an agent closed it","uniqueKey":"alert.oneOf.0.resolvedByAgentName.oneOf.0","typeLabel":"string"},{"type":"null","description":"Display name of the agent that closed the alert, when an agent closed it","uniqueKey":"alert.oneOf.0.resolvedByAgentName.oneOf.1","typeLabel":"null"}],"uniqueKey":"alert.oneOf.0.resolvedByAgentName","typeLabel":"string | null"},"resolvedReason":{"oneOf":[{"type":"string","description":"Reason recorded with the closing status change, when provided","uniqueKey":"alert.oneOf.0.resolvedReason.oneOf.0","typeLabel":"string"},{"type":"null","description":"Reason recorded with the closing status change, when provided","uniqueKey":"alert.oneOf.0.resolvedReason.oneOf.1","typeLabel":"null"}],"uniqueKey":"alert.oneOf.0.resolvedReason","typeLabel":"string | null"},"huntQualifiedBy":{"oneOf":[{"type":"string","enum":["compromise_signal_found","exposure_found",null],"description":"Qualifying condition that opened this Hunt alert. Null for non-hunt alerts.","uniqueKey":"alert.oneOf.0.huntQualifiedBy.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["compromise_signal_found","exposure_found",null],"description":"Qualifying condition that opened this Hunt alert. Null for non-hunt alerts.","uniqueKey":"alert.oneOf.0.huntQualifiedBy.oneOf.1","typeLabel":"null"}],"uniqueKey":"alert.oneOf.0.huntQualifiedBy","typeLabel":"enum\u003cstring> | null"},"alternativeExplanationCount":{"type":"integer","minimum":0,"description":"Number of alternative explanations offered on the latest escalation. Only meaningful while the alert is escalated.","uniqueKey":"alert.oneOf.0.alternativeExplanationCount","typeLabel":"integer"}},"required":["id","displayId","organizationId","organizationName","title","description","severity","status","duplicateCount","source","detection","createdBy","originAgentId","originTriggerId","originRunId","originDetectionHitId","codeDetectionId","originCodeDetectionHitId","externalProvider","externalRef","externalUrl","assignedAgentId","triageRunId","dedupeKey","createdAt","updatedAt","firstTriagedAt","resolvedAt","derivedDisposition","originAgentName","assignedAgentName","triggerSource"],"description":"Alert this run triaged or created, or null when the run is not linked to an alert","isRequired":true,"uniqueKey":"alert.oneOf.0","typeLabel":"object"},{"type":"null","properties":{"id":{"type":"string","format":"uuid","description":"Internal alert identifier"},"displayId":{"type":"string","pattern":"^COT-\\d+$","description":"Human-readable alert identifier"},"organizationId":{"type":"string","format":"uuid","description":"Organization that owns the alert"},"organizationName":{"type":"string","minLength":1,"description":"URL-safe organization name used in durable alert paths"},"title":{"type":"string","minLength":1,"description":"Human-readable alert title"},"description":{"oneOf":[{"type":"string","description":"Markdown summary or details for the alert"},{"type":"null","description":"Markdown summary or details for the alert"}]},"severity":{"oneOf":[{"type":"string","enum":["low","medium","high","critical",null],"description":"Alert severity when known"},{"type":"null","enum":["low","medium","high","critical",null],"description":"Alert severity when known"}]},"status":{"type":"string","enum":["open","in_progress","escalated","closed_true_positive","closed_false_positive","closed_true_positive_benign","dismissed","duplicate","expired"],"description":"Lifecycle status for a first-class alert. Terminal closed statuses include final disposition. Dismissed, duplicate, and expired alerts are archived and hidden from alert lists."},"duplicateOfAlertId":{"oneOf":[{"type":"string","format":"uuid","description":"Canonical alert this alert duplicates, when status is duplicate"},{"type":"null","format":"uuid","description":"Canonical alert this alert duplicates, when status is duplicate"}]},"duplicateCount":{"type":"integer","minimum":0,"description":"Number of alerts archived as duplicates of this alert. A high count means the same finding keeps recurring."},"source":{"type":"object","properties":{"category":{"type":"string","enum":["detection","trigger","hunt","api","agent"],"description":"Broad alert source category. Hunt covers threat-intel exposure alerts minted by the Hunt surface; api covers alerts submitted through an API source; agent covers alerts deliberately created by an agent."},"name":{"type":"string","enum":["cotool_detection","cotool_code","cotool_signal","hunt","hunt_v2","api","agent","jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon"],"description":"Filter-oriented alert source name. Trigger-created alerts use the trigger type."},"triggerType":{"oneOf":[{"type":"string","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"Trigger source when category is trigger"},{"type":"null","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"Trigger source when category is trigger"}]}},"required":["category","name","triggerType"],"description":"Filter-oriented source attribution for an alert."},"detection":{"oneOf":[{"type":"object","properties":{"id":{"oneOf":[{"type":"string","format":"uuid","description":"Cotool detection identifier when known"},{"type":"null","format":"uuid","description":"Cotool detection identifier when known"}]},"agentId":{"oneOf":[{"type":"string","format":"uuid","description":"Cotool detection agent identifier when known"},{"type":"null","format":"uuid","description":"Cotool detection agent identifier when known"}]},"codeDetectionId":{"oneOf":[{"type":"string","format":"uuid","description":"Code detection identifier when this alert came from Code Mode"},{"type":"null","format":"uuid","description":"Code detection identifier when this alert came from Code Mode"}]},"ruleId":{"oneOf":[{"type":"string","format":"uuid","description":"Platform detection rule identifier (detection_rules inventory) when an external detection was matched to a synced rule"},{"type":"null","format":"uuid","description":"Platform detection rule identifier (detection_rules inventory) when an external detection was matched to a synced rule"}]},"name":{"type":"string","minLength":1,"description":"Detection display name"},"kind":{"type":"string","enum":["cotool","cotool_code","cotool_signal","external"],"description":"Whether this detection attribution is internal or extracted. `cotool_signal` alerts were promoted from a signal; their name is the signal type, and `codeDetectionId` is the streaming detection that emitted it."},"origin":{"oneOf":[{"type":"string","enum":["user","orchestrator",null],"description":"Origin of the Cotool detection agent when known. `orchestrator` marks a detection created by the retired Auto Detect feature."},{"type":"null","enum":["user","orchestrator",null],"description":"Origin of the Cotool detection agent when known. `orchestrator` marks a detection created by the retired Auto Detect feature."