Change an issue's status

PATCHhttps://api.fortwatch.ai/app/issues/{id}/status

Scope issues:writeOperation ID setIssueStatus

Resolving starts a re-check scan of the asset, which counts toward the daily scan limits; when none can start, the issue still resolves and the next scheduled scan confirms the fix.

Parameters

Name	In	Type	Description
`id`required	path	integer

Request body

JSON, required.

Field	Type	Description
`status`	string	Required. Dismissing has its own endpoint.One of: `open`, `in_progress`, `resolved`
`resolution`	string \| null

Example request

curl -X PATCH "https://api.fortwatch.ai/app/issues/42/status" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "status": "open",
  "resolution": "string"
}'

Response 200

The request succeeded.

Field	Type	Description
`id`required	number
`workspaceId`required	number
`assetId`required	number
`title`required	string
`description`required	string \| null
`severity`required	string
`status`required	string
`templateId`required	string \| null
`dedupKey`required	string
`assignedTo`required	number \| null
`resolution`required	string \| null
`resolvedBy`required	string \| null
`resolvedByScanId`required	number \| null
`resolvedByUserId`required	number \| null
`dismissedByUserId`required	number \| null
`category`required	string
`dueDate`required	string (date-time) \| null
`resolvedAt`required	string (date-time) \| null
`lastReopenedAt`required	string (date-time) \| null
`dismissReason`required	string \| null
`dismissNotes`required	string \| null
`dismissExpiresAt`required	string (date-time) \| null
`firstSeenAt`required	string (date-time)
`lastSeenAt`required	string (date-time)
`lastCheckedAt`required	string (date-time) \| null
`reachability`required	string
`verificationScanId`required	number \| null
`verificationSkipped`required	string \| null
`createdAt`required	string (date-time)
`updatedAt`required	string (date-time)
`assignee`required	object
`firstName`required	string
`lastName`required	string
`asset`required	object
`id`required	number
`name`required	object \| null
`value`required	string
`type`required	string
`cdnProvider`required	object \| null
`project`required	object
`id`required	number
`name`required	string
`_count`required	object
`findings`required	number
`resolvedByUser`required	object
`firstName`required	string
`lastName`required	string
`dismissedByUser`required	object
`firstName`required	string
`lastName`required	string
`verification`	object
`status`required	string	One of: `queued`, `running`, `done`, `failed`, `skipped`
`scanId`required	number \| null
`reason`required	string \| null	Why no re-check started: limit, asset_not_active, ownership_unverified, error
`nextScheduledAt`required	string (date-time) \| null	The asset's next scheduled scan, when no re-check started

json

{
  "id": 42,
  "workspaceId": 42,
  "assetId": 42,
  "title": "string",
  "description": "string",
  "severity": "string",
  "status": "string",
  "templateId": "string",
  "dedupKey": "string",
  "assignedTo": 1,
  "resolution": "string",
  "resolvedBy": "string",
  "resolvedByScanId": 42,
  "resolvedByUserId": 42,
  "dismissedByUserId": 42,
  "category": "string",
  "dueDate": "2026-10-16T12:00:00.000Z",
  "resolvedAt": "2026-10-16T12:00:00.000Z",
  "lastReopenedAt": "2026-10-16T12:00:00.000Z",
  "dismissReason": "string",
  "dismissNotes": "string",
  "dismissExpiresAt": "2026-10-16T12:00:00.000Z",
  "firstSeenAt": "2026-10-16T12:00:00.000Z",
  "lastSeenAt": "2026-10-16T12:00:00.000Z",
  "lastCheckedAt": "2026-10-16T12:00:00.000Z",
  "reachability": "string",
  "verificationScanId": 42,
  "verificationSkipped": "string",
  "createdAt": "2026-10-16T12:00:00.000Z",
  "updatedAt": "2026-10-16T12:00:00.000Z",
  "assignee": {
    "firstName": "string",
    "lastName": "string"
  },
  "asset": {
    "id": 42,
    "name": {},
    "value": "app.example.com",
    "type": "string",
    "cdnProvider": {},
    "project": {
      "id": 42,
      "name": "Production"
    }
  },
  "_count": {
    "findings": 1
  },
  "resolvedByUser": {
    "firstName": "string",
    "lastName": "string"
  },
  "dismissedByUser": {
    "firstName": "string",
    "lastName": "string"
  },
  "verification": {
    "status": "queued",
    "scanId": 42,
    "reason": "string",
    "nextScheduledAt": "2026-10-16T12:00:00.000Z"
  }
}

Errors

`400`	The request is not valid: a field is missing or has the wrong shape (the message names it).
`401`	No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
`403`	Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
`404`	Not found in your workspace.
`429`	Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.

Every code is explained in Errors.

This page as Markdown