Ticket tools

Four tools over agentic violation tickets — the work items created from findings.

list_agentic_tickets

List agentic violation tickets for an organization, with optional filters and forward pagination.

Name	Type	Required	Notes
organization_id	string	yes
project_id	string	no	Omit to list across all projects in the organization.
status	enum	no	BACKLOG | TODO | IN_PROGRESS | DONE | WONT_FIX.
platform	enum	no	web | ios | android | unity | unknown.
priority	enum	no	P0 | P1 | P2 | P3.
first	number	no	Page size. Default 20, max 100.
after	string	no	Cursor from the previous page’s pageInfo.endCursor.

Two defaults you cannot change from here, because the tool exposes no argument for either:

• Production only. Tickets whose findings come from other deployments — a pull-request scan, for instance — are not in this list. To see those, use the environment filter in the dashboard.
• Needs-attention order. Results arrive worst-first by that ranking, not newest-first. There is no sort argument.

Returns: { tickets, totalCount, pageInfo }. Each ticket carries evidence, recommendation, screenshotKey, journeyStep and fixedAt alongside the summary fields, so an evidence export reads them off the page rather than calling get_agentic_ticket per ticket. The fields get_agentic_ticket adds on top are reasoning, updatedAt, and the organization and project names.

Returns an error block if your credential cannot reach that organization. Enumerated values are listed in full in Vocabularies.

get_agentic_ticket

Get full details of a single agentic violation ticket.

Name	Type	Required
organization_id	string	yes
ticket_id	string	yes

Returns: the ticket. Error block reading Agentic ticket "<id>" not found otherwise.

update_agentic_ticket_status

Update the status of an agentic violation ticket.

Name	Type	Required	Notes
organization_id	string	yes
ticket_id	string	yes
status	enum	yes	BACKLOG | TODO | IN_PROGRESS | DONE | WONT_FIX.

Returns: the updated ticket — id, status, fixedAt, updatedAt.

assign_agentic_ticket

Assign an agentic violation ticket to a user.

Name	Type	Required	Notes
organization_id	string	yes
ticket_id	string	yes
assignee_id	string	no	User id. Omit to unassign.

The assignee is a user id. Note that get_organization’s members[].id is the membership id, not the user id, so it is not the value to pass here; get_viewer returns the calling user’s own id.

Returns: the updated ticket — id, its assignee (id, name, email), and updatedAt.