}]}},"required":["id","agentId","ruleId","name","kind"],"description":"Detection attribution for the alert, when known."},{"type":"null","properties":{"id":{"oneOf":[{"type":"string","format":"uuid","description":"Cotool detection identifier when known"},{"type":"null","format":"uuid","description":"Cotool detection identifier when known"}]},"agentId":{"oneOf":[{"type":"string","format":"uuid","description":"Cotool detection agent identifier when known"},{"type":"null","format":"uuid","description":"Cotool detection agent identifier when known"}]},"codeDetectionId":{"oneOf":[{"type":"string","format":"uuid","description":"Code detection identifier when this alert came from Code Mode"},{"type":"null","format":"uuid","description":"Code detection identifier when this alert came from Code Mode"}]},"ruleId":{"oneOf":[{"type":"string","format":"uuid","description":"Platform detection rule identifier (detection_rules inventory) when an external detection was matched to a synced rule"},{"type":"null","format":"uuid","description":"Platform detection rule identifier (detection_rules inventory) when an external detection was matched to a synced rule"}]},"name":{"type":"string","minLength":1,"description":"Detection display name"},"kind":{"type":"string","enum":["cotool","cotool_code","cotool_signal","external"],"description":"Whether this detection attribution is internal or extracted. `cotool_signal` alerts were promoted from a signal; their name is the signal type, and `codeDetectionId` is the streaming detection that emitted it."},"origin":{"oneOf":[{"type":"string","enum":["user","orchestrator",null],"description":"Origin of the Cotool detection agent when known. `orchestrator` marks a detection created by the retired Auto Detect feature."},{"type":"null","enum":["user","orchestrator",null],"description":"Origin of the Cotool detection agent when known. `orchestrator` marks a detection created by the retired Auto Detect feature."}]}},"required":["id","agentId","ruleId","name","kind"],"description":"Detection attribution for the alert, when known."}]},"createdBy":{"type":"string","enum":["agent","trigger","system"],"description":"Actor class that created the alert."},"originAgentId":{"oneOf":[{"type":"string","format":"uuid","description":"Agent that produced or owns the source flow"},{"type":"null","format":"uuid","description":"Agent that produced or owns the source flow"}]},"originTriggerId":{"oneOf":[{"type":"string","format":"uuid","description":"Trigger that created this alert, when source is an external trigger"},{"type":"null","format":"uuid","description":"Trigger that created this alert, when source is an external trigger"}]},"originRunId":{"oneOf":[{"type":"string","format":"uuid","description":"Run that minted the alert, stored as chats.id"},{"type":"null","format":"uuid","description":"Run that minted the alert, stored as chats.id"}]},"originDetectionHitId":{"oneOf":[{"type":"string","format":"uuid","description":"Detection hit that produced this alert, when applicable"},{"type":"null","format":"uuid","description":"Detection hit that produced this alert, when applicable"}]},"codeDetectionId":{"oneOf":[{"type":"string","format":"uuid","description":"Code detection that produced this alert, when applicable"},{"type":"null","format":"uuid","description":"Code detection that produced this alert, when applicable"}]},"originCodeDetectionHitId":{"oneOf":[{"type":"string","format":"uuid","description":"Code-detection hit that produced this alert, when applicable"},{"type":"null","format":"uuid","description":"Code-detection hit that produced this alert, when applicable"}]},"externalProvider":{"oneOf":[{"type":"string","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"External trigger provider such as jira, linear, email, or webhook"},{"type":"null","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"External trigger provider such as jira, linear, email, or webhook"}]},"externalRef":{"oneOf":[{"type":"string","description":"Provider-native event, ticket, message, or alert identifier"},{"type":"null","description":"Provider-native event, ticket, message, or alert identifier"}]},"externalUrl":{"oneOf":[{"type":"string","format":"uri","description":"Provider-native URL for the originating object"},{"type":"null","format":"uri","description":"Provider-native URL for the originating object"}]},"assignedAgentId":{"oneOf":[{"type":"string","format":"uuid","description":"Response agent currently assigned to triage this alert"},{"type":"null","format":"uuid","description":"Response agent currently assigned to triage this alert"}]},"triageRunId":{"oneOf":[{"type":"string","format":"uuid","description":"Latest response-agent triage run for this alert, stored as chats.id"},{"type":"null","format":"uuid","description":"Latest response-agent triage run for this alert, stored as chats.id"}]},"dedupeKey":{"oneOf":[{"type":"string","description":"Stable key used for idempotent alert creation"},{"type":"null","description":"Stable key used for idempotent alert creation"}]},"createdAt":{"type":"string","description":"ISO timestamp when the alert was created"},"updatedAt":{"type":"string","description":"ISO timestamp when the alert was last updated"},"firstTriagedAt":{"oneOf":[{"type":"string","description":"ISO timestamp when triage first started"},{"type":"null","description":"ISO timestamp when triage first started"}]},"resolvedAt":{"oneOf":[{"type":"string","description":"ISO timestamp when the alert reached a terminal closed status"},{"type":"null","description":"ISO timestamp when the alert reached a terminal closed status"}]},"derivedDisposition":{"oneOf":[{"type":"string","enum":["true_positive","false_positive","true_positive_benign",null],"description":"Disposition derived from terminal alert status"},{"type":"null","enum":["true_positive","false_positive","true_positive_benign",null],"description":"Disposition derived from terminal alert status"}]},"originAgentName":{"oneOf":[{"type":"string","description":"Display name for the origin agent, when available"},{"type":"null","description":"Display name for the origin agent, when available"}]},"assignedAgentName":{"oneOf":[{"type":"string","description":"Display name for the assigned triage agent, when available"},{"type":"null","description":"Display name for the assigned triage agent, when available"}]},"triggerSource":{"oneOf":[{"type":"string","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"Trigger source for external-trigger alerts"},{"type":"null","enum":["jira","jira-automation","slack","linear","cron","webhook","email","bugcrowd","hackerone","zscaler","darktrace","seon",null],"description":"Trigger source for external-trigger alerts"}]},"resolvedByType":{"oneOf":[{"type":"string","enum":["human","agent","system",null],"description":"Actor class that moved the alert to its terminal status. Null while the alert is not closed."