Open the ticket of an AI finding
Open the ticket that tracks the fix of one finding (deviceId and findingKey from getAiFindings), tagged AI Tools, and return it as JSON (ticketId, ticketReference). Each finding has its own ticket, even two findings of the same rule on the same device. It goes to the assignee, priority and subscribers of the company’s AI tools ticket settings, the device owner as requester, and the AI Findings Remediation agent works it when the company has it on. Primo closes it once the device no longer reports the finding. A 409 means the finding already has an open ticket, named in the answer; a 404 that the device no longer reports the finding. To open a ticket for every finding the settings keep, turn autoCreateTickets on with updateAiToolsSettings. AI tools are what Primo finds on Macs (assistant apps, coding agents, IDE plugins, browser extensions, MCP servers, AI connections, agent instruction files), as of the last sync (lastSyncedAt of getAiToolsOverview), with Primo’s severities, less the findings the company’s AI tools settings ignore. They are not the software catalog (getSoftwares, getDeviceSoftware), the company’s own AI agents (listAgents) nor AI credits (getAiUsage). A company without AI tools monitoring gets a 403, final.
Authorizations
Use your Primo API key in the Authorization header as Bearer <API_KEY>.
Response
Ticket id, to pass to getTicket or getAiToolsTicketDetails
The rule's code
The finding the ticket tracks: each finding has its own ticket
policy: opened by Create tickets automatically, closed by Primo when the finding is gone or the settings no longer cover it; admin (a person), agent (Primo AI) or api (an API key): opened by hand, closed by Primo once the finding is gone
policy, admin, agent, api ISO 8601
When Primo closed it (ISO 8601); null while it is open
Why Primo closed it: finding_resolved, device_gone, auto_tickets_off, device_excluded, rule_ignored, severity_ignored, ticket_completed or ticket_cancelled when someone finished the ticket, or ticket_deleted when the ticket was deleted