---
title: "Create an Incident Report Comment"
method: POST
path: "/v1/incident_reports/{id}/comments"
tags: ["Incident Reports"]
---

# Create an Incident Report Comment

`POST /v1/incident_reports/{id}/comments`

## Request

- Base URL: `https://api.huntress.io`
- URL: `https://api.huntress.io/v1/incident_reports/{id}/comments`
- Auth: `basic` (a scheme the document does not define)

Add a comment to an Incident Report. Comments are visible to everyone in your account who can see the report, and notify the people on your account who receive Incident Report notifications.

The Huntress SOC is not notified of comments and will not respond to them. To reach the SOC about a remediation plan, reject the plan instead.

This endpoint requires an API key with permissions to comment on incident reports. **Note that the default account API key is read-only, so you'll need to create a user-based API key with the appropriate permissions to access this endpoint**.

## Path parameters

- `id` integer, required

## Request body

- PostV1IncidentReportsIdComments: Create an Incident Report Comment
  - `body` string, required: The text of the comment. Value cannot be blank and cannot exceed 2048 characters.

## Response `201`

Create an Incident Report Comment

- object
  - `comment` Comment: Comment model
    - `id` integer: A unique identifier for a comment.
    - `body` string: The text of the comment.
    - `author` string: The name of the person who wrote the comment. Comments written by Huntress are attributed to the Huntress SOC rather than to an individual analyst.
    - `created_at` string, date-time: ISO-8601 formatted timestamp for when the comment was written.
    - `updated_at` string, date-time: ISO-8601 formatted timestamp for when the comment was last edited.

## Other responses

- `403`: There was an issue with your API credential or permissions.
- `422`: Unable to create comment.

## Changes

- **2026-09-25** `98d97bb12d17`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/huntress/apis/huntress-api-reference/changes/v1/incident_reports/:id/comments/post.md)

---

[API](https://skmtc.dev/huntress/apis/huntress-api-reference.md) - [All operations](https://skmtc.dev/huntress/apis/huntress-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/huntress/apis/huntress-api-reference/revisions/f593a257b4cc?raw)