Skip to content

List replies to a review

GET
/reviews/{reviewId}/responses

Returns threaded replies to a parent review, ordered by creation time. Each reply is serialized via ReviewBlueprint with commenter attribution, reaction counts, and the current user's reaction.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Responses

Reply thread

application/json
JSON
{
  
"rows": [
  
  
{
  
  
  
"id": 1,
  
  
  
"action": "comment",
  
  
  
"comment": "The check says "verify that TLS 1.2 or greater is being used" but does not specify HOW to verify.",
  
  
  
"created_at": "2026-05-19 14:08:17 UTC",
  
  
  
"triage_status": "pending",
  
  
  
"triage_set_at": "string",
  
  
  
"adjudicated_at": "string",
  
  
  
"rule_id": 2976,
  
  
  
"section": "check_content",
  
  
  
"responding_to_review_id": 0,
  
  
  
"duplicate_of_review_id": 0,
  
  
  
"addressed_by_rule_id": 0,
  
  
  
"triage_set_by_id": 0,
  
  
  
"name": "Demo Viewer",
  
  
  
"author_name": "Demo Viewer",
  
  
  
"triager_display_name": "string",
  
  
  
"triager_imported": false,
  
  
  
"adjudicator_display_name": "string",
  
  
  
"adjudicator_imported": false,
  
  
  
"commenter_display_name": "Demo Viewer",
  
  
  
"commenter_imported": false,
  
  
  
"commentable_type": "BaseRule",
  
  
  
"responses_count": 0,
  
  
  
"rule_displayed_name": "PHOS-03-000001",
  
  
  
"author_email": "string",
  
  
  
"commenter_email": "string",
  
  
  
"reactions": {
  
  
  
  
"up": 1,
  
  
  
  
"down": 0,
  
  
  
  
"mine": "string"
  
  
  
}
  
  
}
  
]
}

Playground

Server
Authorization

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)