Add comment
curl --request POST \
--url https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"body": "<string>",
"mentions": [
{
"member_id": "<string>"
}
],
"reply_to_comment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
}
}
'import requests
url = "https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments"
payload = {
"body": "<string>",
"mentions": [{ "member_id": "<string>" }],
"reply_to_comment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
body: JSON.stringify('<string>'),
mentions: [{member_id: '<string>'}],
reply_to_comment_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
source_metadata: {
harness: 'codex',
thread_id: '<string>',
session_id: '<string>',
host_id: '<string>'
}
})
};
fetch('https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'body' => '<string>',
'mentions' => [
[
'member_id' => '<string>'
]
],
'reply_to_comment_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
'source_metadata' => [
'harness' => 'codex',
'thread_id' => '<string>',
'session_id' => '<string>',
'host_id' => '<string>'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments"
payload := strings.NewReader("{\n \"body\": \"<string>\",\n \"mentions\": [\n {\n \"member_id\": \"<string>\"\n }\n ],\n \"reply_to_comment_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"source_metadata\": {\n \"harness\": \"codex\",\n \"thread_id\": \"<string>\",\n \"session_id\": \"<string>\",\n \"host_id\": \"<string>\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"body\": \"<string>\",\n \"mentions\": [\n {\n \"member_id\": \"<string>\"\n }\n ],\n \"reply_to_comment_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"source_metadata\": {\n \"harness\": \"codex\",\n \"thread_id\": \"<string>\",\n \"session_id\": \"<string>\",\n \"host_id\": \"<string>\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"body\": \"<string>\",\n \"mentions\": [\n {\n \"member_id\": \"<string>\"\n }\n ],\n \"reply_to_comment_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"source_metadata\": {\n \"harness\": \"codex\",\n \"thread_id\": \"<string>\",\n \"session_id\": \"<string>\",\n \"host_id\": \"<string>\"\n }\n}"
response = http.request(request)
puts response.read_body{
"comment": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"issue_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"body": "<string>",
"author_id": "<string>",
"author_type": "human",
"reply_to_comment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
},
"reply_to_comment": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"author_type": "human",
"body": "<string>",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
},
"author_id": "<string>",
"deleted_at": "2023-11-07T05:31:56Z"
}
},
"outcome": {
"persistence": {
"status": "persisted",
"comment_id": "<string>"
},
"mentions": {
"requested": 123,
"resolved": 123,
"created": 123,
"deduped": 123,
"skipped": [
{
"member_id": "<string>",
"reason": "invalid_member_id"
}
],
"recipients": [
{
"member_id": "<string>",
"resolution": "resolved",
"notification": {
"status": "created",
"notification_id": "<string>",
"reason": "<string>"
},
"transport": {
"dispatch": "scheduled",
"final": "delivered"
}
}
],
"notification_rows": {
"status": "complete",
"created": 123,
"deduped": 123,
"skipped": 123,
"failed": 123,
"error": {}
},
"transport": {
"dispatch": "scheduled",
"scheduled": 123,
"already_scheduled": 123,
"not_scheduled": 123,
"failed": 123,
"final": "delivered",
"error": {}
}
}
},
"mentions": {
"requested": 123,
"resolved": 123,
"created": 123,
"deduped": 123,
"skipped": [
{
"member_id": "<string>",
"reason": "invalid_member_id"
}
],
"recipients": [
{
"member_id": "<string>",
"resolution": "resolved",
"notification": {
"status": "created",
"notification_id": "<string>",
"reason": "<string>"
},
"transport": {
"dispatch": "scheduled",
"final": "delivered"
}
}
],
"notification_rows": {
"status": "complete",
"created": 123,
"deduped": 123,
"skipped": 123,
"failed": 123,
"error": {}
},
"transport": {
"dispatch": "scheduled",
"scheduled": 123,
"already_scheduled": 123,
"not_scheduled": 123,
"failed": 123,
"final": "delivered",
"error": {}
}
}
}{
"comment": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"issue_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"body": "<string>",
"author_id": "<string>",
"author_type": "human",
"reply_to_comment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
},
"reply_to_comment": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"author_type": "human",
"body": "<string>",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
},
"author_id": "<string>",
"deleted_at": "2023-11-07T05:31:56Z"
}
},
"outcome": {
"persistence": {
"status": "persisted",
"comment_id": "<string>"
},
"mentions": {
"requested": 123,
"resolved": 123,
"created": 123,
