> ## Documentation Index > Fetch the complete documentation index at: https://docs.atollhq.com/llms.txt > Use this file to discover all available pages before exploring further. # Add a manual Web link or verified GitHub pull request to an issue > Requires edit or admin access to the current issue project, or eligible non-guest access for a projectless issue. Manual Web links require the explicit external_document/document selector pair and a safe HTTPS URL. Their content is not fetched or verified. GitHub links require an authorized live response with immutable numeric repository and pull-request IDs. ## OpenAPI ````yaml /openapi.json post /api/orgs/{id}/issues/{issueId}/external-references openapi: 3.1.0 info: title: Atoll API version: 1.0.0 description: >- REST API for Atoll project management, agent collaboration, strategy tracking, and integrations. servers: - url: https://atollhq.com description: Production security: - bearerAuth: [] tags: - name: Authentication - name: Organizations - name: Projects - name: Project access - name: Issues - name: Issue details - name: Milestones - name: Artifacts - name: Strategy - name: Members and agents - name: Planning - name: Setup - name: Integrations and billing - name: Notifications and public - name: Private inbox - name: Agent executions - name: Human attention - name: Products paths: /api/orgs/{id}/issues/{issueId}/external-references: post: tags: - Issues summary: Add a manual Web link or verified GitHub pull request to an issue description: >- Requires edit or admin access to the current issue project, or eligible non-guest access for a projectless issue. Manual Web links require the explicit external_document/document selector pair and a safe HTTPS URL. Their content is not fetched or verified. GitHub links require an authorized live response with immutable numeric repository and pull-request IDs. operationId: post_api_orgs_id_issues_issueId_external_references parameters: - name: id in: path required: true schema: type: string - name: issueId in: path required: true schema: type: string requestBody: required: true content: application/json: schema: oneOf: - type: object additionalProperties: false required: - url properties: url: type: string format: uri provider: const: github object_type: const: pull_request - type: object additionalProperties: false required: - url - provider - object_type properties: url: type: string format: uri description: >- HTTPS only; no credentials or controls; maximum 2048 UTF-8 bytes after normalization. provider: const: external_document object_type: const: document responses: '201': description: External reference linked content: application/json: schema: $ref: '#/components/schemas/ExternalReferenceResponse' '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '422': description: Authorized provider identity unavailable content: application/json: schema: type: object required: - error - code properties: error: type: string code: const: github_identity_unavailable '500': $ref: '#/components/responses/ServerError' security: - bearerAuth: [] components: schemas: ExternalReferenceResponse: type: object required: - externalReference properties: externalReference: $ref: '#/components/schemas/ExternalReference' additionalProperties: false ExternalReference: type: object description: >- Canonical provider reference or manually supplied HTTPS URL. Manual links do not claim content, access, identity, or freshness verification. required: - link_id - id - org_id - target_type - target_id - provider - object_type - provider_object_id - provider_container_id - canonical_url - display_metadata - provenance - resolvable - resolution_error - last_observed_at - created_at - updated_at - linked_at properties: link_id: type: string format: uuid id: type: string format: uuid org_id: type: string format: uuid target_type: type: string enum: - issue - project target_id: type: string format: uuid provider: type: string enum: - github - vercel - external_document object_type: type: string enum: - pull_request - deployment - document provider_object_id: type: string description: >- Immutable provider identity, or server-derived URL identity for manual links (not provider proof). provider_container_id: type: string description: >- Immutable provider identity, or server-derived URL identity for manual links (not provider proof). canonical_url: type: string format: uri display_metadata: type: object additionalProperties: true description: >- Bounded 2 KiB object. Vercel: label, environment (preview/staging/production), state (queued/building/ready/failed/cancelled/superseded), optional proven revision (40 lowercase hex), and provider_effective_at (UTC). provenance: type: string enum: - github_api - vercel_api - external_document resolvable: type: boolean description: >- Provider resolvability evidence. Always false for manual Web links, whose provider identity/access is not verified. resolution_error: type: - string - 'null' enum: - github_identity_unavailable - revoked - private - null - identity_unavailable - repository_mismatch - provider_unavailable - not_verified description: >- not_verified means no verification was attempted for a manual Web link, not a failed provider lookup. last_observed_at: type: string format: date-time description: >- Provider observation time, or actor URL submission time for manual links. Not a manual-content freshness guarantee. created_at: type: string format: date-time updated_at: type: string format: date-time linked_at: type: string format: date-time description: >- When this target association was added. Use this for manual link Added dates. additionalProperties: false Error: type: object description: >- Common error responses contain error. Shared missing-auth and unknown-API responses also contain a stable code. properties: error: type: string code: type: string required: - error examples: - error: Unauthorized code: unauthorized - error: Not found code: not_found additionalProperties: true responses: BadRequest: description: Invalid request content: application/json: schema: $ref: '#/components/schemas/Error' Unauthorized: description: Missing or invalid authentication content: application/json: schema: $ref: '#/components/schemas/Error' Forbidden: description: Authenticated but not allowed content: application/json: schema: $ref: '#/components/schemas/Error' NotFound: description: Resource not found or not visible content: application/json: schema: $ref: '#/components/schemas/Error' ServerError: description: Unexpected server error content: application/json: schema: $ref: '#/components/schemas/Error' securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: sk_atoll_ ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.