> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leen.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Alert by ID

> Retrieve an EDR alert by its ID (Leen's UUID).



## OpenAPI

````yaml get /edr/alerts/{alert_id}
openapi: 3.1.0
info:
  title: Leen Security API
  version: 0.0.1
servers:
  - description: Production API (US)
    url: https://api.leen.dev/v1
  - description: Production API (EU)
    url: https://api.eu-c1.leen.dev/v1
  - description: Production API (APAC)
    url: https://api.ap-se2.leen.dev/v1
security: []
paths:
  /edr/alerts/{alert_id}:
    get:
      tags:
        - edr
      summary: Get Alert by ID
      description: Retrieve an EDR alert by its ID (Leen's UUID).
      operationId: get_edr_alert_by_id
      parameters:
        - in: path
          name: alert_id
          required: true
          schema:
            format: uuid
            title: Alert Id
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScopedEDRAlertRespModel'
          description: Successful Response
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorException'
          description: EDR alert not found
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Validation Error
      security:
        - API-Key: []
          Connection-ID: []
components:
  schemas:
    ScopedEDRAlertRespModel:
      properties:
        active_directory_domain:
          anyOf:
            - type: string
            - type: 'null'
          description: Active Directory domain
          title: Active Directory Domain
        active_directory_user_id:
          anyOf:
            - type: string
            - type: 'null'
          description: Active Directory user ID
          title: Active Directory User Id
        assigned_user:
          anyOf:
            - type: string
            - type: 'null'
          description: Assigned user
          title: Assigned User
        description:
          anyOf:
            - type: string
            - type: 'null'
          description: Description of alert, provided by the upstream vendor
          title: Description
        device:
          anyOf:
            - $ref: '#/components/schemas/DeviceRespModel'
            - $ref: '#/components/schemas/DeviceWithGroupsRespModel'
          description: >-
            Device attached to the alert, include device groups with
            includeDeviceGroups query parameter
          title: Device
        first_event_time:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: First event time
          title: First Event Time
        id:
          anyOf:
            - format: uuid
              type: string
            - type: 'null'
          description: Leen's identifier for this alert.
          title: Id
        last_event_time:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: Last event time
          title: Last Event Time
        mitre:
          description: MITRE Tactics associated with the alert
          items:
            $ref: '#/components/schemas/ScopedEDRAlertRespModelMitreTactic'
          title: Mitre
          type: array
        observables:
          anyOf:
            - items:
                $ref: '#/components/schemas/OCSFObservable'
              type: array
            - type: 'null'
          description: Observable data associated with the alert
          title: Observables
        parent_pid:
          anyOf:
            - type: string
            - type: 'null'
          description: Parent process ID
          title: Parent Pid
        pid:
          anyOf:
            - type: string
            - type: 'null'
          description: Process ID
          title: Pid
        process_command_line:
          anyOf:
            - type: string
            - type: 'null'
          description: Process command line
          title: Process Command Line
        process_created_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: Process created at
          title: Process Created At
        process_filename:
          anyOf:
            - type: string
            - type: 'null'
          description: Process filename
          title: Process Filename
        process_filepath:
          anyOf:
            - type: string
            - type: 'null'
          description: Process filepath
          title: Process Filepath
        process_md5:
          anyOf:
            - type: string
            - type: 'null'
          description: Process MD5
          title: Process Md5
        process_sha1:
          anyOf:
            - type: string
            - type: 'null'
          description: Process SHA1
          title: Process Sha1
        process_sha256:
          anyOf:
            - type: string
            - type: 'null'
          description: Process SHA256
          title: Process Sha256
        resolved_time:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: Resolved time
          title: Resolved Time
        severity:
          $ref: '#/components/schemas/ScopedEDRAlertSeverity'
          default: none
          description: Alert severity
        status:
          $ref: '#/components/schemas/ScopedEDRAlertStatus'
          default: unknown
          description: Alert status
        title:
          anyOf:
            - type: string
            - type: 'null'
          description: Title of the alert, provided by the upstream vendor
          title: Title
        user_name:
          anyOf:
            - type: string
            - type: 'null'
          description: User name
          title: User Name
        vendor:
          $ref: '#/components/schemas/ScopedEDRAlertVendor'
          description: Source vendor
        vendor_data:
          anyOf:
            - $ref: '#/components/schemas/CrowdStrikeEDRVendorData'
            - $ref: '#/components/schemas/MSDefenderEDRVendorData'
            - $ref: '#/components/schemas/SentinelOneEDRVendorData'
