---
title: "Dispose an observability gap"
method: POST
path: "/api/hunt/gaps/{gapId}/status"
tags: ["Hunt"]
---

# Dispose an observability gap

`POST /api/hunt/gaps/{gapId}/status`

## Request

- Base URL: `https://app.cotool.ai`
- URL: `https://app.cotool.ai/api/hunt/gaps/{gapId}/status`
- Auth: HTTP bearer

Resolve or dismiss an org-level observability gap once, for every threat it affects. Resolving a blocking gap enqueues a reassessment for each linked threat whose hunt it blocked.

## Path parameters

- `gapId` string, required

## Request body

- object
  - `status` 'resolved' | 'dismissed', required
  - `reason` string

## Response `200`

Successful response

- object
  - `gap` object, required
    - `id` string, required
    - `organizationId` string, required
    - `product` string, required
    - `logSource` string, required
    - `scopeType` 'org' | 'integration' | 'account' | 'environment' | 'asset_group' | 'tenant' | 'domain', required
    - `scopeId` string, nullable, required
    - `scopeKey` string, required
    - `blocking` boolean, required
    - `status` 'open' | 'resolved' | 'dismissed', required
    - `establishedAt` string, required
    - `statusAt` string, nullable, required
    - `statusActor` union, required
      - object
        - `type` 'agent', required
        - `runId` string, required
      - object
        - `type` 'human', required
        - `userId` string, required
    - `statusReason` string, nullable, required
    - `createdAt` string, required
    - `updatedAt` string, required
  - `linkedThreats` object[], required
    - `threatId` string, required
    - `threatTitle` string, required
    - `canonicalKey` string, required
    - `blocking` boolean, required
  - `reassessedThreatIds` string[], required

## Other responses

- `400`: Bad request — input validation failed or the request was malformed
- `401`: Unauthorized — missing or invalid API key / session
- `403`: Caller lacks the alert.triage permission.
- `404`: Gap not found.
- `500`: Internal server error

---

[API](https://skmtc.dev/cotool/apis/cotool-api.md) - [All operations](https://skmtc.dev/cotool/apis/cotool-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cotool/apis/cotool-api/revisions/f5abe0add203?raw)