> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Findings and SLAs

> Read findings from every connected tool with their deadlines, and set the SLA policy for each severity.

## Endpoints

| Method | Path | Role needed | Description |
| - | - | - | - |
| `GET` | `/api/organizations/{orgId}/workbench/findings` | Viewer | Findings from every connected tool, with deadline status |
| `GET` | `/api/organizations/{orgId}/sla-policies` | Viewer | Days to fix each severity |
| `PUT` | `/api/organizations/{orgId}/sla-policies` | Admin | Set days to fix for one or more severities |
| `DELETE` | `/api/organizations/{orgId}/sla-policies/{severity}` | Admin | Go back to the default for a severity |

## List findings

```bash theme={null}
curl "https://tierity.com/api/organizations/{orgId}/workbench/findings?severity=critical,high&status=open" \
  -H "Authorization: Bearer pk_..."
```

### Query parameters

| Parameter | Description |
| - | - |
| `severity` | Comma-separated: `critical`, `high`, `medium`, `low`, `info` |
| `status` | Comma-separated: `open`, `fixed`, `ignored` |
| `tools` | Comma-separated integration keys to include, for example `semgrep,wiz` |
| `limit` | Maximum findings to return. Default 200, maximum 500. |

### Response

Findings are sorted by severity, with breached deadlines first within each severity.

```json theme={null}
{
  "findings": [
    {
      "id": "semgrep-1287",
      "title": "SQL injection in report export",
      "severity": "critical",
      "source": "Semgrep",
      "source_key": "semgrep",
      "status": "open",
      "first_seen_at": "2026-10-02T09:12:00.000Z",
      "url": "https://semgrep.dev/orgs/acme/findings/1287",
      "repository": "acme/api",
      "file_path": "src/reports/export.ts",
      "sla_days": 7,
      "age_days": 9,
      "sla_status": "breached"
    }
  ],
  "total": 1,
  "sla_policies": { "critical": 7, "high": 14, "medium": 30, "low": 90 }
}
```

| Field | Description |
| - | - |
| `sla_days` | Days allowed for this finding's severity |
| `age_days` | Days since the finding was first seen |
| `sla_status` | `ok`, `at_risk` (close to its deadline) or `breached` |
| `url` | Link to the finding in the tool that raised it |

## Set SLA policies

```bash theme={null}
curl -X PUT https://tierity.com/api/organizations/{orgId}/sla-policies \
  -H "Authorization: Bearer pk_..." \
  -H "Content-Type: application/json" \
  -d '[{"severity": "critical", "days": 7}, {"severity": "high", "days": 30}]'
```

Severities you leave out keep their current value. The defaults are 7 days for critical, 14 for high, 30 for medium and 90 for low.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.