swsd_list_incidents
List and filter SWSD incidents by state, priority, category, assignee, requester, date, or site, with paginated summaries to quickly locate tickets needing attention.
Instructions
List SWSD incidents with structured filters and pagination. Returns compact summaries (id, name, state, priority, assignee_email, requester_email, category, updated_at) — call swsd_get_incident for the full detail of any one row. Filters use SWSD repeated-key array semantics (multiple values within a filter are OR-ed). NOTE: assignee_email and requester_email are applied CLIENT-SIDE because SWSD /incidents.json silently ignores them server-side (verified 2026-05-08 against the live API). Other filters (state, category, dates, sites, departments, assigned_to_group, query) DO narrow server-side and are passed through.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number (1-indexed). | |
| query | No | Free-text search across incident title and description. Same async-indexing caveat as solution search — just-created tickets may not appear for a few minutes. | |
| sites | No | Filter to incidents at any of these site names (use swsd_list_sites to discover). | |
| states | No | Filter to incidents matching ANY of these states (e.g. ["New", "Assigned"]). | |
| sort_by | No | Sort key. Default is SWSD-side (typically updated_at desc). | |
| per_page | No | Results per page (1-100). SWSD caps at 100. | |
| categories | No | Filter to incidents matching ANY of these category names. | |
| created_to | No | Filter to incidents created on or before this ISO date or datetime. | |
| priorities | No | Filter to incidents matching ANY of these priorities (e.g. ["High", "Medium"]). | |
| sort_order | No | Sort direction. Use uppercase per SWSD convention. | |
| updated_to | No | Filter to incidents updated on or before this ISO date or datetime. Pair with updated_from for an explicit range. | |
| departments | No | Filter to incidents in any of these department names. | |
| created_from | No | Filter to incidents created on or after this ISO date or datetime (YYYY-MM-DD or RFC 3339). | |
| state_is_not | No | Negative state filter: exclude incidents in any of these states (e.g. ["Resolved", "Closed"] to see only open work). | |
| updated_from | No | Filter to incidents updated on or after this ISO date or datetime (YYYY-MM-DD or RFC 3339). | |
| assignee_email | No | Filter to incidents assigned to this email. | |
| updated_within | No | Convenience alias for updated_from. Accepts "Nh" (hours), "Nd" (days), or "Nw" (weeks). Examples: "24h", "7d", "1w", "30d". Ignored if updated_from is explicitly set. | |
| requester_email | No | Filter to incidents requested by this email. | |
| assigned_to_group | No | Filter to incidents assigned to this group ID. Use swsd_list_groups to find the ID. NOTE: this is GROUP id, not user id. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| scan | Yes | Honest accounting of what was scanned vs matched. | |
| incidents | Yes | ||
| pagination | Yes | ||
| applied_filters | Yes | Echo of the filters applied to this query — empty object if none. Use this to reason about whether the result count reflects your filters or the tenant total. NOTE: assignee_email / requester_email are applied client-side; everything else is server-side. |