Skip to main content
POST
Bulk close cases

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
verdict
enum<string>
required

Verdict to apply to all cases

Available options:
MALICIOUS,
SUSPICIOUS,
BENIGN
caseIds
string[]

Explicit list of case IDs to close

filter
object

Filter to match cases (alternative to caseIds)

excludedCaseIds
string[]

Case IDs to exclude when using filter mode

Response

jobId
string
required

Bulk job ID for polling

totalCount
number
required

Total number of cases to close