List open incidents
list_open_incidentsRequires the read scope or higher. Returns an agent's failure inbox: every open incident on the monitors it owns, newest first, with context no single failure body carries. For learning, at a run's start, what broke meanwhile. failure_signature.occurrences: how often this exact failure has been seen (first_seen, last_seen, fingerprint), which separates retry from escalate. failed_step: the last step reported (for 'stalled', where the live run is stuck). exit_code: 137 (usually OOM) and 1 differ. duration_vs_normal: e.g. '8.2x the typical run (41m vs 5m), from 30 archived days', plus run_ms, typical_ms, ratio, days_sampled (0: the norm is the median of 5+ recent runs). cause: 'fail' (the job reported an error), 'silence' (it never reported; usually the scheduler or host) or 'upstream' (consecutive model-provider API errors; detail names the last). Also body_excerpt, run_id, ci.run_url. A missing field is no evidence, not none, normal or a clean exit; exit_code 0 marks a success that failed its expectations. add_incident_note takes an entry's incident_id. untrusted_fields names the data fields LastPing did not write (job output, exporter data or user-supplied names).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max incidents to return (default 50, max 200). Newest first, so a small limit drops the oldest open incidents, not the newest. | |
| agent_id | Yes | Agent UUID (from register_agent or list_agents). The inbox covers every monitor this agent owns. |