> ## Documentation Index
> Fetch the complete documentation index at: https://devlookout.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Alert review status

> For the complete documentation index, see https://devlookout.com/llms.txt. Sets the review state and appends an authenticated review-history entry.



## OpenAPI

````yaml /openapi.yaml patch /api/v1/alerts/{alertId}
openapi: 3.1.0
info:
  title: Lookout HTTP API
  version: 1.0.0
  description: >-
    Versioned interface for querying Lookout security state, ingesting evidence,
    managing Alerts, and promoting Incidents. The deployed Lookout instance is
    authoritative and raw evidence remains local unless export is explicitly
    enabled.
servers:
  - url: https://lookout.example.com
    description: Replace with the private URL of your Lookout deployment
security:
  - bearerAuth: []
tags:
  - name: System
  - name: Security graph
  - name: Rules
  - name: Events
  - name: Collectors
  - name: Alerts
  - name: Incidents
paths:
  /api/v1/alerts/{alertId}:
    parameters:
      - name: alertId
        in: path
        required: true
        schema:
          type: string
    patch:
      tags:
        - Alerts
      summary: Update Alert review status
      description: >-
        For the complete documentation index, see
        https://devlookout.com/llms.txt. Sets the review state and appends an
        authenticated review-history entry.
      operationId: updateAlert
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: false
              required:
                - status
                - reason
              properties:
                status:
                  type: string
                  enum:
                    - open
                    - in_review
                    - dismissed
                reason:
                  type: string
                  minLength: 1
            example:
              status: in_review
              reason: Assigned to the security engineering queue
      responses:
        '200':
          description: Updated Alert
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Alert'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
components:
  schemas:
    Alert:
      type: object
      required:
        - id
      properties:
        id:
          type: string
        status:
          type: string
          enum:
            - open
            - in_review
            - dismissed
      additionalProperties: true
    ErrorResponse:
      type: object
      required:
        - error
      properties:
        error:
          type: string
        issues:
          type: array
          items:
            type: string
  responses:
    BadRequest:
      description: Invalid request
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    Unauthorized:
      description: Missing or invalid credentials
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    Forbidden:
      description: The principal lacks the required permission
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    NotFound:
      description: Resource not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: opaque
      description: A 256-bit token generated by the Lookout CLI.

````