},{"type":"null","enum":["human","agent","system",null],"description":"Actor class that moved the alert to its terminal status. Null while the alert is not closed."}]},"resolvedByUserId":{"oneOf":[{"type":"string","format":"uuid","description":"User who closed the alert, when a human closed it"},{"type":"null","format":"uuid","description":"User who closed the alert, when a human closed it"}]},"resolvedByAgentName":{"oneOf":[{"type":"string","description":"Display name of the agent that closed the alert, when an agent closed it"},{"type":"null","description":"Display name of the agent that closed the alert, when an agent closed it"}]},"resolvedReason":{"oneOf":[{"type":"string","description":"Reason recorded with the closing status change, when provided"},{"type":"null","description":"Reason recorded with the closing status change, when provided"}]},"huntQualifiedBy":{"oneOf":[{"type":"string","enum":["compromise_signal_found","exposure_found",null],"description":"Qualifying condition that opened this Hunt alert. Null for non-hunt alerts."},{"type":"null","enum":["compromise_signal_found","exposure_found",null],"description":"Qualifying condition that opened this Hunt alert. Null for non-hunt alerts."}]},"alternativeExplanationCount":{"type":"integer","minimum":0,"description":"Number of alternative explanations offered on the latest escalation. Only meaningful while the alert is escalated."}},"required":["id","displayId","organizationId","organizationName","title","description","severity","status","duplicateCount","source","detection","createdBy","originAgentId","originTriggerId","originRunId","originDetectionHitId","codeDetectionId","originCodeDetectionHitId","externalProvider","externalRef","externalUrl","assignedAgentId","triageRunId","dedupeKey","createdAt","updatedAt","firstTriagedAt","resolvedAt","derivedDisposition","originAgentName","assignedAgentName","triggerSource"],"description":"Alert this run triaged or created, or null when the run is not linked to an alert","isRequired":true,"uniqueKey":"alert.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"alert","typeLabel":"object | null"}},"required":["alert"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"alert":{"id":"3c90c3cc-0d44-4b50-8888-8dd25736052a","displayId":"\u003cstring>","organizationId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","organizationName":"\u003cstring>","title":"\u003cstring>","description":"\u003cstring>","severity":"low","status":"open","duplicateCount":1,"source":{"category":"detection","name":"cotool_detection","triggerType":"jira"},"detection":{"id":"3c90c3cc-0d44-4b50-8888-8dd25736052a","agentId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","ruleId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","name":"\u003cstring>","kind":"cotool","codeDetectionId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","origin":"user"},"createdBy":"agent","originAgentId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","originTriggerId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","originRunId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","originDetectionHitId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","codeDetectionId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","originCodeDetectionHitId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","externalProvider":"jira","externalRef":"\u003cstring>","externalUrl":"\u003cstring>","assignedAgentId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","triageRunId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","dedupeKey":"\u003cstring>","createdAt":"\u003cstring>","updatedAt":"\u003cstring>","firstTriagedAt":"\u003cstring>","resolvedAt":"\u003cstring>","derivedDisposition":"true_positive","originAgentName":"\u003cstring>","assignedAgentName":"\u003cstring>","triggerSource":"jira","duplicateOfAlertId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","resolvedByType":"human","resolvedByUserId":"3c90c3cc-0d44-4b50-8888-8dd25736052a","resolvedByAgentName":"\u003cstring>","resolvedReason":"\u003cstring>","huntQualifiedBy":"compromise_signal_found","alternativeExplanationCount":1}}}},"exampleType":"generated"}},"exampleType":"generated"},"6e7ba836-4785-442d-b4bf-128123404553":{"description":"Bad request — input validation failed or the request was malformed","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message describing what went wrong","isRequired":true,"uniqueKey":"error","typeLabel":"string"},"issues":{"type":"array","description":"Detailed validation issues, present when request or response schema validation fails","items":{"type":"object","additionalProperties":true,"uniqueKey":"issues.items.[INDEX]","typeLabel":"object"},"uniqueKey":"issues","typeLabel":"object[]"}},"required":["error"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":"\u003cstring>","issues":[{}]}}},"exampleType":"generated"}},"exampleType":"generated"},"3b5e26f7-35ef-43bf-9f7a-ee0e91a3abac":{"description":"Unauthorized — missing or invalid API key / session","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message describing what went wrong","isRequired":true,"uniqueKey":"error","typeLabel":"string"}},"required":["error"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":"\u003cstring>"}}},"exampleType":"generated"}},"exampleType":"generated"},"4e4134b1-88c1-4514-ae53-37e2c5ef97ff":{"description":"Forbidden — the authenticated user lacks the required permissions","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message describing what went wrong","isRequired":true,"uniqueKey":"error","typeLabel":"string"},"missingPerms":{"type":"array","description":"Permissions the authenticated user is missing for this operation","items":{"type":"string","uniqueKey":"missingPerms.items.[INDEX]","typeLabel":"string"},"uniqueKey":"missingPerms","typeLabel":"string[]"}},"required":["error"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":"\u003cstring>","missingPerms":["\u003cstring>"]}}},"exampleType":"generated"}},"exampleType":"generated"},"6e4312fc-c245-451e-9094-c45697b6635d":{"description":"Internal server error","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message describing what went wrong","isRequired":true,"uniqueKey":"error","typeLabel":"string"}},"required":["error"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":"\u003cstring>"}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"184f5505-5bc1-478d-aee9-f41f36c72d98":{"ApiKeyAuth":{"type":"http","scheme":"bearer","bearerFormat":"API Key","description":"API Key authentication for programmatic access. Include your API key in the Authorization header as: `Bearer your_api_key_here`","scopes":[],"schemeName":"ApiKeyAuth"}}},"servers":{"53704bd6-eab2-469b-8f22-00026b9bd3c3":{"url":"https://app.cotool.ai","description":"Production server"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"http","scheme":"bearer","bearerFormat":"API Key","description":"API Key authentication for programmatic access. Include your API key in the Authorization header as: `Bearer your_api_key_here`","scopes":[],"schemeName":"ApiKeyAuth"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"API Key authentication for programmatic access. Include your API key in the Authorization header as: `Bearer your_api_key_here`","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"ApiKeyAuth","name":"Authorization"}],"title":"ApiKeyAuth"}]},"originalFileLocation":"https://app.cotool.ai/api/docs/openapi.json"},"subdomain":"cotool-bcb49c92","siteName":"Cotool Documentation","title":"Get alert for run - Cotool Documentation","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-11-09T16:06:36.545Z","originalFileLocation":"api-reference/alerts/get-alert-for-run.