            - type: 'null'
          description: Vendor specific pass through data, values can vary based on vendor
          title: Vendor Data
        vendor_id:
          anyOf:
            - type: string
            - type: 'null'
          description: Vendor's ID of the alert
          title: Vendor Id
        vendor_severity:
          anyOf:
            - type: string
            - type: 'null'
          description: Vendor's severity
          title: Vendor Severity
        vendor_status:
          anyOf:
            - type: string
            - type: 'null'
          description: Vendor's status
          title: Vendor Status
        verdict:
          $ref: '#/components/schemas/AlertVerdict'
          description: Analyst verdict
        windows_sid:
          anyOf:
            - type: string
            - type: 'null'
          description: Windows SID
          title: Windows Sid
      required:
        - vendor_id
        - title
        - description
        - assigned_user
        - vendor_severity
        - vendor_status
        - first_event_time
        - last_event_time
        - resolved_time
        - vendor
        - verdict
        - pid
        - process_created_at
        - process_filename
        - process_command_line
        - process_filepath
        - process_sha1
        - process_sha256
        - process_md5
        - parent_pid
        - user_name
        - windows_sid
        - active_directory_user_id
        - active_directory_domain
        - device
        - mitre
      title: ScopedEDRAlertRespModel
      type: object
    ErrorException:
      properties:
        detail:
          description: Error message
          title: Detail
          type: string
      required:
        - detail
      title: ErrorException
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    DeviceRespModel:
      properties:
        ad_info:
          anyOf:
            - $ref: '#/components/schemas/DeviceADInfo'
            - type: 'null'
          description: >-
            Active Directory placement -- organisational unit and site -- where
            the tool reports it.
        cloud_metadata:
          anyOf:
            - $ref: '#/components/schemas/AWSMetadata'
            - type: 'null'
          description: CloudMetadata, currently only AWS is supported
        first_seen:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: >-
            When the tool first registered this device. The tool's own
            timestamp, not when Leen synced it.
          title: First Seen
        fqdns:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: Fully qualified domain names for this device.
          title: Fqdns
        hostnames:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: Hostnames the tool knows this device by. A device can have several.
          title: Hostnames
        id:
          description: Leen's identifier for this device.
          format: uuid
          title: Id
          type: string
        identities:
          anyOf:
            - items:
                $ref: '#/components/schemas/DeviceIdentity'
              type: array
            - type: 'null'
          description: >-
            Accounts associated with the device, such as its last logged-in
            user.
          title: Identities
        installed_software:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: Software the tool reported as installed.
          title: Installed Software
        ipv4s:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: IPv4 addresses the tool last observed. Not necessarily current.
          title: Ipv4S
        ipv6s:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: IPv6 addresses the tool last observed.
          title: Ipv6S
        last_seen:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: >-
            When the tool last had contact with the device. Use it to tell a
            decommissioned machine from one that simply has no findings.
          title: Last Seen
        mac_addresses:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: MAC addresses of the device's interfaces.
          title: Mac Addresses
        os_major_version:
          anyOf:
            - type: string
            - type: 'null'
          description: Major version, split out of `os_version` so it can be filtered on.
          title: Os Major Version
        os_minor_version:
          anyOf:
            - type: string
            - type: 'null'
          description: Minor version, split out of `os_version`.
          title: Os Minor Version
        os_version:
          anyOf:
            - type: string
            - type: 'null'
          description: Full operating system version string, as the tool reports it.
          title: Os Version
        platform:
          anyOf:
            - $ref: '#/components/schemas/DevicePlatform'
            - type: 'null'
          description: Operating system family, normalised across tools.
        source_vendors:
          description: >-
            The tool this device came from, and that tool's identifier for it. A
            list because the shape allows several; today a device carries
            exactly one.
          items:
            $ref: '#/components/schemas/DeviceVendor'
          title: Source Vendors
          type: array
        status:
          $ref: '#/components/schemas/DeviceStatus'
          description: >-
            Device state as the tool reports it. `quarantined` means the tool
            has isolated it; `deleted` means the tool no longer returns it.
        tags:
          anyOf:
            - items:
                $ref: '#/components/schemas/DeviceTags'
              type: array
            - type: 'null'
          description: Tags the tool carries for this device.
