Posts
Take a live post down
From every platform, or only variant_ids. Always asks a person: the answer is the approval request.
https://traceeai.com/api/v1/posts/{post_id}/unpublishCLI:tracee posts unpublish·MCP:postsaction unpublish
Authorizations
AuthorizationstringheaderrequiredBearer <key>: a personal key (tracee loginor Settings → Personal keys), a workspace key, or an MCP client's OAuth token. See Authentication.
Headers
Tracee-WorkspacestringFor a personal key or OAuth token that reaches several workspaces: the workspace id to act on. Workspace keys don't need it.
uuid
Path parameters
post_idstringrequiredThe post, from GET /api/v1/posts (or the id POST /api/v1/posts returns)
uuid
Body
variant_idsstring[]Unpublish only these variants. From GET /api/v1/posts/{post_id} post_id=<post_id> (variants[].id).
each uuid
notestringContext for the approver
up to 500 characters
Response
- 200Already done.
The action's result, exactly as the MCP tool returns it to agents. A
nextfield, when present, names the endpoint that follows up. - 202Started or still running: follow it with the id in the answer.
The action's result, exactly as the MCP tool returns it to agents. A
nextfield, when present, names the endpoint that follows up.