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Resolve the alert a run triaged or created, used to link an agent run back to its alert.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Cotool Documentation\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Get alert for run - Cotool Documentation\">\u003cmeta data-mint-head property=\"og:description\" content=\"Resolve the alert a run triaged or created, used to link an agent run back to its alert.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Cotool Documentation\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://cotool-bcb49c92.mintlify.site/_mintlify/api/og/v2?division=Alerts\u0026amp;title=Get+alert+for+run\u0026amp;description=Resolve+the+alert+a+run+triaged+or+created%2C+used+to+link+an+agent+run+back+to+its+alert.\u0026amp;theme=9cf48588ea89a0ad039b77ef\u0026amp;signature=b0c8f47e6958f9ea7e55fdb480ffc3b35b3a7908dd6b5ef4c03f1322761bb39c\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Get alert for run - Cotool Documentation\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Resolve the alert a run triaged or created, used to link an agent run back to its alert.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://cotool-bcb49c92.mintlify.site/_mintlify/api/og/v2?division=Alerts\u0026amp;title=Get+alert+for+run\u0026amp;description=Resolve+the+alert+a+run+triaged+or+created%2C+used+to+link+an+agent+run+back+to+its+alert.\u0026amp;theme=9cf48588ea89a0ad039b77ef\u0026amp;signature=b0c8f47e6958f9ea7e55fdb480ffc3b35b3a7908dd6b5ef4c03f1322761bb39c\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/cotool-bcb49c92/LJnfYfYlhELWbHCE/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Cotool Documentation\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#A9D5F5\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/alerts/get-alert-for-run.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.cotool.ai/#organization\",\"name\":\"Cotool Documentation\",\"url\":\"https://docs.cotool.ai\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/cotool-bcb49c92/2D7q2Y6FoJjh0OqV/logo/light.svg?fit=max\u0026auto=format\u0026n=2D7q2Y6FoJjh0OqV\u0026q=85\u0026s=ed5fa6ba5fadea78cb6d1341380b9873\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.cotool.ai#website\",\"name\":\"Cotool Documentation\",\"url\":\"https://docs.cotool.ai\",\"publisher\":{\"@id\":\"https://docs.cotool.ai/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run#webpage\",\"url\":\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run\",\"name\":\"Get alert for run\",\"description\":\"Resolve the alert a run triaged or created, used to link an agent run back to its alert.\",\"dateModified\":\"2026-11-09T16:06:36.545Z\",\"isPartOf\":{\"@id\":\"https://docs.cotool.ai#website\"},\"breadcrumb\":{\"@id\":\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Endpoints\",\"item\":\"https://docs.cotool.ai/api-reference/agent-triggers/list-agent-triggers\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Alerts\",\"item\":\"https://docs.cotool.ai/api-reference/alerts/list-alerts\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Get alert for run\",\"item\":\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run#apireference\",\"headline\":\"Get alert for run\",\"name\":\"Get alert for run\",\"description\":\"Resolve the alert a run triaged or created, used to link an agent run back to its alert.\",\"url\":\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run\",\"mainEntityOfPage\":{\"@id\":\"https://docs.cotool.ai/api-reference/alerts/get-alert-for-run#webpage\"},\"dateModified\":\"2026-11-09T16:06:36.545Z\",\"publisher\":{\"@id\":\"https://docs.cotool.ai/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.cotool.ai#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Cotool Documentation\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Cotool Documentation","nav":{"global":{"anchors":[{"anchor":"Blog","icon":"newspaper","href":"https://cotool.ai/blog"}]},"tabs":[{"tab":"Documentation","pages":[{"title":"Documentation","href":""}]},{"tab":"API Reference","groups":[{"group":"Overview","pages":[{"title":"API Overview","href":"/api-reference/introduction"}]},{"group":"Endpoints","pages":[{"group":"Agent Triggers","pages":[{"title":"List agent triggers","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/trigger","href":"/api-reference/agent-triggers/list-agent-triggers"},{"title":"Retrieve an agent trigger secret","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/trigger/{triggerId}/secret","href":"/api-reference/agent-triggers/retrieve-an-agent-trigger-secret"},{"title":"Update trigger status","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json patch /api/agents/{agentId}/trigger/{triggerId}/status","href":"/api-reference/agent-triggers/update-trigger-status"},{"title":"Update trigger definition","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/agents/{agentId}/trigger/{triggerId}","href":"/api-reference/agent-triggers/update-trigger-definition"},{"title":"Delete trigger","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/agents/{agentId}/trigger/{triggerId}","href":"/api-reference/agent-triggers/delete-trigger"},{"title":"Change trigger settings","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json patch /api/agents/{agentId}/trigger/{triggerId}","href":"/api-reference/agent-triggers/change-trigger-settings"},{"title":"Get webhook fields","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/trigger/{source}/fields","href":"/api-reference/agent-triggers/get-webhook-fields"},{"title":"Save trigger definition","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/{agentId}/trigger/save","href":"/api-reference/agent-triggers/save-trigger-definition"},{"title":"Webhook trigger","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/trigger/{source}/{triggerId}","href":"/api-reference/agent-triggers/webhook-trigger"},{"title":"Create Linear agent session for an agent","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/{agentId}/linear/agent-session","href":"/api-reference/agent-triggers/create-linear-agent-session-for-an-agent"},{"title":"Move