---
title: "POST /monitoring/claim-pending"
method: POST
path: "/monitoring/claim-pending"
tags: ["monitoring"]
---

# POST /monitoring/claim-pending

`POST /monitoring/claim-pending`

## Request body

- ClaimPendingRequest
  - `watchId` string, nullable

## Response `200`

Verified pending watches transferred, possibly partially

- ClaimPendingResponse
  - `alertId` string, nullable
  - `alreadyOwned` integer, required
  - `busy` integer, required
  - `claimed` integer, required — Newly transferred pending rows, including watches already owned.
  - `contextMatched` boolean, required
  - `deferred` integer, required
  - `failed` integer, required

## Other responses

- `403` — Verified browser session required
- `500` — Transfer failed; no changes committed

## Changes

- **2026-09-11** `76ed7a38ded1` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/monitoring/claim-pending/post.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/76ed7a38ded1?raw)