Marquer une alerte de sécurité comme lue

PATCH/api/public/v1/alerts/{alert_id}/read

Idempotent. Re-marking an already-read alert returns 200 with the existing `read_at` and emits no audit event. Cross-tenant returns 404.

cURL

curl --fail-with-body -X PATCH 'https://app.openlatch.ai/api/public/v1/alerts/<alert_id>/read' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY"

Python

import json
import os
import urllib.request

request = urllib.request.Request(
    'https://app.openlatch.ai/api/public/v1/alerts/<alert_id>/read',
    method='PATCH',
    headers={
        'Authorization': 'Bearer ' + os.environ['OPENLATCH_API_KEY'],
    },
)
with urllib.request.urlopen(request) as response:
    text = response.read().decode()
    print(json.dumps(json.loads(text), indent=2) if text else response.status)

Bash

#!/usr/bin/env bash
set -euo pipefail

curl -sS --fail-with-body -X PATCH 'https://app.openlatch.ai/api/public/v1/alerts/<alert_id>/read' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY" | jq .

PowerShell

$headers = @{
  Authorization = "Bearer $env:OPENLATCH_API_KEY"
}
Invoke-RestMethod -Method PATCH -Uri 'https://app.openlatch.ai/api/public/v1/alerts/<alert_id>/read' -Headers $headers | ConvertTo-Json -Depth 20

Autorisation

Rôle dans l’organisation	Ce point de terminaison
owner	Autorisé
admin	Autorisé
editor	Autorisé
viewer	Non autorisé

Une clé porte le rôle que son propriétaire détient dans l’organisation. Voir Authentification.

Portée de clé d’API : alerts:write

Paramètres de chemin

Paramètre	Type	Description
alert_id	string (uuid)	Obligatoire.

Paramètres d’en-tête

Paramètre	Type	Description
Idempotency-Key	string or null	Optional. Makes the request safe to retry: the same key and the same request, within 24 hours, returns the stored response with Idempotent-Replayed: true and runs once.

Réponse

• 200 OK — l’appel a réussi.
• 400 Bad Request — BAD_REQUEST
• 401 Unauthorized — UNAUTHORIZED
• 402 Payment Required — license_expired
• 403 Forbidden — FEATURE_DISABLED, FORBIDDEN, INSUFFICIENT_SCOPE
• 404 Not Found — NOT_FOUND
• 409 Conflict — IDEMPOTENCY_IN_PROGRESS
• 422 Unprocessable Content — IDEMPOTENCY_KEY_REUSED, INVALID_ID, VALIDATION_ERROR
• 429 Too Many Requests — TOO_MANY_REQUESTS
• 500 Internal Server Error — INTERNAL_SERVER_ERROR, tenant_isolation_violation
• 503 Service Unavailable — FEATURE_STATE_UNAVAILABLE, SERVICE_UNAVAILABLE

Champs de la réponse

Champ	Type	Description
dismissed_at	string (date-time) or null	Obligatoire.
id	string (uuid)	Obligatoire.
read_at	string (date-time) or null	Obligatoire.
status	string — one of unread, read, dismissed	Obligatoire.

Exemple de réponse

{
  "dismissed_at": "2026-01-15T14:32:05Z",
  "id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
  "read_at": "2026-01-15T14:32:05Z",
  "status": "unread"
}

Voir aussi

• GET Lister les alertes de sécurité
• DELETE Supprimer définitivement une alerte de sécurité
• PATCH Écarter une alerte de sécurité