trigger to another agent","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/{agentId}/trigger/{triggerId}/move","href":"/api-reference/agent-triggers/move-trigger-to-another-agent"},{"title":"Get webhook fields for a trigger source","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/trigger-sources/{source}/fields","href":"/api-reference/agent-triggers/get-webhook-fields-for-a-trigger-source"},{"title":"Update trigger event mode","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json patch /api/agents/{agentId}/trigger/{triggerId}/event-mode","href":"/api-reference/agent-triggers/update-trigger-event-mode"},{"title":"Update trigger alert-created notification","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/agents/{agentId}/trigger/{triggerId}/alert-created-notification","href":"/api-reference/agent-triggers/update-trigger-alert-created-notification"}]},{"group":"Chat","pages":[{"title":"Get chat history","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/chat/history","href":"/api-reference/chat/get-chat-history"},{"title":"Get chat metadata","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/chat/meta","href":"/api-reference/chat/get-chat-metadata"},{"title":"List chats","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/chats","href":"/api-reference/chat/list-chats"},{"title":"Submit thumbs feedback for a chat","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/chats/{chatId}/feedback","href":"/api-reference/chat/submit-thumbs-feedback-for-a-chat"},{"title":"Delete chat","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/chats/{chatId}","href":"/api-reference/chat/delete-chat"}]},{"group":"Agents","pages":[{"title":"Run agent asynchronously","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/{agentId}/run-async","href":"/api-reference/agents/run-agent-asynchronously"},{"title":"Get async run status (deprecated)","deprecated":true,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/run-async/{runId}","href":"/api-reference/agents/get-async-run-status-deprecated"},{"title":"Get async run status","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/run-async/{runId}/status","href":"/api-reference/agents/get-async-run-status"},{"title":"Get async run result","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/run-async/{runId}/result","href":"/api-reference/agents/get-async-run-result"},{"title":"Run agent synchronously","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/{agentId}/run-sync","href":"/api-reference/agents/run-agent-synchronously"},{"title":"List all agents","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents","href":"/api-reference/agents/list-all-agents"},{"title":"Create a new agent","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents","href":"/api-reference/agents/create-a-new-agent"},{"title":"Get agent","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}","href":"/api-reference/agents/get-agent"},{"title":"Update agent","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/agents/{agentId}","href":"/api-reference/agents/update-agent"},{"title":"Delete agent","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/agents/{agentId}","href":"/api-reference/agents/delete-agent"},{"title":"Convert a disconnected managed agent into a manual agent","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/{agentId}/copy","href":"/api-reference/agents/convert-a-disconnected-managed-agent-into-a-manual-agent"},{"title":"Batch update agents","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/agents/batch","href":"/api-reference/agents/batch-update-agents"},{"title":"List agent tags","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agent-tags","href":"/api-reference/agents/list-agent-tags"},{"title":"Create agent tag","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agent-tags","href":"/api-reference/agents/create-agent-tag"},{"title":"Rename agent tag","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/agent-tags/{tagId}","href":"/api-reference/agents/rename-agent-tag"},{"title":"Delete agent tag","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/agent-tags/{tagId}","href":"/api-reference/agents/delete-agent-tag"},{"title":"List agent templates","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agent-templates","href":"/api-reference/agents/list-agent-templates"},{"title":"List agent versions","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/versions","href":"/api-reference/agents/list-agent-versions"},{"title":"Revert an agent to a previous version","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/{agentId}/versions/{versionId}/revert","href":"/api-reference/agents/revert-an-agent-to-a-previous-version"},{"title":"Change agent tag color","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json patch /api/agent-tags/{tagId}/color","href":"/api-reference/agents/change-agent-tag-color"},{"title":"List agent run messages","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/run-async/{runId}/messages","href":"/api-reference/agents/list-agent-run-messages"},{"title":"Send a message to an agent run","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/{agentId}/run-async/{runId}/messages","href":"/api-reference/agents/send-a-message-to-an-agent-run"}]},{"group":"Agent Runs","pages":[{"title":"Get response-agent notification defaults","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/response-agent-notification-defaults","href":"/api-reference/agent-runs/get-response-agent-notification-defaults"},{"title":"Update response-agent notification defaults","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/response-agent-notification-defaults","href":"/api-reference/agent-runs/update-response-agent-notification-defaults"},{"title":"List agent runs/chats","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/chats","href":"/api-reference/agent-runs/list-agent-runschats"},{"title":"List agent runs","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agent-runs","href":"/api-reference/agent-runs/list-agent-runs"},{"title":"List critical issues","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/critical-issues","href":"/api-reference/agent-runs/list-critical-issues"},{"title":"Dismiss critical issue","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/critical-issues/{issueId}/dismiss","href":"/api-reference/agent-runs/dismiss-critical-issue"},{"title":"Submit feedback for an agent run","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agent-runs/{runId}/feedback","href":"/api-reference/agent-runs/submit-feedback-for-an-agent-run"},{"title":"Submit feedback for multiple agent runs","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agent-runs/feedback-batch","href":"/api-reference/agent-runs/submit-feedback-for-multiple-agent-runs"},{"title":"Get detailed feedback metrics for an