POST /v1/admin/alerts/{alert_id}/ack

Acknowledge an open alert (master-key auth; admin-worker only).

What this is

Marks an open alert as acknowledged (acknowledged = 1) so it disappears from the admin-dashboard’s “active alerts” view. Idempotent — set-bit-to-1 is a low-blast-radius operation; no typed-confirm UI required.

Phase 2.2.5 placeholder state: scoring-api returns 501 on auth-success until admin-dashboard plan PR ships. Auth gate active.

Authentication

X-API-Key: $MASTER_ADMIN_KEY_ALERT_ACK — admin-worker only.

Idempotency

Idempotency-Key required (uuid generated client-side per click).

Rate limiting

• Layer 1: enforced.
• Layer 2: bypassed.

Request

curl -X POST https://api.cohesionauth.com/v1/admin/alerts/alt_xyz_123/ack \
  -H "X-API-Key: $MASTER_ADMIN_KEY_ALERT_ACK" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: example-alert-ack-key-001" \
  -d '{
    "idempotency_key": "example-alert-ack-key-001"
  }'

Response (post-implementation)

{
  "acknowledged": true,
  "alert_id": "alt_xyz_123",
  "acknowledged_at": "2026-05-03T06:00:00.000Z",
  "request_id": "req_01H...",
  "timestamp": "2026-05-03T06:00:00.000Z"
}

Errors