Skip to content

My Comments page — user's comments across accessible projects

GET
/users/{userId}/comments

Returns paginated comments authored by the specified user across all projects the requesting user can access. Scoped by project visibility, not identity — this is a filtered view, not a privacy boundary. Supports triage status filtering, project filtering, and pagination.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Parameters

Query Parameters

triage_status

Filter the user's comments by triage disposition. Absent or "all" returns comments in any status — this page has no default filter.

Type
string
Valid values
"all""pending""concur""concur_with_comment""non_concur""duplicate""informational""needs_clarification""withdrawn""addressed_by"
Example"concur"
Default
"all"
page

Page number for paginated results (1-based).

Type
integer
Example1
Minimum
1
Default
1
per_page

Number of items to return per page.

Type
integer
Example25
Minimum
1
Maximum
1000
Default
25
project_id

Filter comments to a specific project.

Type
integer
Example3

Responses

Paginated user comments with project/component context

application/json
JSON
{
  
"rows": [
  
  
{
  
  
  
"id": 29,
  
  
  
"project_id": 3,
  
  
  
"project_name": "vSphere 7.0",
  
  
  
"component_id": 4,
  
  
  
"component_name": "Photon OS 3",
  
  
  
"rule_id": 2397,
  
  
  
"rule_displayed_name": "PHOS-03-000039",
  
  
  
"commentable_type": "BaseRule",
  
  
  
"section": "fixtext",
  
  
  
"comment": "vSphere 7.0: fix command targets ESXi 6.7 path.",
  
  
  
"created_at": "2026-05-19 14:08:18 UTC",
  
  
  
"triage_status": "pending",
  
  
  
"responses_count": 0,
  
  
  
"reactions": {
  
  
  
  
"up": 0,
  
  
  
  
"down": 0,
  
  
  
  
"mine": null
  
  
  
}
  
  
}
  
],
  
"pagination": {
  
  
"page": 1,
  
  
"per_page": 25,
  
  
"total": 12
  
}
}

Playground

Server
Authorization
Variables
Key
Value

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)