agent","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/feedback-metrics","href":"/api-reference/agent-runs/get-detailed-feedback-metrics-for-an-agent"},{"title":"Get LLM evaluation metrics","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agents/{agentId}/llm-eval-metrics","href":"/api-reference/agent-runs/get-llm-evaluation-metrics"},{"title":"Get LLM evaluation metrics for multiple agents","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agents/llm-eval-metrics/batch","href":"/api-reference/agent-runs/get-llm-evaluation-metrics-for-multiple-agents"},{"title":"List trigger sources","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agent-runs/trigger-sources","href":"/api-reference/agent-runs/list-trigger-sources"},{"title":"List output deliveries and notifications for an agent run","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/agent-runs/{runId}/deliveries","href":"/api-reference/agent-runs/list-output-deliveries-and-notifications-for-an-agent-run"},{"title":"Resend a failed output delivery or notification","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agent-runs/{runId}/deliveries/{deliveryId}/resend","href":"/api-reference/agent-runs/resend-a-failed-output-delivery-or-notification"}]},{"group":"Alerts","pages":[{"title":"List alerts","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts","href":"/api-reference/alerts/list-alerts"},{"title":"Get alert filter options","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/filter-options","href":"/api-reference/alerts/get-alert-filter-options"},{"title":"Get alert routing overview","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alert-routing","href":"/api-reference/alerts/get-alert-routing-overview"},{"title":"Update default alert routing","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/alert-routing/defaults","href":"/api-reference/alerts/update-default-alert-routing"},{"title":"Get detection alert routing","description":"Return a detection agent alert routing override and effective routing setting.","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/detections/{id}/alert-routing","href":"/api-reference/alerts/get-detection-alert-routing"},{"title":"Get alert for run","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/for-run/{runId}","href":"/api-reference/alerts/get-alert-for-run"},{"title":"Get alert","description":"Retrieve one alert and its initial timeline page.","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/{alertId}","href":"/api-reference/alerts/get-alert"},{"title":"Update alert details","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json patch /api/alerts/{alertId}","href":"/api-reference/alerts/update-alert-details"},{"title":"Get alert timeline","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/{alertId}/timeline","href":"/api-reference/alerts/get-alert-timeline"},{"title":"Get alert source payload","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/{alertId}/source-payloads/{sourcePayloadId}","href":"/api-reference/alerts/get-alert-source-payload"},{"title":"Add alert comment","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/alerts/{alertId}/comments","href":"/api-reference/alerts/add-alert-comment"},{"title":"Update alert status","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/alerts/{alertId}/status","href":"/api-reference/alerts/update-alert-status"},{"title":"Get escalated alert notification defaults","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alert-escalation-notification-defaults","href":"/api-reference/alerts/get-escalated-alert-notification-defaults"},{"title":"Update escalated alert notification defaults","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/alert-escalation-notification-defaults","href":"/api-reference/alerts/update-escalated-alert-notification-defaults"},{"title":"Update alert severity","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/alerts/{alertId}/severity","href":"/api-reference/alerts/update-alert-severity"},{"title":"Start alert triage run","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/alerts/{alertId}/triage-runs","href":"/api-reference/alerts/start-alert-triage-run"},{"title":"Update Hunt Alert routing","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/alert-routing/hunt-alerts","href":"/api-reference/alerts/update-hunt-alert-routing"},{"title":"Get alert triage routes","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alert-triage-routes","href":"/api-reference/alerts/get-alert-triage-routes"},{"title":"Replace alert triage routes","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/alert-triage-routes","href":"/api-reference/alerts/replace-alert-triage-routes"},{"title":"List alert feedback questions","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/feedback-questions","href":"/api-reference/alerts/list-alert-feedback-questions"},{"title":"Confirm an alert feedback question","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/alerts/feedback-questions/{questionId}/confirm","href":"/api-reference/alerts/confirm-an-alert-feedback-question"},{"title":"Reject an alert feedback question","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/alerts/feedback-questions/{questionId}/reject","href":"/api-reference/alerts/reject-an-alert-feedback-question"},{"title":"List alert Slack threads","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/alerts/{alertId}/slack-threads","href":"/api-reference/alerts/list-alert-slack-threads"}]},{"group":"Agents as Code","pages":[{"title":"Validate Response-Agent-as-Code YAML","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/agent-sync/validate","href":"/api-reference/agents-as-code/validate-response-agent-as-code-yaml"}]},{"group":"Artifacts","pages":[{"title":"Get artifact","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/artifacts/{artifactId}","href":"/api-reference/artifacts/get-artifact"}]},{"group":"Audit Logs","pages":[{"title":"Count audit logs","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/audit-logs/count","href":"/api-reference/audit-logs/count-audit-logs"},{"title":"Get audit-log filter options","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/audit-logs/filter-options","href":"/api-reference/audit-logs/get-audit-log-filter-options"},{"title":"Get audit-log event catalog","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/audit-logs/event-catalog","href":"/api-reference/audit-logs/get-audit-log-event-catalog"},{"title":"List audit logs","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/audit-logs","href":"/api-reference/audit-logs/list-audit-logs"},{"title":"Get audit log entry","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/audit-logs/{id}","href":"/api-reference/audit-logs/get-audit-log-entry"}]},{"group":"Users","pages":[{"title":"Get current user","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/auth/me","href":"/api-reference/users/get-current-user"},{"title":"Get current user permissions and all available