"deduped": 123,
"skipped": [
{
"member_id": "<string>",
"reason": "invalid_member_id"
}
],
"recipients": [
{
"member_id": "<string>",
"resolution": "resolved",
"notification": {
"status": "created",
"notification_id": "<string>",
"reason": "<string>"
},
"transport": {
"dispatch": "scheduled",
"final": "delivered"
}
}
],
"notification_rows": {
"status": "complete",
"created": 123,
"deduped": 123,
"skipped": 123,
"failed": 123,
"error": {}
},
"transport": {
"dispatch": "scheduled",
"scheduled": 123,
"already_scheduled": 123,
"not_scheduled": 123,
"failed": 123,
"final": "delivered",
"error": {}
}
}
},
"mentions": {
"requested": 123,
"resolved": 123,
"created": 123,
"deduped": 123,
"skipped": [
{
"member_id": "<string>",
"reason": "invalid_member_id"
}
],
"recipients": [
{
"member_id": "<string>",
"resolution": "resolved",
"notification": {
"status": "created",
"notification_id": "<string>",
"reason": "<string>"
},
"transport": {
"dispatch": "scheduled",
"final": "delivered"
}
}
],
"notification_rows": {
"status": "complete",
"created": 123,
"deduped": 123,
"skipped": 123,
"failed": 123,
"error": {}
},
"transport": {
"dispatch": "scheduled",
"scheduled": 123,
"already_scheduled": 123,
"not_scheduled": 123,
"failed": 123,
"final": "delivered",
"error": {}
}
}
}{
"error": "Unauthorized",
"code": "unauthorized"
}{
"error": "Unauthorized",
"code": "unauthorized"
}{
"error": "Unauthorized",
"code": "unauthorized"
}{
"error": "Unauthorized",
"code": "unauthorized"
}{
"error": "Unauthorized",
"code": "unauthorized"
}Issue details
Add comment
Requires write access to the issue’s project. Guests cannot add comments on unprojected issues. Comment bodies accept Markdown/plain text or rich-text HTML, are stored and returned as sanitized HTML, and are rejected when sanitization leaves no visible text or safe media. Structured mentions are accepted as mentions: []. Set reply_to_comment_id for a one-level reply. Agent-authored comments can include validated source_metadata for deterministic harness routing; human comments cannot. Omit source_metadata unless a real thread or session ID exists, never invent one, and never put secrets in it. Use stable Atoll org member IDs, not auth user IDs or display names.
POST
/
api
/
orgs
/
{id}
/
issues
/
{issueId}
/
comments
Add comment
curl --request POST \
--url https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"body": "<string>",
"mentions": [
{
"member_id": "<string>"
}
],
"reply_to_comment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
}
}
'import requests
url = "https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments"
payload = {
"body": "<string>",
"mentions": [{ "member_id": "<string>" }],
"reply_to_comment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
body: JSON.stringify('<string>'),
mentions: [{member_id: '<string>'}],
reply_to_comment_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
source_metadata: {
harness: 'codex',
thread_id: '<string>',
session_id: '<string>',
host_id: '<string>'
}
})
};
fetch('https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'body' => '<string>',
'mentions' => [
[
'member_id' => '<string>'
]
],
'reply_to_comment_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
'source_metadata' => [
'harness' => 'codex',
'thread_id' => '<string>',
'session_id' => '<string>',
'host_id' => '<string>'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments"
payload := strings.NewReader("{\n \"body\": \"<string>\",\n \"mentions\": [\n {\n \"member_id\": \"<string>\"\n }\n ],\n \"reply_to_comment_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"source_metadata\": {\n \"harness\": \"codex\",\n \"thread_id\": \"<string>\",\n \"session_id\": \"<string>\",\n \"host_id\": \"<string>\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"body\": \"<string>\",\n \"mentions\": [\n {\n \"member_id\": \"<string>\"\n }\n ],\n \"reply_to_comment_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"source_metadata\": {\n \"harness\": \"codex\",\n \"thread_id\": \"<string>\",\n \"session_id\": \"<string>\",\n \"host_id\": \"<string>\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://atollhq.com/api/orgs/{id}/issues/{issueId}/comments")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"body\": \"<string>\",\n \"mentions\": [\n {\n \"member_id\": \"<string>\"\n }\n ],\n \"reply_to_comment_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"source_metadata\": {\n \"harness\": \"codex\",\n \"thread_id\": \"<string>\",\n \"session_id\": \"<string>\",\n \"host_id\": \"<string>\"\n }\n}"
response = http.request(request)
puts response.read_body{
"comment": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"issue_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"body": "<string>",
"author_id": "<string>",
"author_type": "human",
