Skip to main content
incident.io logo

Overview

Add incident.io to any ModuleX agent or workflow. Incident management and on-call response against the incident.io REST API (api.incident.io). Manage incidents, actions, follow-ups, workflows, schedules, escalations, escalation paths, custom fields, incident roles, and reference data.
Categories: Monitoring & Observability · Incident Management · On Call · Auth: API Key · Actions: 46

Authentication

API Key Authentication

Authenticate using your incident.io API key
1

Step 1

Log in to your incident.io dashboard
2

Step 2

Go to Settings -> API keys
3

Step 3

Create a new API key and select the permissions it should have
4

Step 4

Copy the key (it is shown only once) and paste it below

Required Credentials

Available Actions

Parameters

integer
Number of results to return per page (e.g., 10, 25, 50)
string
Pagination cursor to fetch the next page of results
string
Sort order: ‘created_at_newest_first’ or ‘created_at_oldest_first’
string
How to combine filters: ‘all’ or ‘any’

Response

Parameters

string
required
Unique identifier to prevent duplicate creation (e.g., a UUID)
string
required
ID of the severity level
string
required
Visibility of the incident: ‘public’ or ‘private’
string
Name of the incident
string
Brief summary of the incident
string
ID of the incident type
string
ID of the initial incident status

Response

Parameters

string
required
ID of the incident to retrieve

Response

Parameters

string
required
ID of the incident to update
boolean
required
Whether to notify the incident channel about this update
string
Updated name of the incident
string
Updated summary of the incident
string
Updated severity ID
string
Updated status ID
string
Updated incident type ID

Response

Parameters

string
Filter actions by incident ID
string
Filter by incident mode: standard, retrospective, test, tutorial, or stream

Response

Parameters

string
required
Action ID

Response

Parameters

string
Filter follow-ups by incident ID
string
Filter by incident mode: standard, retrospective, test, tutorial, or stream

Response

Parameters

string
required
Follow-up ID

Response

Parameters

integer
Number of results to return per page (e.g., 10, 25, 50)
string
Pagination cursor to fetch the next page of results
string
Filter users by email address
string
Filter users by Slack user ID

Response

Parameters

string
required
The unique identifier of the user to retrieve

Response

Response

Parameters

string
required
Name of the workflow
string
Folder to organize the workflow in
string
State of the workflow: active, draft, or disabled (Default: draft)
string
Trigger type for the workflow (Default: incident.updated)
array
Array of workflow steps (defaults to [])
array
Array of condition groups controlling when the workflow runs
string
When to run: newly_created, newly_created_and_active, active, or all (Default: newly_created)
array
Array of incident modes to run on (defaults to [‘standard’])
boolean
Whether to include private incidents (Default: true)
boolean
Whether to continue executing subsequent steps if one fails (Default: false)
array
Array of fields making the workflow run once per combination
array
Array of workflow expressions for advanced logic
object
Delay configuration object

Response

Parameters

string
required
The ID of the workflow to retrieve
boolean
Skip workflow step upgrades when existing step parameters changed

Response

Parameters

string
required
The ID of the workflow to update
string
required
New name for the workflow
array
required
Complete array of workflow steps
array
required
Complete array of workflow condition groups
string
required
When to run: newly_created, newly_created_and_active, active, or all
array
required
Complete array of incident modes to run on
boolean
required
Whether to include private incidents
boolean
required
Whether to continue executing subsequent steps if one fails
array
required
Complete array of fields that make the workflow run once
array
required
Complete array of workflow expressions
string
New state: active, draft, or disabled
string
New folder for the workflow
object
Delay configuration object

Response

Parameters

string
required
The ID of the workflow to delete

Response

Parameters

integer
Number of results to return per page (e.g., 10, 25, 50)
string
Pagination cursor to fetch the next page of results

Response

Parameters

string
required
Name of the schedule
string
required
Timezone for the schedule (e.g., America/New_York)
object
required
Schedule configuration object with rotations

Response

Parameters

string
required
The ID of the schedule

Response

Parameters

string
required
The ID of the schedule to update
string
New name for the schedule
string
New timezone for the schedule
object
Schedule configuration object with rotations

Response

Parameters

string
required
The ID of the schedule to delete

Response

Parameters

integer
Number of results to return per page (e.g., 10, 25, 50)
string
Pagination cursor to fetch the next page of results

Response

Parameters

string
required
Unique identifier to prevent duplicate escalation creation
string
required
Title of the escalation
string
ID of the escalation path (required if user_ids not provided)
string
Comma-separated user IDs to notify (required if no escalation_path_id)

Response

Parameters

string
required
The ID of the escalation policy

Response

Response

Parameters

string
required
Name of the custom field
string
required
Description of the custom field
string
required
Field type: text, single_select, multi_select, numeric, link, etc.

Response

Parameters

string
required
Custom field ID

Response

Parameters

string
required
Custom field ID
string
required
New name for the custom field
string
required
New description for the custom field

Response

Parameters

string
required
Custom field ID

Response

Response

Response

Response

Response

Parameters

string
required
Name of the incident role
string
required
Description of the incident role
string
required
Instructions for the incident role
string
required
Short form abbreviation for the role

Response

Parameters

string
required
The ID of the incident role

Response

Parameters

string
required
The ID of the incident role to update
string
required
Name of the incident role
string
required
Description of the incident role
string
required
Instructions for the incident role
string
required
Short form abbreviation for the role

Response

Parameters

string
required
The ID of the incident role to delete

Response

Response

Parameters

string
required
The ID of the incident timestamp

Response

Parameters

string
The ID of the incident to get updates for
integer
Number of results to return per page (e.g., 10, 25, 50)
string
Pagination cursor to fetch the next page of results

Response

Parameters

string
required
The ID of the schedule to get entries for
string
Start of the filter window in ISO 8601 format
string
End of the filter window in ISO 8601 format

Response

Parameters

string
required
The ID of the rotation to override
string
required
The ID of the layer this override applies to
string
required
The ID of the schedule
string
required
When the override starts in ISO 8601 format
string
required
When the override ends in ISO 8601 format
string
The ID of the user to assign
string
The email of the user to assign
string
The Slack ID of the user to assign

Response

Parameters

integer
Number of results to return per page (e.g., 10, 25, 50)
string
Pagination cursor to fetch the next page of results

Response

Parameters

string
required
Name of the escalation path
array
required
Array of escalation levels. Each level has targets (array of {id, type, schedule_id?, user_id?, urgency}) and time_to_ack_seconds
array
Optional working hours config: array of {weekday, start_time, end_time}

Response

Parameters

string
required
The ID of the escalation path

Response

Parameters

string
required
The ID of the escalation path to update
string
required
New name for the escalation path
array
required
New escalation path: array of levels with targets and time_to_ack_seconds
array
New working hours config: array of {weekday, start_time, end_time}

Response

Parameters

string
required
The ID of the escalation path to delete

Response

Limits & Quotas

  • Rate limit: 1200 requests/minute per API key (default).
  • Endpoints: most resources live under /v2; severities, incident statuses, and incident types are served under /v1.
  • Pagination: list endpoints accept page_size plus an after cursor; the tools expose both as optional parameters and do not auto-loop — pass the returned cursor to fetch the next page.
  • Error model: non-2xx responses and timeouts are caught and returned as success=False + error rather than raising. Plan retries on the agent side based on the error string.

CrowdStrike

Datadog

Grafana