> ## Documentation Index
> Fetch the complete documentation index at: https://docs.msportal.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Update assigned checks in bulk

> Update one to 25 assigned checks in one call (status, public/private notes, priority, flag, due date). Each check succeeds or fails on its own; failures are listed next to the updated checks. Company users cannot set internal notes. Scope compliance.write; permission write_compliance.



## OpenAPI

````yaml /openapi.json patch /api/public/v1/compliance/checks
openapi: 3.0.3
info:
  title: MSPortal Public API
  version: 1.0.0
  description: >-
    Public API for MSPortal - provides programmatic access to tenant data.


    ## Authentication


    All endpoints require authentication via API key passed as a Bearer token:


    ```

    Authorization: Bearer <your-api-key>

    ```


    API keys can be created in the MSPortal dashboard under Settings →
    Integrations → API Access.


    **Important:** Do not include cookies in API requests. The public API uses
    stateless authentication only.


    ## Scopes


    API keys are granted specific scopes that determine what operations they can
    perform. Each endpoint documents its required scope(s).


    ## Rate Limiting


    API calls are rate limited per API key. Rate limit information is returned
    in response headers:


    - `X-RateLimit-Limit`: Maximum requests per minute

    - `X-RateLimit-Remaining`: Remaining requests in current window

    - `X-RateLimit-Reset`: When the rate limit resets (ISO 8601)


    ## Request ID


    All responses include an `X-Request-Id` header for debugging and support.
    You can also pass your own `X-Request-Id` header to correlate requests.
  contact:
    name: MSPortal Support
    email: support@msportal.ai
  license:
    name: Proprietary
servers:
  - url: https://app.msportal.ai
    description: Production (US)
  - url: https://eu.msportal.ai
    description: Production (EU)
security:
  - BearerAuth: []
tags:
  - name: Budgets
    description: >-
      Budget management - create, track, and forecast budgets with line items,
      categories, and products
  - name: Calendar
    description: Calendar and meeting management - events, participants, and meeting types
  - name: Companies
    description: Company management endpoints
  - name: Company Users
    description: Company user management - client portal contacts (read-only, paginated)
  - name: Compliance
    description: Compliance check management - runs, assigned checks, and status updates
  - name: Dashboards
    description: Dashboard management - external iframe resources and internal dashboards
  - name: Devices
    description: Device management - inventory, types, and locations
  - name: Goals
    description: Goal management - create, track, and manage goals with tasks and updates
  - name: NPS Surveys
    description: >-
      NPS survey management - Net Promoter Score surveys, responses, and
      analytics
  - name: Reports
    description: >-
      Report management - create, manage, and schedule reports with templates
      and types
  - name: Planner
    description: >-
      Planner item management - tasks, roadmap items, and project planning with
      linked goals, compliance, and projects
  - name: Surveys
    description: >-
      General survey management - multi-question surveys, responses, and
      statistics
  - name: Tickets
    description: Ticket management - view and filter tickets from PSA integrations
  - name: Training
    description: >-
      Training management - courses, enrollments, certificates, and progress
      tracking
  - name: Users
    description: Tenant user management - internal staff and team members (read-only)
  - name: Automation Rules
    description: >-
      Automation rule management - create, configure, and monitor automation
      rules with triggers, conditions, and actions
  - name: Analytics
    description: >-
      Analytics and reporting - company audit data, training analytics, user
      activity, and portfolio metrics
  - name: Client Onboarding
    description: >-
      Client onboarding - portals (phases, tasks, contacts, activation),
      templates, checklist templates, forms and documentation pages
  - name: Backup
    description: >-
      Backup - summaries, protected devices, alerts and SaaS protection (Datto,
      Axcient, Slide, Kaseya)
  - name: Microsoft 365
    description: Microsoft 365 - licenses, users, domains and Secure Score
  - name: Security
    description: >-
      Security - posture summary, EDR incidents, vulnerabilities, email threats,
      firewalls, DNS filtering and security awareness
  - name: Financial
    description: Financial - quotes, invoices and revenue summaries
  - name: Integrations
    description: Integrations - status, sync health, pause and resume (never credentials)
  - name: Documentation
    description: >-
      Documentation - pages, folders and articles synced from Hudu or IT Glue,
      plus built-in pages
  - name: Broadcasts
    description: Broadcasts - emergency broadcasts, recipients and groups
  - name: Notifications
    description: Notifications - the linked user's in-app notifications
  - name: Standards
    description: >-
      Standards - technology standards catalog, service plans, applicability,
      deployment statuses, compliance rollups, white space and costs
  - name: Customer Success
    description: >-
      Customer success - client health scores, trends, benchmarks and Traffic
      Light Reviews
  - name: Tasks
    description: Tasks - the linked user's personal task list
  - name: Tenant Setup
    description: Tenant setup - profile, branding and portal settings (never secrets)
  - name: Roles
    description: Roles - staff and client roles and their permission grants
  - name: Ticket Templates
    description: Ticket templates - reusable ticket definitions
  - name: Readiness
    description: Client readiness - account readiness assessments
  - name: Projects
    description: >-
      Projects - PSA projects with health overlays (deliverables, milestones,
      client actions, weekly updates), phases, tickets, time entries, PSA
      status/owner/priority write-through, ticket notes, task controls, display
      settings and the document library
paths:
  /api/public/v1/compliance/checks:
    patch:
      tags:
        - Compliance
      summary: Update assigned checks in bulk
      description: >-
        Update one to 25 assigned checks in one call (status, public/private
        notes, priority, flag, due date). Each check succeeds or fails on its
        own; failures are listed next to the updated checks. Company users
        cannot set internal notes. Scope compliance.write; permission
        write_compliance.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BulkUpdateComplianceChecksRequest'
      responses:
        '200':
          description: Updated checks and per-check failures
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/BulkUpdateComplianceChecksResult'
                required:
                  - data
        '400':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '403':
          description: >-
            Forbidden - missing scope (compliance.write) or the linked user
            lacks the compliance permission
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - BearerAuth: []
components:
  schemas:
    BulkUpdateComplianceChecksRequest:
      type: object
      properties:
        checks:
          type: array
          items:
            type: object
            properties:
              assignedCheckId:
                type: string
                format: uuid
              statusItemId:
                type: string
                format: uuid
                description: Option id from the status-options endpoint
              notesPublic:
                type: string
                maxLength: 10000
              notesPrivate:
                type: string
                maxLength: 10000
                description: Internal-only; company users cannot set it
              priority:
                type: string
                enum:
                  - High
                  - Medium
                  - Low
              flagged:
                type: boolean
              dueDate:
                type: string
                nullable: true
                format: date
                description: YYYY-MM-DD; null clears
            required:
              - assignedCheckId
          minItems: 1
          maxItems: 25
          description: >-
            One to 25 assigned checks, each with at least one field and each id
            once
      required:
        - checks
    BulkUpdateComplianceChecksResult:
      type: object
      properties:
        updated:
          type: array
          items:
            $ref: '#/components/schemas/ComplianceAssignedCheck'
        failures:
          type: array
          items:
            type: object
            properties:
              assignedCheckId:
                type: string
                format: uuid
              error:
                type: string
            required:
              - assignedCheckId
              - error
      required:
        - updated
        - failures
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
          description: Error message
        requestId:
          type: string
          description: Request correlation ID
        details:
          nullable: true
          description: Additional error details
        code:
          type: string
          description: Error code
      required:
        - error
    ComplianceAssignedCheck:
      type: object
      properties:
        id:
          type: string
          format: uuid
          description: Unique assigned check identifier
        checkId:
          type: string
          format: uuid
          description: Reference to the check definition
        title:
          type: string
          description: Check title
        description:
          type: string
          nullable: true
          description: Check description
        status:
          allOf:
            - $ref: '#/components/schemas/ComplianceStatus'
            - nullable: true
              description: Current status
        priority:
          type: string
          enum:
            - High
            - Medium
            - Low
          description: Priority level
        criticality:
          type: integer
          minimum: 1
          maximum: 10
          description: Criticality score (1-10)
        flagged:
          type: boolean
          description: Whether the check is flagged for attention
        dueDate:
          type: string
          nullable: true
          format: date
          description: Due date (YYYY-MM-DD)
        completedAt:
          type: string
          nullable: true
          format: date-time
          description: Completion date (ISO 8601)
        notesPublic:
          type: string
          nullable: true
          description: Public notes (visible to clients)
        notesPrivate:
          type: string
          nullable: true
          description: Private notes (internal only)
        runId:
          type: string
          format: uuid
          description: Compliance run ID
        runName:
          type: string
          nullable: true
          description: Run name
        companyId:
          type: string
          format: uuid
          description: Company ID
        companyName:
          type: string
          nullable: true
          description: Company name
        groupId:
          type: string
          nullable: true
          format: uuid
          description: Group ID if assigned to a group
        groupName:
          type: string
          nullable: true
          description: Group name
        deviceId:
          type: string
          nullable: true
          format: uuid
          description: Device ID if device-scoped
        deviceName:
          type: string
          nullable: true
          description: Device name
        locationId:
          type: string
          nullable: true
          format: uuid
          description: Location ID if location-scoped
        locationName:
          type: string
          nullable: true
          description: Location name
        updatedAt:
          type: string
          format: date-time
          description: Last update timestamp (ISO 8601)
        automation:
          type: object
          nullable: true
          properties:
            evaluatorKey:
              type: string
              description: Automatic evaluator that answers the check
            mode:
              type: string
              nullable: true
              description: decide, fail_only or evidence
            statusSource:
              type: string
              nullable: true
              description: >-
                null (unanswered), manual (set by a person) or automatic (set by
                the evaluator)
            result:
              type: string
              nullable: true
              description: pass, fail or unknown
            evidence:
              type: object
              nullable: true
              additionalProperties:
                nullable: true
              description: Evaluator evidence
          required:
            - evaluatorKey
            - mode
            - statusSource
            - result
            - evidence
          description: >-
            Automatic evaluation. Returned on single-check reads; null when the
            check has no evaluator.
      required:
        - id
        - checkId
        - title
        - description
        - status
        - priority
        - criticality
        - flagged
        - dueDate
        - completedAt
        - notesPublic
        - notesPrivate
        - runId
        - runName
        - companyId
        - companyName
        - groupId
        - groupName
        - deviceId
        - deviceName
        - locationId
        - locationName
        - updatedAt
    ComplianceStatus:
      type: object
      properties:
        id:
          type: string
          format: uuid
          description: Status item ID
        name:
          type: string
          description: Status name (e.g., 'Pass', 'Fail', 'Pending')
        color:
          type: string
          description: Status color (hex code)
        isPositive:
          type: boolean
          description: Whether this is a positive/passing status
        isComplete:
          type: boolean
          description: Whether this status marks the check as complete
      required:
        - id
        - name
        - color
        - isPositive
        - isComplete
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: API Key
      description: >-
        Use your API key as a Bearer token. API keys can be generated in
        Settings → Integrations → API Access.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.