          title: Tags
        vendor_data:
          anyOf:
            - additionalProperties: true
              type: object
            - type: 'null'
          description: Vendor specific pass through data, values can vary based on vendor
          title: Vendor Data
      required:
        - id
        - status
        - last_seen
        - first_seen
        - source_vendors
        - installed_software
        - ad_info
      title: Device
      type: object
    DeviceWithGroupsRespModel:
      properties:
        ad_info:
          anyOf:
            - $ref: '#/components/schemas/DeviceADInfo'
            - type: 'null'
          description: >-
            Active Directory placement -- organisational unit and site -- where
            the tool reports it.
        cloud_metadata:
          anyOf:
            - $ref: '#/components/schemas/AWSMetadata'
            - type: 'null'
          description: CloudMetadata, currently only AWS is supported
        device_groups:
          default: []
          description: >-
            Pass in the includeDeviceGroups query parameter to include device
            group information.
          items:
            $ref: '#/components/schemas/DeviceGroupsBase'
          title: Device Groups
          type: array
        first_seen:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: >-
            When the tool first registered this device. The tool's own
            timestamp, not when Leen synced it.
          title: First Seen
        fqdns:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: Fully qualified domain names for this device.
          title: Fqdns
        hostnames:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: Hostnames the tool knows this device by. A device can have several.
          title: Hostnames
        id:
          description: Leen's identifier for this device.
          format: uuid
          title: Id
          type: string
        identities:
          anyOf:
            - items:
                $ref: '#/components/schemas/DeviceIdentity'
              type: array
            - type: 'null'
          description: >-
            Accounts associated with the device, such as its last logged-in
            user.
          title: Identities
        installed_software:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: Software the tool reported as installed.
          title: Installed Software
        ipv4s:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: IPv4 addresses the tool last observed. Not necessarily current.
          title: Ipv4S
        ipv6s:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: IPv6 addresses the tool last observed.
          title: Ipv6S
        last_seen:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: >-
            When the tool last had contact with the device. Use it to tell a
            decommissioned machine from one that simply has no findings.
          title: Last Seen
        mac_addresses:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: MAC addresses of the device's interfaces.
          title: Mac Addresses
        os_major_version:
          anyOf:
            - type: string
            - type: 'null'
          description: Major version, split out of `os_version` so it can be filtered on.
          title: Os Major Version
        os_minor_version:
          anyOf:
            - type: string
            - type: 'null'
          description: Minor version, split out of `os_version`.
          title: Os Minor Version
        os_version:
          anyOf:
            - type: string
            - type: 'null'
          description: Full operating system version string, as the tool reports it.
          title: Os Version
        platform:
          anyOf:
            - $ref: '#/components/schemas/DevicePlatform'
            - type: 'null'
          description: Operating system family, normalised across tools.
        source_vendors:
          description: >-
            The tool this device came from, and that tool's identifier for it. A
            list because the shape allows several; today a device carries
            exactly one.
          items:
            $ref: '#/components/schemas/DeviceVendor'
          title: Source Vendors
          type: array
        status:
          $ref: '#/components/schemas/DeviceStatus'
          description: >-
            Device state as the tool reports it. `quarantined` means the tool
            has isolated it; `deleted` means the tool no longer returns it.
        tags:
          anyOf:
            - items:
                $ref: '#/components/schemas/DeviceTags'
              type: array
            - type: 'null'
          description: Tags the tool carries for this device.
