List incidents
list_incidentsList the org's incidents: incident id, affected monitor, severity, open/resolved times, and latest update phase. Defaults to currently-open ones; pass state="all" with an optional from/to window (default: last 30 days) for resolved history, and monitor_id to narrow to one monitor. Read-only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | RFC 3339 end of the window. Defaults to now. Incidents that opened after it are excluded, running or not. | |
| from | No | RFC 3339 start of the window. Defaults to 30 days ago. An incident that is still running is listed however long ago it opened. | |
| state | No | Which incidents to return: `open` (default) for the ones still running, or `all` to include resolved ones inside the window. | |
| cursor | No | Opaque pagination cursor from a previous call's `next_cursor`. It carries the whole query, so send it on its own: any other filter passed alongside it is ignored rather than silently changing the page. | |
| monitor_id | No | Restrict to one monitor (id from `list_monitors`). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | ||
| from | Yes | RFC 3339 window actually read, after the defaults and the one-year cap. It bounds the *resolved* incidents only: one that is still running is listed however long ago it opened, so it can be older than `from`. Describe spans from these, never from what was asked for. | |
| items | Yes | ||
| next_cursor | No |