---
title: "List Incident Report Comments"
method: GET
path: "/v1/incident_reports/{id}/comments"
tags: ["Incident Reports"]
---

# List Incident Report Comments

`GET /v1/incident_reports/{id}/comments`

## Request

- Base URL: `https://api.huntress.io`
- URL: `https://api.huntress.io/v1/incident_reports/{id}/comments`
- Auth: `basic` (a scheme the document does not define)

Shows the comments on a single Incident Report.

## Path parameters

- `id` integer, required

## Query parameters

- `limit` integer
- `page_token` string
- `sort_field` 'id' | 'created_at' | 'updated_at'
- `sort_direction` 'asc' | 'desc'

## Response `200`

List Incident Report Comments

- object
  - `comments` Comment[], required
    - `id` integer: A unique identifier for a comment.
    - `body` string: The text of the comment.
    - `author` string: The name of the person who wrote the comment. Comments written by Huntress are attributed to the Huntress SOC rather than to an individual analyst.
    - `created_at` string, date-time: ISO-8601 formatted timestamp for when the comment was written.
    - `updated_at` string, date-time: ISO-8601 formatted timestamp for when the comment was last edited.
  - `pagination` Pagination, required: Pagination model
    - `next_page_url` string
    - `next_page_token` string

## Other responses

- `403`: There was an issue with your API credential or permissions.

## Changes

- **2026-09-25** `98d97bb12d17`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/huntress/apis/huntress-api-reference/changes/v1/incident_reports/:id/comments/get.md)

---

[API](https://skmtc.dev/huntress/apis/huntress-api-reference.md) - [All operations](https://skmtc.dev/huntress/apis/huntress-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/huntress/apis/huntress-api-reference/revisions/f593a257b4cc?raw)