What this endpoint does

Retrieves lightweight metadata for a single Playbook Alert without the detailed evidence panels. This is a category-agnostic endpoint — it works for any alert type (domain abuse, vulnerability, identity exposure, etc.) and returns only the common properties: status, priority, category, title, assignee, timestamps, and organization details. Use this for quick status checks or to determine an alert's category before calling the appropriate category-specific Detail endpoint (e.g., Playbook Alerts: Domain Abuse Detail, Playbook Alerts: Vulnerability Detail) for full evidence. The Playbook Alerts: Search endpoint returns these same common fields for multiple alerts at once.

Response data

The response contains a single alert object with the common properties shared across all alert types: the alert's status (New, InProgress, Dismissed, Resolved), priority (Informational, Moderate, High), category identifier, title, creation and update timestamps, assignee information, the monitoring rule ID that generated the alert, organization ownership details, and any remediation actions taken. No evidence panels, investigation data, or change logs are included — use the category-specific Detail or Bulk endpoints for those.