---
title: "Restore security finding"
method: DELETE
path: "/api/apps/{app_id}/security/scan/ignore/{fingerprint}"
---

# Restore security finding

`DELETE /api/apps/{app_id}/security/scan/ignore/{fingerprint}`

## Request

- Base URL: `https://app.base44.com`
- URL: `https://app.base44.com/api/apps/{app_id}/security/scan/ignore/{fingerprint}`
- Auth: HTTP bearer

<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Ends an [ignore](/developers/references/apps-api/sections/security#act-on-findings) set with [Ignore security finding](/api-reference/ignore-security-finding), so the finding is no longer hidden. Its fingerprint is removed from `ignored_fingerprints` in [Get security scan](/api-reference/get-security-scan). The finding itself stayed in the scan result the whole time, so nothing else changes.

The call succeeds without changing anything when the fingerprint isn't ignored.

## Path parameters

- `fingerprint` string, required: The [fingerprint](/developers/references/apps-api/sections/security#findings-and-fingerprints) of the ignored finding, as listed in `ignored_fingerprints` by [Get security scan](/api-reference/get-security-scan). Up to 128 characters.
- `app_id` string, required: ID of the app.

## Response `200`

The call was accepted.

- SecurityFindingIgnoreStatus
  - `status` string, required: Always `ok`, including when nothing changed.

## Other responses

- `401`: Missing or invalid credentials.
- `403`: You don't have editor access to this app, or you used a workspace API key. A read-only personal access token is refused.
- `404`: App not found.
- `422`: The `fingerprint` is longer than 128 characters.
- `429`: Rate limit exceeded. The base limit is 60 requests per minute for each app, shared by every personal access token in the workspace. See [Rate limits](/developers/references/apps-api/get-started/rate-limits) for the multiplier your plan gets.

## Changes

> 58 revisions in range; 1 not diffed.

- **2026-10-12** `5e139db2e643`: 1 info
  - the endpoint scheme security `PersonalAccessTokenAuth` was added to the API
- **2026-09-29** `d2b7ac8beb0c`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/adexad/apis/base44-app-management-api/changes/api/apps/:app_id/security/scan/ignore/:fingerprint/delete.md)

---

[API](https://skmtc.dev/adexad/apis/base44-app-management-api.md) · [All operations](https://skmtc.dev/adexad/apis/base44-app-management-api/llms.txt) · [OpenAPI document](https://skmtc.dev/adexad/apis/base44-app-management-api/revisions/fa29e915c226?raw)