Incidents API

Endpoints Overview

List Incidents

GET /prod/api/incidents

curl -H "Authorization: Bearer $TOKEN"   "https://your-instance.stackflow-tech.com/prod/api/incidents?state=new&priority=P1&limit=25"

Query Parameters:

Get Incident

GET /prod/api/incidents/:id

curl -H "Authorization: Bearer $TOKEN"   https://your-instance.stackflow-tech.com/prod/api/incidents/INC0001234

{
  "id": "INC0001234",
  "number": "INC0001234",
  "short_description": "Database timeout in prod",
  "description": "Seeing intermittent timeouts on the main Aurora cluster...",
  "priority": "P2",
  "state": "in_progress",
  "category": "database",
  "subcategory": "aurora",
  "impact": "medium",
  "urgency": "medium",
  "assignment_group": "Platform Engineering",
  "assigned_to": "jane.doe@example.com",
  "opened_by": "john.smith@example.com",
  "ci_id": "CI0000789",
  "parent_problem_id": null,
  "change_id": null,
  "sla_breach_at": "2026-05-19T18:30:00Z",
  "resolved_at": null,
  "closed_at": null,
  "created_at": "2026-05-19T14:30:00Z",
  "updated_at": "2026-05-19T14:45:00Z",
  "work_notes_count": 3,
  "ai_suggested_resolution": "Check Aurora connection pool settings..."
}

Create Incident

POST /prod/api/incidents

curl -X POST   https://your-instance.stackflow-tech.com/prod/api/incidents   -H "Authorization: Bearer $TOKEN"   -H "Content-Type: application/json"   -d '{
    "short_description": "Redis cache miss rate above 90%",
    "description": "ElastiCache Redis cluster showing 95% cache miss rate since 15:00 UTC. All microservices impacted.",
    "priority": "P1",
    "category": "cache",
    "subcategory": "elasticache",
    "impact": "high",
    "urgency": "high",
    "assignment_group": "Platform Engineering",
    "ci_id": "CI0000456",
    "notify_stakeholders": true
  }'

Update Incident

PATCH /prod/api/incidents/:id

curl -X PATCH   https://your-instance.stackflow-tech.com/prod/api/incidents/INC0001234   -H "Authorization: Bearer $TOKEN"   -H "Content-Type: application/json"   -d '{
    "state": "in_progress",
    "assigned_to": "jane.doe@example.com",
    "work_note": "Investigating Aurora slow query log — identified missing index on incidents_created_at"
  }'

State transitions follow this machine:

new → in_progress → resolved → closed
new → cancelled
in_progress → on_hold → in_progress
resolved → reopened → in_progress

Delete Incident

DELETE /prod/api/incidents/:id

# Requires super_admin or itsm_manager role
curl -X DELETE   -H "Authorization: Bearer $TOKEN"   https://your-instance.stackflow-tech.com/prod/api/incidents/INC0001234

Work Notes Sub-Resource

# List work notes
GET /prod/api/incidents/:id/notes

curl -H "Authorization: Bearer $TOKEN"   https://your-instance.stackflow-tech.com/prod/api/incidents/INC0001234/notes

# Add a work note
POST /prod/api/incidents/:id/notes

curl -X POST   https://your-instance.stackflow-tech.com/prod/api/incidents/INC0001234/notes   -H "Authorization: Bearer $TOKEN"   -H "Content-Type: application/json"   -d '{
    "body": "Restarted Aurora connection pool. Error rate dropped to 0. Monitoring for 30 min.",
    "visibility": "team",
    "attachments": []
  }'

{
  "id": "note_abc123",
  "incident_id": "INC0001234",
  "body": "Restarted Aurora connection pool...",
  "visibility": "team",
  "author": "jane.doe@example.com",
  "created_at": "2026-05-19T15:10:00Z"
}

Bulk Operations

POST /prod/api/incidents/bulk

curl -X POST   https://your-instance.stackflow-tech.com/prod/api/incidents/bulk   -H "Authorization: Bearer $TOKEN"   -H "Content-Type: application/json"   -d '{
    "operation": "update",
    "ids": ["INC0001230", "INC0001231", "INC0001232"],
    "fields": {
      "assignment_group": "Platform Engineering",
      "state": "in_progress"
    }
  }'

Field Reference