> ## Documentation Index
> Fetch the complete documentation index at: https://docs.base44.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Internal links on these pages omit the .md extension. Append .md to a docs page URL, or send an Accept: text/markdown header, to get that page as markdown.

# Restore security finding

> <Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Ends an [ignore](/developers/references/apps-api/sections/security#act-on-findings) set with [Ignore security finding](/api-reference/ignore-security-finding), so the finding is no longer hidden. Its fingerprint is removed from `ignored_fingerprints` in [Get security scan](/api-reference/get-security-scan). The finding itself stayed in the scan result the whole time, so nothing else changes.

The call succeeds without changing anything when the fingerprint isn't ignored.



## OpenAPI

````yaml /developers/references/app-management/app-management-openapi.json delete /api/apps/{app_id}/security/scan/ignore/{fingerprint}
openapi: 3.1.0
info:
  title: Base44 App Management API
  version: 1.0.0
servers:
  - url: https://app.base44.com
security:
  - PersonalAccessTokenAuth: []
paths:
  /api/apps/{app_id}/security/scan/ignore/{fingerprint}:
    delete:
      summary: Restore security finding
      description: >-
        <Info>This API is in beta. Endpoints, fields, and behavior may still
        change, so avoid depending on it in production.</Info>


        Ends an
        [ignore](/developers/references/apps-api/sections/security#act-on-findings)
        set with [Ignore security
        finding](/api-reference/ignore-security-finding), so the finding is no
        longer hidden. Its fingerprint is removed from `ignored_fingerprints` in
        [Get security scan](/api-reference/get-security-scan). The finding
        itself stayed in the scan result the whole time, so nothing else
        changes.


        The call succeeds without changing anything when the fingerprint isn't
        ignored.
      operationId: >-
        restore_finding_api_apps__app_id__security_scan_ignore__fingerprint__delete
      parameters:
        - name: fingerprint
          in: path
          required: true
          schema:
            type: string
            minLength: 1
            maxLength: 128
            description: >-
              The
              [fingerprint](/developers/references/apps-api/sections/security#findings-and-fingerprints)
              of the ignored finding, as listed in `ignored_fingerprints` by
              [Get security scan](/api-reference/get-security-scan). Up to 128
              characters.
            title: Fingerprint
          description: >-
            The
            [fingerprint](/developers/references/apps-api/sections/security#findings-and-fingerprints)
            of the ignored finding, as listed in `ignored_fingerprints` by [Get
            security scan](/api-reference/get-security-scan). Up to 128
            characters.
          example: 3f9a1c0e8b7d4a6f2e5c9b1d0a8f7e6c5b4a3d2e1f0c9b8a7d6e5f4c3b2a1d0e
        - name: app_id
          in: path
          required: true
          schema:
            type: string
            description: ID of the app.
            title: App Id
          description: ID of the app.
          example: 6820f3a4e7b91d003c45a1f2
      responses:
        '200':
          description: The call was accepted.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityFindingIgnoreStatus'
        '401':
          description: Missing or invalid credentials.
        '403':
          description: >-
            You don't have editor access to this app, or you used a workspace
            API key. A read-only personal access token is refused.
        '404':
          description: App not found.
        '422':
          description: The `fingerprint` is longer than 128 characters.
        '429':
          description: >-
            Rate limit exceeded. The base limit is 60 requests per minute for
            each app, shared by every personal access token in the workspace.
            See [Rate
            limits](/developers/references/apps-api/get-started/rate-limits) for
            the multiplier your plan gets.
      security:
        - PersonalAccessTokenAuth:
            - full_access
components:
  schemas:
    SecurityFindingIgnoreStatus:
      properties:
        status:
          type: string
          title: Status
          description: Always `ok`, including when nothing changed.
          example: ok
      type: object
      required:
        - status
      title: SecurityFindingIgnoreStatus
  securitySchemes:
    PersonalAccessTokenAuth:
      type: http
      scheme: bearer
      description: >-
        Personal access token, sent as `Authorization: Bearer <token>`. Each
        operation lists the permission it needs: `read_only` or `full_access`. A
        full-access token can call every operation. A read-only token can call
        only the operations that list `read_only`; anything else returns 403
        `read_only_credential_route_not_allowed`.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.