What this endpoint does

Retrieves a lightweight, category-agnostic summary of a single Playbook Alert. Use Playbook Alerts: Search to discover alert IDs. This endpoint returns only common properties — no evidence panels, CVE data, DNS records, or credential details. Useful for checking current status, assignee, or priority without a full category-specific lookup, or for routing alerts whose category you haven't yet determined to the correct detail endpoint.

For full evidence data, use the category-specific endpoint matching the alert's category field (e.g., domain_abuse → Domain Abuse Detail, malware_report → Malware Report Detail).

Response data

Returns a single alert summary with status, priority, category, title, timestamps, assignee, and actions taken — but no evidence panels. Use this to decide which category-specific detail endpoint to call next.