---
title: "Mark a finding as an exception so it no longer appears in the active Scan Results list"
method: POST
path: "/v1/cloud-security/findings/{findingId}/exception"
tags: ["CloudSecurity"]
---

# Mark a finding as an exception so it no longer appears in the active Scan Results list

`POST /v1/cloud-security/findings/{findingId}/exception`

Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the org's owner and the audit log description records the calling key/service name.

## Path parameters

- `findingId` string, required

## Request body

- MarkExceptionDto
  - `reason` string, required — Documentation for why this finding does not apply or is being accepted. Minimum 20 non-whitespace characters.
  - `reviewedBy` string — Free-text reviewer or approval reference.
  - `expiresAt` string — ISO date when this exception should auto-expire. Null/missing = never.

## Response `201`

---

[API](https://skmtc.net/trycompai/apis/comp-ai-api.md) · [All operations](https://skmtc.net/trycompai/apis/comp-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/trycompai/comp-ai-api/revisions/726b9523fb22/schema)