swsd_list_incidents
List SWSD incidents filtered by state, priority, category, dates, assignee, requester, site, department, group, or free-text query. Returns compact summaries with pagination.
Instructions
List SWSD incidents with structured filters and pagination. Returns compact summaries (id, name, state, priority, assignee_email, requester_email, category, updated_at) — call swsd_get_incident for the full detail of any one row. Filters use SWSD repeated-key array semantics (multiple values within a filter are OR-ed). NOTE: assignee_email and requester_email are applied CLIENT-SIDE because SWSD /incidents.json silently ignores them server-side (verified 2026-05-08 against the live API). Other filters (state, category, dates, sites, departments, assigned_to_group, query) DO narrow server-side and are passed through.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number (1-indexed). | |
| per_page | No | Results per page (1-100). SWSD caps at 100. | |
| states | No | Filter to incidents matching ANY of these states (e.g. ["New", "Assigned"]). | |
| priorities | No | Filter to incidents matching ANY of these priorities (e.g. ["High", "Medium"]). | |
| categories | No | Filter to incidents matching ANY of these category names. | |
| assignee_email | No | Filter to incidents assigned to this email. | |
| requester_email | No | Filter to incidents requested by this email. | |
| updated_from | No | Filter to incidents updated on or after this ISO date or datetime (YYYY-MM-DD or RFC 3339). | |
| updated_within | No | Convenience alias for updated_from. Accepts "Nh" (hours), "Nd" (days), or "Nw" (weeks). Examples: "24h", "7d", "1w", "30d". Ignored if updated_from is explicitly set. | |
| updated_to | No | Filter to incidents updated on or before this ISO date or datetime. Pair with updated_from for an explicit range. | |
| created_from | No | Filter to incidents created on or after this ISO date or datetime (YYYY-MM-DD or RFC 3339). | |
| created_to | No | Filter to incidents created on or before this ISO date or datetime. | |
| sites | No | Filter to incidents at any of these site names (use swsd_list_sites to discover). | |
| departments | No | Filter to incidents in any of these department names. | |
| assigned_to_group | No | Filter to incidents assigned to this group ID. Use swsd_list_groups to find the ID. NOTE: this is GROUP id, not user id. | |
| state_is_not | No | Negative state filter: exclude incidents in any of these states (e.g. ["Resolved", "Closed"] to see only open work). | |
| sort_by | No | Sort key. Default is SWSD-side (typically updated_at desc). | |
| sort_order | No | Sort direction. Use uppercase per SWSD convention. | |
| query | No | Free-text search across incident title and description. Same async-indexing caveat as solution search — just-created tickets may not appear for a few minutes. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| incidents | Yes | ||
| pagination | Yes | ||
| applied_filters | Yes | Echo of the filters applied to this query — empty object if none. Use this to reason about whether the result count reflects your filters or the tenant total. NOTE: assignee_email / requester_email are applied client-side; everything else is server-side. | |
| scan | Yes | Honest accounting of what was scanned vs matched. |