---
title: "Start an asynchronous deep investigation"
method: POST
path: "/api/sre/investigate"
tags: ["AI SRE"]
---

# Start an asynchronous deep investigation

`POST /api/sre/investigate`

## Request

- Base URL: `https://demo.supercheck.dev`
- URL: `https://demo.supercheck.dev/api/sre/investigate`
- Auth: HTTP bearer

Returns a durable investigationRunId before background execution finishes. Poll the incident details to review the run status and saved result. Live connectors require explicit opt-in and connector investigation permission.

## Request body

- object
  - `incidentId` string, uuid, required
  - `useLiveConnectors` boolean
  - `guidance` string: Optional one-line note for a re-run. Treated as untrusted guidance and truncated to 500 characters.

## Response `202`

Investigation accepted

- object
  - `success` true, required
  - `accepted` true, required
  - `investigationRunId` string, uuid, required

## Other responses

- `400`: Invalid investigation request
- `401`: Authentication required
- `402`: Execution access denied
- `403`: Insufficient permissions or invalid request origin
- `404`: Incident not found
- `409`: An investigation is already running for this incident
- `429`: Rate limited
- `503`: Feature disabled or temporarily unavailable

## Changes

- **2026-10-27** `b62c471d3cde`: 1 info
  - added the new optional request property `guidance`
- **2026-10-01** `0114b54c259d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/supercheck-io/apis/supercheck-api/changes/api/sre/investigate/post.md)

---

[API](https://skmtc.dev/supercheck-io/apis/supercheck-api.md) - [All operations](https://skmtc.dev/supercheck-io/apis/supercheck-api/llms.txt) - [OpenAPI document](https://skmtc.dev/supercheck-io/apis/supercheck-api/revisions/7fa0162c07bd?raw)