permissions","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/perms","href":"/api-reference/users/get-current-user-permissions-and-all-available-permissions"},{"title":"List user organizations","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/users/organizations","href":"/api-reference/users/list-user-organizations"},{"title":"List users","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/users","href":"/api-reference/users/list-users"},{"title":"Update user","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/users/{id}","href":"/api-reference/users/update-user"},{"title":"Delete user","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/users/{id}","href":"/api-reference/users/delete-user"}]},{"group":"Hunt","pages":[{"title":"Hunt overview","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/hunt/overview","href":"/api-reference/hunt/hunt-overview"},{"title":"List threat actors","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/hunt/actors","href":"/api-reference/hunt/list-threat-actors"},{"title":"List Threats","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/threats","href":"/api-reference/hunt/list-threats"},{"title":"Get Threat detail","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/threats/{id}","href":"/api-reference/hunt/get-threat-detail"},{"title":"Dismiss a Threat","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/threats/{id}/dismiss","href":"/api-reference/hunt/dismiss-a-threat"},{"title":"Restore a dismissed Threat","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/threats/{id}/restore","href":"/api-reference/hunt/restore-a-dismissed-threat"},{"title":"Reassess a Threat","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/threats/{id}/reassess","href":"/api-reference/hunt/reassess-a-threat"},{"title":"Dispose a gap via a threat finding","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/threats/{id}/deliverables/{deliverableId}/gap-status","href":"/api-reference/hunt/dispose-a-gap-via-a-threat-finding"},{"title":"Dispose an observability gap","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/hunt/gaps/{gapId}/status","href":"/api-reference/hunt/dispose-an-observability-gap"},{"title":"Get Hunt Alert creation settings","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/hunt/alert-creation-settings","href":"/api-reference/hunt/get-hunt-alert-creation-settings"},{"title":"Update Hunt Alert creation settings","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/hunt/alert-creation-settings","href":"/api-reference/hunt/update-hunt-alert-creation-settings"}]},{"group":"CLIs","pages":[{"title":"List CLI integrations","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/clis/list","href":"/api-reference/clis/list-cli-integrations"},{"title":"Disconnect CLI","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/clis/{cliType}/disconnect","href":"/api-reference/clis/disconnect-cli"}]},{"group":"Detections","pages":[{"title":"Generate a SIEM query using AI","deprecated":true,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/detection-queries/generate","href":"/api-reference/detections/generate-a-siem-query-using-ai"},{"title":"List detections","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/detections","href":"/api-reference/detections/list-detections"},{"title":"List detection hits","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/detections/hits","href":"/api-reference/detections/list-detection-hits"},{"title":"List the Cotool detection library","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/detection-library","href":"/api-reference/detections/list-the-cotool-detection-library"},{"title":"Read one detection library entry","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/detection-library/{slug}","href":"/api-reference/detections/read-one-detection-library-entry"},{"title":"Add a detection library entry","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/detection-library/{slug}/add","href":"/api-reference/detections/add-a-detection-library-entry"}]},{"group":"Output Destinations","pages":[{"title":"List all output destinations","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/output-destinations","href":"/api-reference/output-destinations/list-all-output-destinations"},{"title":"Create output destination","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/output-destinations","href":"/api-reference/output-destinations/create-output-destination"},{"title":"Update output destination","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/output-destinations/{destinationId}","href":"/api-reference/output-destinations/update-output-destination"},{"title":"Delete output destination","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/output-destinations/{destinationId}","href":"/api-reference/output-destinations/delete-output-destination"},{"title":"Send a test payload to an output destination","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/output-destinations/{destinationId}/test","href":"/api-reference/output-destinations/send-a-test-payload-to-an-output-destination"},{"title":"Send a test payload to an unsaved output destination","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/output-destinations/test","href":"/api-reference/output-destinations/send-a-test-payload-to-an-unsaved-output-destination"},{"title":"Enable or disable output destination","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/output-destinations/{destinationId}/enabled","href":"/api-reference/output-destinations/enable-or-disable-output-destination"}]},{"group":"Roles","pages":[{"title":"List roles for the current organization","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/roles","href":"/api-reference/roles/list-roles-for-the-current-organization"},{"title":"Create a role","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/roles","href":"/api-reference/roles/create-a-role"},{"title":"Get role by id","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/roles/{id}","href":"/api-reference/roles/get-role-by-id"},{"title":"Update a role","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/roles/{id}","href":"/api-reference/roles/update-a-role"},{"title":"Delete a role","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/roles/{id}","href":"/api-reference/roles/delete-a-role"},{"title":"Get permissions for a role","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/roles/{id}/perms","href":"/api-reference/roles/get-permissions-for-a-role"},{"title":"Apply permission diff to a role","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/roles/{id}/perms","href":"/api-reference/roles/apply-permission-diff-to-a-role"}]},{"group":"MITRE Coverage","pages":[{"title":"Get MITRE ATT\u0026CK matrix with detection coverage","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/mitre/matrix","href":"/api-reference/mitre-coverage/get-mitre-att\u0026ck-matrix-with-detection-coverage"},{"title":"Get