Skip to main content
POST
/
v1
/
findings
Create a finding
curl --request POST \
  --url http://localhost:3333/v1/findings \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "taskId": "tsk_abc123",
  "type": "soc2",
  "content": "The uploaded evidence does not clearly show the Organization Name or URL.",
  "templateId": "fnd_t_abc123"
}
'

Authorizations

​
X-API-Key
string
header
required

API key for authentication

Headers

​
X-Organization-Id
string

Organization ID (required for session auth, optional for API key auth)

Body

application/json

Finding data

​
taskId
string
required

Task ID this finding is associated with

Example:

"tsk_abc123"

​
type
enum<string>
default:soc2
required

Type of finding (SOC 2 or ISO 27001)

Available options:
soc2,
iso27001
​
content
string
required

Finding content/message

Maximum string length: 5000
Example:

"The uploaded evidence does not clearly show the Organization Name or URL."

​
templateId
string

Finding template ID (optional)

Example:

"fnd_t_abc123"

Response

The created finding