          title: Tags
        vendor_data:
          anyOf:
            - additionalProperties: true
              type: object
            - type: 'null'
          description: Vendor specific pass through data, values can vary based on vendor
          title: Vendor Data
      required:
        - id
        - status
        - last_seen
        - first_seen
        - source_vendors
        - installed_software
        - ad_info
      title: DeviceWithGroups
      type: object
    ScopedEDRAlertRespModelMitreTactic:
      properties:
        tactic_id:
          anyOf:
            - type: string
            - type: 'null'
          description: Tactic ID
          title: Tactic Id
        tactic_name:
          anyOf:
            - type: string
            - type: 'null'
          description: Tactic name
          title: Tactic Name
        tactic_source:
          anyOf:
            - type: string
            - type: 'null'
          description: Tactic source
          title: Tactic Source
        techniques:
          description: Techniques associated with the tactic
          items:
            $ref: '#/components/schemas/ScopedEDRAlertRespModelMitreTacticTechnique'
          title: Techniques
          type: array
      required:
        - techniques
      title: ScopedEDRAlertRespModelMitreTactic
      type: object
    OCSFObservable:
      description: OCSF Observable object
      properties:
        name:
          description: The full name of the observable attribute
          title: Name
          type: string
        type:
          anyOf:
            - $ref: '#/components/schemas/OCSFObservableType'
            - type: 'null'
          description: The observable data type string representation
        type_id:
          $ref: '#/components/schemas/OCSFObservableTypeID'
          description: The observable value type identifier
        value:
          anyOf:
            - type: string
            - type: 'null'
          description: >-
            The value associated with the observable attribute. The meaning of
            the value depends on the observable type
          title: Value
      required:
        - name
        - type_id
      title: OCSFObservable
      type: object
    ScopedEDRAlertSeverity:
      enum:
        - none
        - low
        - medium
        - high
        - critical
        - info
      title: ScopedEDRAlertSeverity
      type: string
    ScopedEDRAlertStatus:
      enum:
        - unknown
        - new
        - in_progress
        - unresolved
        - resolved
      title: ScopedEDRAlertStatus
      type: string
    ScopedEDRAlertVendor:
      enum:
        - crowdstrike
        - ms_defender_endpoint
        - sentinelone
      title: ScopedEDRAlertVendor
      type: string
    CrowdStrikeEDRVendorData:
      properties:
        aggregate_id:
          title: Aggregate Id
          type: string
        created_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Created At
        falcon_host_link:
          anyOf:
            - type: string
            - type: 'null'
          title: Falcon Host Link
        updated_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Updated At
        vendor:
          const: CROWDSTRIKE
          default: CROWDSTRIKE
          title: Vendor
          type: string
      required:
        - aggregate_id
      title: CrowdStrikeEDRVendorData
      type: object
    MSDefenderEDRVendorData:
      properties:
        classification:
          anyOf:
            - type: string
            - type: 'null'
          title: Classification
        created_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Created At
        determination:
          anyOf:
            - type: string
            - type: 'null'
          title: Determination
        updated_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Updated At
        vendor:
          const: MS_DEFENDER_ENDPOINT
          default: MS_DEFENDER_ENDPOINT
          title: Vendor
          type: string
      title: MSDefenderEDRVendorData
      type: object
    SentinelOneEDRVendorData:
      properties:
        analyst_verdict:
          anyOf:
            - type: string
            - type: 'null'
          title: Analyst Verdict
        created_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Created At
        updated_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Updated At
        vendor:
          const: SENTINELONE
          default: SENTINELONE
          title: Vendor
          type: string
      title: SentinelOneEDRVendorData
      type: object
    AlertVerdict:
      enum:
        - FALSE_POSITIVE
        - TRUE_POSITIVE
        - SUSPICIOUS
        - IGNORED
        - UNKNOWN
      title: AlertVerdict
      type: string
    ValidationError:
      properties:
        ctx:
          title: Context
          type: object
        input:
          title: Input
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object
    DeviceADInfo:
      properties:
        device_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Device Id
        domain:
          anyOf:
            - type: string
            - type: 'null'
          title: Domain
        org_unit:
          anyOf:
            - type: string
            - type: 'null'
          title: Org Unit
        site_name:
          anyOf:
            - type: string
            - type: 'null'
          title: Site Name
      title: DeviceADInfo
      type: object
    AWSMetadata:
      properties:
        account_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Account Id
        availability_zone:
          anyOf:
            - type: string
            - type: 'null'
          title: Availability Zone
        cloud_provider:
          $ref: '#/components/schemas/CloudProvider'
          default: aws
        image_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Image Id
        instance_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Instance Id
        instance_type:
          anyOf:
            - type: string
            - type: 'null'
          title: Instance Type
        kernel_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Kernel Id
        region:
          anyOf:
            - type: string
            - type: 'null'
          title: Region
        subnet_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Subnet Id
        vpc_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Vpc Id
      title: AWSMetadata
      type: object
    DeviceIdentity:
      properties:
        user_sid:
          anyOf:
            - type: string
            - type: 'null'
          title: User Sid
        username:
          title: Username
          type: string
      required:
        - username
      title: DeviceIdentity
      type: object
    DevicePlatform:
      enum:
        - mac
        - windows
        - linux
        - unknown
      title: DevicePlatform
      type: string
    DeviceVendor:
      properties:
        agent_info:
          anyOf:
            - $ref: '#/components/schemas/DeviceAgentInfo'
            - type: 'null'
        vendor:
          title: Vendor
          type: string
        vendor_id:
          title: Vendor Id
          type: string
      required:
        - vendor
        - vendor_id
      title: DeviceVendor
      type: object
    DeviceStatus:
      enum:
        - active
        - offline
        - quarantined
        - unknown
        - deleted
      title: DeviceStatus
      type: string
    DeviceTags:
      properties:
        key:
          title: Key
          type: string
        source:
          $ref: '#/components/schemas/DeviceTagSource'
        value:
          title: Value
          type: string
      required:
        - key
        - value
        - source
      title: DeviceTags
      type: object
    DeviceGroupsBase:
      properties:
        created_by:
          anyOf:
            - type: string
            - type: 'null'
          description: Who created the group in the tool.
