Sub-dispositions let you extend Corsa’s standard alert and case statuses with custom resolution reasons. For example, aDocumentation Index
Fetch the complete documentation index at: https://docs.corsa.finance/llms.txt
Use this file to discover all available pages before exploring further.
RESOLVED alert can carry a sub-disposition of true_positive_filed_sar or false_positive_rule_tuning so analysts capture the specific outcome without losing the normalized parent status.
Full API reference is available in the API Reference.
Overview
Each sub-disposition belongs to:- A parent status — the standard Corsa status it qualifies (
RESOLVED,ESCALATED,CLOSED_DISMISSED, orCLOSED_ESCALATION_TO_SAR) - An entity type — either
ALERTorCASE
| Status | Applies to |
|---|---|
RESOLVED | Alerts and Cases |
ESCALATED | Alerts and Cases |
CLOSED_DISMISSED | Cases |
CLOSED_ESCALATION_TO_SAR | Cases |
List Sub-Dispositions
Endpoint:GET /v1/sub-dispositions
Returns all sub-dispositions (preset and custom) for the platform.
Create a Sub-Disposition
Endpoint:POST /v1/sub-dispositions
Request Fields
| Field | Required | Description |
|---|---|---|
name | Yes | Internal key in lower_snake_case — used in API requests and exports |
parentStatus | Yes | The parent status this sub-disposition qualifies: RESOLVED, ESCALATED, CLOSED_DISMISSED, or CLOSED_ESCALATION_TO_SAR |
entityType | Yes | Entity this applies to: ALERT or CASE |
displayName | No | Human-readable label shown to analysts. Defaults to title-cased name if omitted |
Get a Sub-Disposition
Endpoint:GET /v1/sub-dispositions/{id}
Update a Sub-Disposition
Endpoint:PATCH /v1/sub-dispositions/{id}
You can update the display name or toggle the active state. Custom sub-dispositions cannot have their name, parentStatus, or entityType changed after creation.
Delete a Sub-Disposition
Endpoint:DELETE /v1/sub-dispositions/{id}
Soft-deletes the sub-disposition. Only custom sub-dispositions can be deleted — preset sub-dispositions cannot be removed.