## Add task auditors

`POST /v1/tasks/:taskId/add-auditors`

Adds users to a task as observers on behalf of the key's user.

## Parameters

| Parameter | Type | Required | Description |
|----------|-----|:-----:|---------|
| `taskId` (path) | number | yes | Task ID. List: [`GET /v1/tasks`](/docs/entities/tasks/list) |

## Request fields (body)

| Field | Type | Required | Description |
|------|-----|:-----:|---------|
| `auditorsIds` | number[] | no | IDs of the users to add as observers. List: [`GET /v1/users`](/docs/entities/users/list). If the field is omitted or the array is empty, the observers do not change and the response contains the current task |

Any field other than `auditorsIds` is rejected with `400 INVALID_PARAMS`.

## Examples

### curl — personal key

```bash
curl -X POST 'https://vibecode.bitrix24.com/v1/tasks/289/add-auditors' \
  -H 'X-Api-Key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"auditorsIds":[42]}'
```

### curl — OAuth application

```bash
curl -X POST 'https://vibecode.bitrix24.com/v1/tasks/289/add-auditors' \
  -H 'X-Api-Key: YOUR_APP_KEY' \
  -H 'Authorization: Bearer USER_SESSION_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{"auditorsIds":[42]}'
```

### JavaScript — personal key

```javascript
const response = await fetch('https://vibecode.bitrix24.com/v1/tasks/289/add-auditors', {
  method: 'POST',
  headers: {
    'X-Api-Key': 'YOUR_API_KEY',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({"auditorsIds":[42]}),
})
const result = await response.json()
console.log(result.data.task.auditors)
```

### JavaScript — OAuth application

```javascript
const response = await fetch('https://vibecode.bitrix24.com/v1/tasks/289/add-auditors', {
  method: 'POST',
  headers: {
    'X-Api-Key': 'YOUR_APP_KEY',
    'Authorization': 'Bearer USER_SESSION_TOKEN',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({"auditorsIds":[42]}),
})
const result = await response.json()
console.log(result.data.task.auditors)
```

## Response fields

| Field | Type | Description |
|------|-----|---------|
| `success` | boolean | `true` on success |
| `data.task` | object | The full task object after the action. Values arrive in raw form: numbers as strings (`"id": "289"`), flags as `Y` or `N` (`"taskControl": "N"`). [`GET /v1/tasks/:id`](/docs/entities/tasks/get) returns the same fields as numbers and `true`/`false` |
| `data.task.id` | string | Task ID |
| `data.task.auditors` | string[] | Observer IDs after the call |
| `data.task.action` | object | Which actions the key's user can take after the call: the key is the action name (`start`, `pause`, `complete`, `approve`, `disapprove`, `defer`, `renew` and others), the value is `true` or `false` |

## Response example

Only the main fields of the task object are shown.

```json
{
  "success": true,
  "data": {
    "task": {
      "id": "289",
      "title": "Prepare the quarterly report",
      "status": "2",
      "createdBy": "1",
      "responsibleId": "1",
      "accomplices": [],
      "auditors": ["42"],
      "changedDate": "2026-10-19T17:20:03+02:00",
      "taskControl": "N",
      "action": {
        "start": true,
        "pause": false,
        "complete": true,
        "approve": false,
        "disapprove": false,
        "defer": true,
        "renew": false
      }
    }
  }
}
```

## Error response example

422 — the task does not exist or is not accessible to the key's user:

```json
{
  "success": false,
  "error": {
    "code": "BITRIX_ERROR",
    "message": "Task not found or not accessible",
    "b24Code": "1"
  }
}
```

The `error.message` text comes from Bitrix24. Branch on `error.code`, not on the message text.

## Errors

| HTTP | Code | Description |
|------|-----|----------|
| 400 | `INVALID_PARAMS` | `taskId` is not a positive integer: `taskId must be a positive integer` |
| 400 | `INVALID_PARAMS` | The request body is not a JSON object: `body must be an object` |
| 400 | `INVALID_PARAMS` | The body contains fields other than `auditorsIds`: `body contains unsupported fields` |
| 400 | `INVALID_PARAMS` | `auditorsIds` is not an array of positive integers: `auditorsIds must be an array of positive integers` |
| 401 | `MISSING_API_KEY` | `X-Api-Key` is missing |
| 401 | `INVALID_API_KEY` | The key is not found |
| 401 | `TOKEN_MISSING` | The key has no valid Bitrix24 token |
| 403 | `SCOPE_DENIED` | The key lacks the `task` or `tasks` scope |
| 403 | `WRITE_BLOCKED_READONLY_KEY` | The key is read-only |
| 403 | `BITRIX_ACCESS_DENIED` | The key's user has no rights to the task |
| 422 | `BITRIX_ERROR` | No task exists with this `taskId`, or it is not accessible: `Task not found or not accessible` |
| 422 | `BITRIX_ERROR` | Bitrix24 rejected the action for another reason |

The full list of common API errors — [Errors](/docs/errors).

## See also

- [Add task accomplices](/docs/entities/tasks/add-accomplices)
- [Delegate task](/docs/entities/tasks/delegate)
- [Get task](/docs/entities/tasks/get)
- [Tasks](/docs/entities/tasks)