MITRE ATT\u0026CK technique labels","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/mitre/technique-labels","href":"/api-reference/mitre-coverage/get-mitre-att\u0026ck-technique-labels"}]},{"group":"Organizations","pages":[{"title":"Get organization-level activity metrics","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/org-metrics","href":"/api-reference/organizations/get-organization-level-activity-metrics"}]},{"group":"Skills","pages":[{"title":"List skills","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/skills","href":"/api-reference/skills/list-skills"},{"title":"Create skill","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/skills","href":"/api-reference/skills/create-skill"},{"title":"Get skill","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/skills/{skillId}","href":"/api-reference/skills/get-skill"},{"title":"Update skill","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/skills/{skillId}","href":"/api-reference/skills/update-skill"},{"title":"Delete skill","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/skills/{skillId}","href":"/api-reference/skills/delete-skill"},{"title":"List agents using skill","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/skills/{skillId}/agents","href":"/api-reference/skills/list-agents-using-skill"},{"title":"List skill versions","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/skills/{skillId}/versions","href":"/api-reference/skills/list-skill-versions"},{"title":"Get skill version","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/skills/{skillId}/versions/{versionId}","href":"/api-reference/skills/get-skill-version"},{"title":"Restore a skill version","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/skills/{skillId}/versions/{versionId}/restore","href":"/api-reference/skills/restore-a-skill-version"},{"title":"Import skill","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/skills/import","href":"/api-reference/skills/import-skill"},{"title":"Export skill","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/skills/{skillId}/export","href":"/api-reference/skills/export-skill"}]},{"group":"Tools","pages":[{"title":"List tools","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/tools/list","href":"/api-reference/tools/list-tools"},{"title":"Disconnect tool","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/tools/{toolType}/disconnect","href":"/api-reference/tools/disconnect-tool"},{"title":"Get raw tool output","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/tools/get-tool-use-raw-output","href":"/api-reference/tools/get-raw-tool-output"}]},{"group":"Threat Model","pages":[{"title":"Get threat model","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/threat-model","href":"/api-reference/threat-model/get-threat-model"},{"title":"Update threat model","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/threat-model","href":"/api-reference/threat-model/update-threat-model"},{"title":"Get structured threat model board","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/threat-model/board","href":"/api-reference/threat-model/get-structured-threat-model-board"},{"title":"Regenerate threat model","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/threat-model/regenerate","href":"/api-reference/threat-model/regenerate-threat-model"},{"title":"List threat model version history","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/threat-model/versions","href":"/api-reference/threat-model/list-threat-model-version-history"},{"title":"Get threat model version","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/threat-model/versions/{versionId}","href":"/api-reference/threat-model/get-threat-model-version"}]},{"group":"Intel","pages":[{"title":"List flattened threat-intel indicators (IOCs)","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/intel/iocs","href":"/api-reference/intel/list-flattened-threat-intel-indicators-iocs"},{"title":"List threat intelligence items","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/intel/items","href":"/api-reference/intel/list-threat-intelligence-items"},{"title":"Get specific intel item","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/intel/items/{id}","href":"/api-reference/intel/get-specific-intel-item"},{"title":"Get threat intel notification settings","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/intel/notification-settings","href":"/api-reference/intel/get-threat-intel-notification-settings"},{"title":"Update threat intel notification settings","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/intel/notification-settings","href":"/api-reference/intel/update-threat-intel-notification-settings"},{"title":"List intel sources","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/intel/sources","href":"/api-reference/intel/list-intel-sources"},{"title":"Create intel source","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/intel/sources","href":"/api-reference/intel/create-intel-source"},{"title":"Update intel source","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json put /api/intel/sources/{id}","href":"/api-reference/intel/update-intel-source"},{"title":"Delete intel source","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json delete /api/intel/sources/{id}","href":"/api-reference/intel/delete-intel-source"},{"title":"Trigger intel source sync","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json post /api/intel/sources/{id}/sync","href":"/api-reference/intel/trigger-intel-source-sync"},{"title":"Get intel feed statistics","deprecated":null,"version":null,"openapi":"https://app.cotool.ai/api/docs/openapi.json get /api/intel/stats","href":"/api-reference/intel/get-intel-feed-statistics"}]}]}]},{"tab":"Changelog","pages":[{"title":"Changelog","href":"/changelog"}]}]},"basePath":"","title":"Get alert for run - Cotool Documentation","buildId":"dpl_42LwxxU1kGN114H4XzwGYXa9ZDah","deploymentId":"dpl_42LwxxU1kGN114H4XzwGYXa9ZDah","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-C-hEh3I2.js","utils-CnF4QiUD.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-C7PVNbel.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-8ytevL2A.js","snippetPresets-BT1alx3v.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","conditional-requirements-CFM0id0Q.js","ApiExamples-BLXC0i_W.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-CyLIGI9_.js","shallow-DC0lGVIW.js","getApiPlaygroundDisplay-CgDQ85tN.js","CodeSnippet-6-I-Gpv9.js","CodeSnippets-BAk1kDdu.js","Page-C945cI-W.js","getPastedJson-B276RuWN.js","icon-BqP8etTm.js","MethodPill-DM6sbxG1.js","DuplicateIcon-PyJglOaE.js","createIcon-CMeOMAc_.js","DynamicMarkdown-BoyYAA8K.js","SectionHeading-DAYv3gvZ.js","axios-vUo_bRtp.js","Markdown-BhTTmazV.js","clsx-CR-RHrVC.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CBUH0-zX.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BmARFYNC.js"]}