"reply_to_comment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
},
"reply_to_comment": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"author_type": "human",
"body": "<string>",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
},
"author_id": "<string>",
"deleted_at": "2023-11-07T05:31:56Z"
}
},
"outcome": {
"persistence": {
"status": "persisted",
"comment_id": "<string>"
},
"mentions": {
"requested": 123,
"resolved": 123,
"created": 123,
"deduped": 123,
"skipped": [
{
"member_id": "<string>",
"reason": "invalid_member_id"
}
],
"recipients": [
{
"member_id": "<string>",
"resolution": "resolved",
"notification": {
"status": "created",
"notification_id": "<string>",
"reason": "<string>"
},
"transport": {
"dispatch": "scheduled",
"final": "delivered"
}
}
],
"notification_rows": {
"status": "complete",
"created": 123,
"deduped": 123,
"skipped": 123,
"failed": 123,
"error": {}
},
"transport": {
"dispatch": "scheduled",
"scheduled": 123,
"already_scheduled": 123,
"not_scheduled": 123,
"failed": 123,
"final": "delivered",
"error": {}
}
}
},
"mentions": {
"requested": 123,
"resolved": 123,
"created": 123,
"deduped": 123,
"skipped": [
{
"member_id": "<string>",
"reason": "invalid_member_id"
}
],
"recipients": [
{
"member_id": "<string>",
"resolution": "resolved",
"notification": {
"status": "created",
"notification_id": "<string>",
"reason": "<string>"
},
"transport": {
"dispatch": "scheduled",
"final": "delivered"
}
}
],
"notification_rows": {
"status": "complete",
"created": 123,
"deduped": 123,
"skipped": 123,
"failed": 123,
"error": {}
},
"transport": {
"dispatch": "scheduled",
"scheduled": 123,
"already_scheduled": 123,
"not_scheduled": 123,
"failed": 123,
"final": "delivered",
"error": {}
}
}
}{
"comment": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"issue_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"body": "<string>",
"author_id": "<string>",
"author_type": "human",
"reply_to_comment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
},
"reply_to_comment": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"author_type": "human",
"body": "<string>",
"source_metadata": {
"harness": "codex",
"thread_id": "<string>",
"session_id": "<string>",
"host_id": "<string>"
},
"author_id": "<string>",
"deleted_at": "2023-11-07T05:31:56Z"
}
},
"outcome": {
"persistence": {
"status": "persisted",
"comment_id": "<string>"
},
"mentions": {
"requested": 123,
"resolved": 123,
"created": 123,
"deduped": 123,
"skipped": [
{
"member_id": "<string>",
"reason": "invalid_member_id"
}
],
"recipients": [
{
"member_id": "<string>",
"resolution": "resolved",
"notification": {
"status": "created",
"notification_id": "<string>",
"reason": "<string>"
},
"transport": {
"dispatch": "scheduled",
"final": "delivered"
}
}
],
"notification_rows": {
"status": "complete",
"created": 123,
"deduped": 123,
"skipped": 123,
"failed": 123,
"error": {}
},
"transport": {
"dispatch": "scheduled",
"scheduled": 123,
"already_scheduled": 123,
"not_scheduled": 123,
"failed": 123,
"final": "delivered",
"error": {}
}
}
},
"mentions": {
"requested": 123,
"resolved": 123,
"created": 123,
"deduped": 123,
"skipped": [
{
"member_id": "<string>",
"reason": "invalid_member_id"
}
],
"recipients": [
{
"member_id": "<string>",
"resolution": "resolved",
"notification": {
"status": "created",
"notification_id": "<string>",
"reason": "<string>"
},
"transport": {
"dispatch": "scheduled",
"final": "delivered"
}
}
],
"notification_rows": {
"status": "complete",
"created": 123,
"deduped": 123,
"skipped": 123,
"failed": 123,
"error": {}
},
"transport": {
"dispatch": "scheduled",
"scheduled": 123,
"already_scheduled": 123,
"not_scheduled": 123,
"failed": 123,
"final": "delivered",
"error": {}
}
}
}{
"error": "Unauthorized",
"code": "unauthorized"
}{
"error": "Unauthorized",
"code": "unauthorized"
}{
"error": "Unauthorized",
"code": "unauthorized"
}{
"error": "Unauthorized",
"code": "unauthorized"
}{
"error": "Unauthorized",
"code": "unauthorized"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
application/json
Required comment body. Accepts Markdown/plain text or rich-text HTML. Stored and returned as sanitized HTML; rejected when sanitization leaves no visible text or safe media.
Structured mentions for agents and integrations. Each member_id is the stable Atoll org member ID, not an auth user ID or display name.
Show child attributes
Show child attributes
Optional non-deleted parent comment on the same issue. Replies are presented one level deep.
Hidden routing provenance for agent-authored comments. Omit this object unless the host exposes a real thread or session ID, and never invent one. Contains harness identifiers only; never include credentials, prompts, or arbitrary runtime state.
- Option 1
- Option 2
Show child attributes
Show child attributes
⌘I