          title: Created By
        description:
          anyOf:
            - type: string
            - type: 'null'
          description: Group description, where the tool has one.
          title: Description
        id:
          description: Leen's identifier for this group.
          format: uuid
          title: Id
          type: string
        name:
          description: Group name, as the tool names it.
          title: Name
          type: string
        vendor:
          description: Connector that produced this group.
          title: Vendor
          type: string
        vendor_created_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: When the group was created in the tool, where the tool reports it.
          title: Vendor Created At
        vendor_data:
          anyOf:
            - additionalProperties: true
              type: object
            - type: 'null'
          description: Vendor specific pass through data, values can vary based on vendor
          title: Vendor Data
        vendor_id:
          description: The tool's own identifier for the group.
          title: Vendor Id
          type: string
      required:
        - id
        - name
        - vendor_id
        - vendor
      title: DeviceGroupsBase
      type: object
    ScopedEDRAlertRespModelMitreTacticTechnique:
      properties:
        technique_id:
          anyOf:
            - type: string
            - type: 'null'
          description: Technique ID
          title: Technique Id
        technique_link:
          anyOf:
            - type: string
            - type: 'null'
          description: Technique link
          title: Technique Link
        technique_name:
          anyOf:
            - type: string
            - type: 'null'
          description: Technique name
          title: Technique Name
      title: ScopedEDRAlertRespModelMitreTacticTechnique
      type: object
    OCSFObservableType:
      description: Observable Type values
      enum:
        - UNKNOWN
        - HOSTNAME
        - IP_ADDRESS
        - MAC_ADDRESS
        - USER_NAME
        - EMAIL_ADDRESS
        - URL_STRING
        - FILE_NAME
        - HASH
        - PROCESS_NAME
        - RESOURCE_UID
        - PORT
        - SUBNET
        - COMMAND_LINE
        - COUNTRY
        - PROCESS_ID
        - HTTP_USER_AGENT
        - CWE_UID
        - CVE_UID
        - USER_CREDENTIAL_ID
        - ENDPOINT
        - USER
        - EMAIL
        - URL
        - FILE
        - PROCESS
        - GEO_LOCATION
        - CONTAINER
        - REGISTRY_KEY
        - REGISTRY_VALUE
        - FINGERPRINT
        - OTHER
      title: OCSFObservableType
      type: string
    OCSFObservableTypeID:
      description: Observable Type IDs
      enum:
        - 0
        - 1
        - 2
        - 3
        - 4
        - 5
        - 6
        - 7
        - 8
        - 9
        - 10
        - 11
        - 12
        - 13
        - 14
        - 15
        - 16
        - 17
        - 18
        - 19
        - 20
        - 21
        - 22
        - 23
        - 24
        - 25
        - 26
        - 27
        - 28
        - 29
        - 30
        - 99
      title: OCSFObservableTypeID
      type: integer
    CloudProvider:
      enum:
        - aws
      title: CloudProvider
      type: string
    DeviceAgentInfo:
      properties:
        agent_version:
          anyOf:
            - type: string
            - type: 'null'
          title: Agent Version
        policies:
          anyOf:
            - items:
                additionalProperties: true
                type: object
              type: array
            - type: 'null'
          title: Policies
        signature_version:
          anyOf:
            - type: string
            - type: 'null'
          title: Signature Version
      title: DeviceAgentInfo
      type: object
    DeviceTagSource:
      enum:
        - aws
        - qualys
        - wiz_vms
        - insight_vm
      title: DeviceTagSource
      type: string
  securitySchemes:
    API-Key:
      in: header
      name: X-API-KEY
      type: apiKey
    Connection-ID:
      in: header
      name: X-CONNECTION-ID
      type: apiKey

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.