---
title: "List critical issues"
method: GET
path: "/api/critical-issues"
tags: ["Agent Runs"]
---

# List critical issues

`GET /api/critical-issues`

## Request

- Base URL: `https://app.cotool.ai`
- URL: `https://app.cotool.ai/api/critical-issues`
- Auth: HTTP bearer

Retrieve normalized critical issues from agent evaluations and code-detection circuit breakers.

## Query parameters

- `limit` number: Number of critical issues to return
- `offset` number: Number of critical issues to skip
- `status` 'open' | 'dismissed' | 'resolved': Critical issue status filter
- `issueId` string, uuid: Specific critical issue ID to return

## Response `200`

Successful response

- object: Paginated list of normalized critical issues
  - `alerts` union[], required
    - union
      - object
        - `id` string, uuid, required
        - `organizationId` string, uuid, required
        - `category` 'authentication' | 'connectivity' | 'missing_data' | 'permission' | 'configuration' | 'service_unavailable' | 'content_filter', required: Critical Issue Categories that prevented task completion (external blockers, not agent faults): authentication: OAuth tokens, API keys, credentials failures connectivity: Service/network connectivity issues missing_data: Required data/logs not available permission: User lacks required permissions configuration: Misconfiguration (wrong settings, missing config) service_unavailable: External service down or unresponsive content_filter: The LLM provider's content safety filter declined a request
        - `explanation` string, required
        - `status` 'open' | 'dismissed' | 'resolved', required
        - `dismissedAt` string, nullable, required
        - `dismissedByUserId` string, uuid, nullable, required
        - `createdAt` string, required
        - `updatedAt` string, required
        - `sourceType` 'agent_run', required
        - `agentId` string, uuid, required
        - `agentName` string, nullable, required
        - `agentType` 'response' | 'detection', required: Type of agent: response (standard agent) or detection (security detection agent)
        - `runId` string, uuid, required
        - `runTitle` string, nullable, required
        - `runCreatedAt` string, required
        - `agentRunEvalId` string, uuid, nullable, required
        - `evaluatorType` string, required
        - `evaluatorVersion` string, required
      - object
        - `id` string, uuid, required
        - `organizationId` string, uuid, required
        - `category` 'authentication' | 'connectivity' | 'missing_data' | 'permission' | 'configuration' | 'service_unavailable' | 'content_filter', required: Critical Issue Categories that prevented task completion (external blockers, not agent faults): authentication: OAuth tokens, API keys, credentials failures connectivity: Service/network connectivity issues missing_data: Required data/logs not available permission: User lacks required permissions configuration: Misconfiguration (wrong settings, missing config) service_unavailable: External service down or unresponsive content_filter: The LLM provider's content safety filter declined a request
        - `explanation` string, required
        - `status` 'open' | 'dismissed' | 'resolved', required
        - `dismissedAt` string, nullable, required
        - `dismissedByUserId` string, uuid, nullable, required
        - `createdAt` string, required
        - `updatedAt` string, required
        - `sourceType` 'code_detection', required
        - `codeDetectionId` string, uuid, required
        - `codeDetectionName` string, required
        - `codeDetectionExecutionId` string, uuid, required
        - `executionKind` 'editor' | 'manual' | 'scheduled', required
        - `executionStartedAt` string, required
      - object
        - `id` string, uuid, required
        - `organizationId` string, uuid, required
        - `category` 'authentication' | 'connectivity' | 'missing_data' | 'permission' | 'configuration' | 'service_unavailable' | 'content_filter', required: Critical Issue Categories that prevented task completion (external blockers, not agent faults): authentication: OAuth tokens, API keys, credentials failures connectivity: Service/network connectivity issues missing_data: Required data/logs not available permission: User lacks required permissions configuration: Misconfiguration (wrong settings, missing config) service_unavailable: External service down or unresponsive content_filter: The LLM provider's content safety filter declined a request
        - `explanation` string, required
        - `status` 'open' | 'dismissed' | 'resolved', required
        - `dismissedAt` string, nullable, required
        - `dismissedByUserId` string, uuid, nullable, required
        - `createdAt` string, required
        - `updatedAt` string, required
        - `sourceType` 'signal_promotion', required
        - `signalType` string, required
  - `totalCount` integer, required

## Other responses

- `400`: Bad request — input validation failed or the request was malformed
- `401`: Unauthorized — missing or invalid API key / session
- `403`: Forbidden — the authenticated user lacks the required permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/cotool/apis/cotool-api.md) - [All operations](https://skmtc.dev/cotool/apis/cotool-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cotool/apis/cotool-api/revisions/f5abe0add203?raw)