Mark action on event

Records an action on a leak event (e.g. resolved, ignored, investigating). The event status is updated and the action is written to the audit trail.

POST/v1/leak-events/{eventId}/actions

POSTMark action on event

curl -X POST "https://api.darkradar.com/api/public/v1/leak-events/507f1f77bcf86cd799439011/actions" \
  -H "x-api-key: $DARKRADAR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"actionType":"resolve","notes":"Parola sıfırlandı"}'

Response

Success

{
  "success": true,
  "message": "OK",
  "data": {
    "action": {
      "eventId": "64b1f0c2a9e4d21f8c3b9005",
      "status": "solved",
      "actionTaken": true,
      "actionType": "resolve",
      "actionTakenAt": "2026-09-19T10:48:12.402Z",
      "leakType": "email",
      "type": "employee",
      "severity": "high",
      "eventDate": "2026-09-18T14:54:04.834Z"
    }
  }
}

Access

Scopeleak-events:write

Plan entitlementapi_access

Path parameters

Fields	Values
`eventId` · string · required	Unique identifier of the leak event · Example: `507f1f77bcf86cd799439011`

Request body

Fields	Values
`actionType` · string · required	Action taken · Values: acknowledge, resolve, alert, false-positive, reopen, block
`notes` · string · optional	Note
`metadata` · object · optional	Free-form metadata

Responses

200Success

400Invalid request (malformed id, missing or invalid field)

401Key missing, invalid, expired or revoked

403Insufficient scope, no API access in plan, or product not enabled

404Record not found or not owned by this key’s firm

408The request exceeded its maximum response time

429Rate limit exceeded; retry after a minute

Response limits

Rate limit500 requests per 15 min · per IP