---
title: "Add remediation request to threat"
method: POST
path: "/threatmonitoring/threat/remediation_request/add"
tags: ["threatmonitoring"]
---

# Add remediation request to threat

`POST /threatmonitoring/threat/remediation_request/add`

## Request

- Base URL: `https://cyber-risk.upguard.com/api/public`
- URL: `https://cyber-risk.upguard.com/api/public/threatmonitoring/threat/remediation_request/add`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/docs/threatmonitoring/threat/remediation_request/add/post.ts> (a function with typed inputs; its response is checked against the schema)

Creates a remediation request for a specific threat, identified by UUID, and places the threat into the remediation state. The remediation request is assigned to the specified email address.

Required API key permissions: `BreachRisk` (select when creating API key in Account Settings)

## Query parameters

- `uuid` string, uuid, required
- `email` string, required
- `title` string
- `due_date` string, date-time
- `reminder_date` string, date-time
- `copy_threat_comments` boolean

## Request body

- CreateThreatRemediationRequestV1RequestBody: CreateThreatRemediationRequestV1RequestBody represents the request body for creating a remediation request
  - `email_message` string: Optional email message to include when inviting the user. Must not exceed 4000 characters.

## Response `200`

The remediation request that was created

- CreateThreatRemediationRequestV1ResponsePayloadBody
  - `remediation_request_id` integer: The ID of the created remediation request
  - `status` string: The status of the threat after being placed into remediation
  - `threat_uuid` string: The UUID of the threat that was placed into remediation

## Other responses

- `400`: The request was malformed (e.g. invalid JSON body)
- `404`: There was a problem with the request
- `422`: An invalid parameter was supplied or a mandatory parameter was missing
- `429`: Too many requests have been made to this endpoint.
- `500`: An internal system error occurred

## Changes

- **2026-11-07** `d044bf6dc61e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/changes/threatmonitoring/threat/remediation_request/add/post.md)

---

[API](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api.md) - [All operations](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/llms.txt) - [OpenAPI document](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/revisions/d044bf6dc61e?raw)