Posts

Take a live post down

From every platform, or only variant_ids. Always asks a person: the answer is the approval request.

POSThttps://traceeai.com/api/v1/posts/{post_id}/unpublish

CLI:tracee posts unpublish·MCP:postsaction unpublish

Authorizations

  • Authorizationstringheaderrequired

    Bearer <key>: a personal key (tracee login or Settings → Personal keys), a workspace key, or an MCP client's OAuth token. See Authentication.

Headers

  • Tracee-Workspacestring

    For a personal key or OAuth token that reaches several workspaces: the workspace id to act on. Workspace keys don't need it.

    uuid

Path parameters

  • post_idstringrequired

    The post, from GET /api/v1/posts (or the id POST /api/v1/posts returns)

    uuid

Body

application/json
  • variant_idsstring[]

    Unpublish only these variants. From GET /api/v1/posts/{post_id} post_id=<post_id> (variants[].id).

    each uuid

  • notestring

    Context for the approver

    up to 500 characters

Response

  • 200Already done.

    The action's result, exactly as the MCP tool returns it to agents. A next field, when present, names the endpoint that follows up.

  • 202Started or still running: follow it with the id in the answer.

    The action's result, exactly as the MCP tool returns it to agents. A next field, when present, names the endpoint that follows up.