Endpoints
| Method | Path | Role needed | Description |
|---|---|---|---|
GET | /api/organizations/{orgId}/workbench/findings | Viewer | Findings from every connected tool, with deadline status |
GET | /api/organizations/{orgId}/sla-policies | Viewer | Days to fix each severity |
PUT | /api/organizations/{orgId}/sla-policies | Admin | Set days to fix for one or more severities |
DELETE | /api/organizations/{orgId}/sla-policies/{severity} | Admin | Go back to the default for a severity |
List findings
curl "https://tierity.com/api/organizations/{orgId}/workbench/findings?severity=critical,high&status=open" \
-H "Authorization: Bearer pk_..."
Query parameters
| Parameter | Description |
|---|---|
severity | Comma-separated: critical, high, medium, low, info |
status | Comma-separated: open, fixed, ignored |
tools | Comma-separated integration keys to include, for example semgrep,wiz |
limit | Maximum findings to return. Default 200, maximum 500. |
Response
Findings are sorted by severity, with breached deadlines first within each severity.{
"findings": [
{
"id": "semgrep-1287",
"title": "SQL injection in report export",
"severity": "critical",
"source": "Semgrep",
"source_key": "semgrep",
"status": "open",
"first_seen_at": "2026-10-02T09:12:00.000Z",
"url": "https://semgrep.dev/orgs/acme/findings/1287",
"repository": "acme/api",
"file_path": "src/reports/export.ts",
"sla_days": 7,
"age_days": 9,
"sla_status": "breached"
}
],
"total": 1,
"sla_policies": { "critical": 7, "high": 14, "medium": 30, "low": 90 }
}
| Field | Description |
|---|---|
sla_days | Days allowed for this finding’s severity |
age_days | Days since the finding was first seen |
sla_status | ok, at_risk (close to its deadline) or breached |
url | Link to the finding in the tool that raised it |
Set SLA policies
curl -X PUT https://tierity.com/api/organizations/{orgId}/sla-policies \
-H "Authorization: Bearer pk_..." \
-H "Content-Type: application/json" \
-d '[{"severity": "critical", "days": 7}, {"severity": "high", "days": 30}]'