> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corgea.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Update the triage approval policy

> Partially update the accepted-risk approval thresholds. Set a threshold to null to disable it. Company admin access is required.



## OpenAPI

````yaml /api-reference/openapi.json patch /triage/approval-policy
openapi: 3.0.0
info:
  title: Corgea API
  version: 1.0.0
  description: >-
    API for interacting with Corgea's scanning and vulnerability management
    features
servers:
  - url: https://www.corgea.app/api/v1
    description: Production server
security:
  - CorgeaToken: []
  - BearerAuth: []
paths:
  /triage/approval-policy:
    patch:
      tags:
        - Triage
      summary: Update the triage approval policy
      description: >-
        Partially update the accepted-risk approval thresholds. Set a threshold
        to null to disable it. Company admin access is required.
      operationId: updateTriageApprovalPolicy
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TriageApprovalPolicy'
      responses:
        '200':
          description: Updated approval policy
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TriageApprovalPolicyResponse'
        '400':
          description: Invalid threshold or unknown field
        '403':
          description: Company admin access is required
components:
  schemas:
    TriageApprovalPolicy:
      type: object
      additionalProperties: false
      properties:
        finding_count_threshold:
          type: integer
          minimum: 1
          nullable: true
          description: >-
            Require approval when an accepted-risk action matches at least this
            many findings.
        severity_threshold:
          type: string
          nullable: true
          enum:
            - LO
            - ME
            - HI
            - CR
            - LOW
            - MEDIUM
            - HIGH
            - CRITICAL
          description: >-
            Require approval when an accepted-risk action includes this severity
            or higher.
    TriageApprovalPolicyResponse:
      type: object
      properties:
        status:
          type: string
          example: ok
        policy:
          $ref: '#/components/schemas/TriageApprovalPolicy'
  securitySchemes:
    CorgeaToken:
      type: apiKey
      in: header
      name: CORGEA-TOKEN
      description: API key for authentication
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: OAuth2 access token (JWT) in the Authorization header

````