---
title: "Bulk Update Risk Status"
method: POST
path: "/risks/bulk/status"
tags: ["risks"]
---

# Bulk Update Risk Status

`POST /risks/bulk/status`

## Request

- Base URL: `https://api.kobaltlabs.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.kobaltlabs.com/risks/bulk/status`
- Auth: none declared

Dismiss several risks with one reason and note.

Restricted to ``dismissed``: bulk flag/clear is not a product action, and
this path skips issue-creation and the flagged-after-ignore email that the
single-risk status write still owns. TipTap seeding matches the card dismiss
because both call ``apply_status_change``. When ``selection`` is present
(Select area), the drawn box is stored as training data in the same
transaction; the server still does not re-hit-test geometry.

## Request body

- BulkRiskStatusRequest: Dismiss (or otherwise set status on) several risks in one request. ``selection`` is the drawn PDF area when the client is Select area; omitted for any other bulk caller. Cap and uniqueness are enforced in the handler so a 400 names the rule instead of a 422's error list.
  - `risk_ids` string[], required
  - `status_value` string, required
  - `dismiss_reason` string, nullable
  - `dismiss_note` string, nullable
  - `selection` RiskAreaSelection: The PDF region a reviewer drew for a bulk dismiss / ignore. Coordinates are viewer-rotated PDF points (top-left origin, ``/Rotate`` applied) — the same space citation bounding boxes use. The server stores this as training data and does not re-hit-test it.
    - `document_id` string, uuid, required
    - `page_number` integer, required
    - `bounding_box` BoundingBox, required
      - `x0` number, required
      - `y0` number, required
      - `x1` number, required
      - `y1` number, required

## Response `200`

Successful Response

- BulkRiskMutationResponse: How many risks a bulk dismiss or ignore actually wrote.
  - `updated_count` integer, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/kobaltlabs/apis/kobaltlabs-api.md) - [All operations](https://skmtc.dev/kobaltlabs/apis/kobaltlabs-api/llms.txt) - [OpenAPI document](https://skmtc.dev/kobaltlabs/apis/kobaltlabs-api/revisions/8587332d5e43?raw)