> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neo.projectdiscovery.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Look up triage status by report id

> Return Neo triage status for one or more reports in your team. Pass either `external_id` (single) or `external_ids` (up to 20). Do not combine both. The response always includes a results array. A single unknown id returns 404; in bulk requests, unknown ids appear as null entries.




## OpenAPI

````yaml https://neo.api.projectdiscovery.io/api/openapi.json get /api/v1/triage
openapi: 3.1.0
info:
  contact:
    name: ProjectDiscovery
    url: https://neo.projectdiscovery.io
  description: Neo API Server - Security agent orchestration platform
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  title: Neo API
  version: 1.0.0
servers:
  - description: Production
    url: https://neo.api.projectdiscovery.io
  - description: Development
    url: https://neo.api.dev.projectdiscovery.io
  - description: Local development
    url: http://localhost:8080
security: []
tags:
  - description: Task execution and management
    name: Tasks
  - description: Agent listing and management
    name: Agents
  - description: Public agent directory
    name: Agent Directory
  - description: User file storage management
    name: Files
  - description: User working memory management
    name: Memory
  - description: Scheduled and recurring task management
    name: Schedules
  - description: Knowledge base and semantic search
    name: Knowledge
  - description: Encrypted user credentials and API keys
    name: Secrets
  - description: Neo API key management for programmatic access
    name: API Keys
  - description: User profile and account information
    name: User
  - description: Task and LLM usage tracking
    name: Usage
  - description: Bring Your Own Key provider management
    name: BYOK
  - description: Model discovery and capabilities
    name: Models
  - description: Third-party integrations
    name: Integrations
  - description: Skill knowledge documents for agent prompts
    name: Skills
  - description: Team management and member invitations
    name: Teams
  - description: Prompt library management and discovery
    name: Prompts
  - description: Slack bot integration for workspace installation and OAuth
    name: Slack
  - description: GitHub integration for PR reviews and repository management
    name: GitHub
  - description: Vulnerability issue tracking and management
    name: Issues
  - description: Subscription billing and plans
    name: Billing
  - description: Project management and member assignments
    name: Projects
  - description: SSH key pair generation and management for remote server access
    name: SSH Keys
  - description: Codebase structural analysis and mapping
    name: Codemaps
  - description: AI-generated codebase documentation and security analysis
    name: CodeWiki
  - description: Captured HTTP traffic query and replay
    name: Network Events
  - description: Vulnerability triage for HackerOne, GitHub, and Security Inbox
    name: Triage
  - description: >-
      Application-internal endpoints used by the Neo UI. Not part of the public
      customer API surface.
    name: Internal
paths:
  /api/v1/triage:
    get:
      tags:
        - Triage
      summary: Look up triage status by report id
      description: >
        Return Neo triage status for one or more reports in your team. Pass
        either `external_id` (single) or `external_ids` (up to 20). Do not
        combine both. The response always includes a results array. A single
        unknown id returns 404; in bulk requests, unknown ids appear as null
        entries.
      operationId: get-v1-triage
      parameters:
        - description: Report source — HackerOne, GitHub, or Security Inbox (Gmail)
          in: query
          name: source
          required: true
          schema:
            enum:
              - hackerone
              - github
              - gmail
            type: string
        - description: >
            One report id (HackerOne report id, GitHub security advisory id, or
            Gmail thread id). Do not combine with external_ids.
          in: query
          name: external_id
          required: false
          schema:
            minLength: 1
            type: string
        - description: Up to 20 report ids. Do not combine with external_id.
          explode: true
          in: query
          name: external_ids
          required: false
          schema:
            items:
              minLength: 1
              type: string
            maxItems: 20
            type: array
          style: form
        - description: >
            Optional scope hint when disambiguating a match — program handle,
            GitHub owner/repo, or mailbox email.
          in: query
          name: context
          required: false
          schema:
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TriageHandoffBulkResponse'
          description: Triage status for the requested report id(s)
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Invalid query parameters
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Authentication required
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: No triage run found for this report (single external_id only)
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Unexpected server error
      security:
        - BearerAuth: []
        - ApiKeyAuth: []
components:
  schemas:
    TriageHandoffBulkResponse:
      properties:
        results:
          items:
            $ref: '#/components/schemas/TriageHandoffBulkItem'
          type: array
      required:
        - results
      type: object
    ErrorResponse:
      properties:
        code:
          description: >
            Stable machine-readable error code — branch on this rather than

            matching the human `error`/`message` strings. Domain codes include

            `user_spending_cap_reached`, `project_spending_cap_reached`, and

            `insufficient_neo_credits`; otherwise it mirrors the error kind

            (e.g. `forbidden`, `invalid_request`, `not_exists`,
            `already_exists`).
          example: user_spending_cap_reached
          type: string
        error:
          example: Bad request
          type: string
        error_id:
          description: Correlation id for a specific error instance, when present.
          type: string
        kind:
          description: Coarse error category (e.g. "forbidden request", "invalid request").
          example: forbidden request
          type: string
        message:
          description: |
            Human-readable detail (the kind prefixed to the error). For display,
            not for branching.
          type: string
      required:
        - error
      type: object
    TriageHandoffBulkItem:
      properties:
        external_id:
          type: string
        handoff:
          allOf:
            - $ref: '#/components/schemas/TriageHandoff'
          description: Null when no triage run exists for this report on your team.
          nullable: true
      required:
        - external_id
      type: object
    TriageHandoff:
      properties:
        completed_at:
          format: date-time
          nullable: true
          type: string
        context:
          description: >
            Optional scope for display — program handle, owner/repo, or mailbox
            email.
          nullable: true
          type: string
        created_at:
          format: date-time
          type: string
        external_id:
          description: >
            HackerOne report id, GitHub security advisory id, or Gmail thread
            id.
          type: string
        internal_summary:
          description: |
            Team-facing triage write-up when available (typically HackerOne).
          nullable: true
          type: string
        source:
          description: Where the report came from.
          enum:
            - hackerone
            - github
            - gmail
          type: string
        suggested_response:
          nullable: true
          type: string
        task_id:
          description: Neo task id for this triage run.
          format: uuid
          type: string
        task_status:
          enum:
            - pending
            - active
            - completed
            - error
            - aborted
            - suspended
          nullable: true
          type: string
        triage_severity:
          enum:
            - none
            - low
            - medium
            - high
            - critical
            - unknown
          nullable: true
          type: string
        triage_status:
          enum:
            - valid
            - need_more_info
            - duplicate
            - informative
            - not_applicable
            - spam
            - unknown
          nullable: true
          type: string
        triaged_by_email:
          nullable: true
          type: string
      required:
        - source
        - external_id
        - task_id
        - created_at
      type: object
  securitySchemes:
    BearerAuth:
      bearerFormat: JWT
      description: JWT authentication token
      scheme: bearer
      type: http
    ApiKeyAuth:
      description: Neo API key (neo_sk_* prefix)
      in: header
      name: X-Api-Key
      type: apiKey

````