---
title: "Move a report between triage states"
method: PATCH
path: "/abuse-reports/{id}/status"
tags: ["Abuse Reports"]
---

# Move a report between triage states

`PATCH /abuse-reports/{id}/status`

## Request

- Base URL: `https://api.nippy.host`
- URL: `https://api.nippy.host/abuse-reports/{id}/status`
- Auth: `bearer` (a scheme the document does not define)

Admin-only. Leaving `open` stamps the acting admin and time; moving back to `open` (reopening) clears them.

## Path parameters

- `id` string, required

## Request body

- UpdateAbuseReportStatusDto
  - `status` 'open' | 'resolved' | 'dismissed', required: New triage status. Moving out of `open` stamps the acting admin and time; moving back to `open` clears them.

## Response `200`

- APIAbuseReport
  - `id` string, required: Report id (UUID).
  - `category` 'phishing' | 'malware' | 'csam' | 'copyright' | 'spam' | 'other', required: Reported abuse category.
  - `reportedUrl` string, required: URL of the offending content, as submitted.
  - `description` string, required: Reporter’s free-text explanation.
  - `reporterEmail` string, nullable, required: Reporter email, when supplied.
  - `reporterName` string, nullable, required: Reporter name, when supplied.
  - `siteId` string, nullable, required: The site the reported URL matched at submit time — null when the URL was not on the public host or matched nothing.
  - `subdomain` string, nullable, required: Write-time snapshot of the matched site’s subdomain.
  - `siteStatus` 'pending' | 'awaiting_verification' | 'live' | 'inactive' | 'suspended', nullable, required: Current status of the matched site — null when the report matched no site or the site has since been deleted.
  - `status` 'open' | 'resolved' | 'dismissed', required: Triage status.
  - `resolvedByUserId` string, nullable, required: Admin who last moved the report out of `open`.
  - `resolvedAt` string, nullable, required: When the report left `open` (ISO 8601).
  - `createdAt` string, required: Submission time (ISO 8601).

## Other responses

- `403`: Admin access required
- `404`: Report not found

---

[API](https://skmtc.dev/nippy/apis/nippy-backend-api.md) · [All operations](https://skmtc.dev/nippy/apis/nippy-backend-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nippy/apis/nippy-backend-api/revisions/7ab23f040a55?raw)