incident.io integration
incident.io is an incident response platform: it runs incidents from declaration to retrospective, and carries the alerting and on-call rota that starts them. Declare incidents, edit them, filter the incident list by status, severity, type, role or custom field, read the update timeline, timestamps, participants and workload, attach external issues, and grant or revoke access to a private incident. Configure the vocabulary an incident is described with: statuses, types, roles, severities, custom fields and their options. Track the work that comes out of one: actions, follow-ups (including connecting a follow-up to an external issue tracker) and postmortem documents. Work with alerts: list and resolve them, push an alert event into an HTTP alert source, keep alert attributes, alert routes, alert sources and alert notes, and ping a heartbeat so a missed one fires. Drive escalation: trigger and cancel escalations, manage escalation paths, on-call schedules, their entries, overrides, replicas and sync rules, external sync targets, and maintenance windows. Manage the service catalog (types, their schema, entries and bulk updates) and the public status pages (incidents, updates, retrospective incidents and maintenances). Read users, their notification methods and rules and paging provider, read teams, and manage automation workflows and their runs. Authentication is an incident.io API key sent as a bearer token; the roles it may use are fixed when the key is created.
Say what should happen.
The workflow builds itself.
What you can do with incident.io
Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.
Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.
Action, 4 operations
create_actionCreate actionPOSTCreate a new incident action.delete_actionDelete actionDELETEDelete an incident action.get_actionGet actionGETGet a single incident action.list_actionsList actionsGETList all actions for an organisation.
Alert attribute, 4 operations
create_alert_attributeCreate alert attributePOSTCreate a new alert attribute.delete_alert_attributeDelete alert attributeDELETEDestroy an alert attribute.get_alert_attributeGet alert attributeGETShow an alert attribute.list_alert_attributesList alert attributesGETList alert attributes.
Alert note, 4 operations
create_alert_noteCreate alert notePOSTAdd a note to an alert.delete_alert_noteDelete alert noteDELETEDelete an alert note.get_alert_noteGet alert noteGETGet a single alert note.list_alert_notesList alert notesGETList alert notes attached to an alert.
Alert route, 4 operations
create_alert_routeCreate alert routePOSTCreate a new alert route in your account.delete_alert_routeDelete alert routeDELETEDelete an existing alert route in your account.get_alert_routeGet alert routeGETLoad details about a specific alert route in your account.list_alert_routesList alert routesGETList all alert routes in your account.
Alert source, 4 operations
create_alert_sourceCreate alert sourcePOSTCreate a new alert source in your account.delete_alert_sourceDelete alert sourceDELETEDelete an existing alert source in your account.get_alert_sourceGet alert sourceGETLoad details about a specific alert source in your account.list_alert_sourcesList alert sourcesGETList all alert sources in your account.
Catalog entrie, 4 operations
create_catalog_entryCreate catalog entryPOSTCreate an entry within the catalog. We support a maximum of 50,000 entries per type.delete_catalog_entryDelete catalog entryDELETEArchives a catalog entry.get_catalog_entryGet catalog entryGETShow a single catalog entry.list_catalog_entriesList catalog entriesGETList entries for a catalog type.
Catalog type, 4 operations
create_catalog_typeCreate catalog typePOSTCreate a catalog type. The schema must be updated using the UpdateTypeSchema endpoint.delete_catalog_typeDelete catalog typeDELETEArchives a catalog type and associated entries.get_catalog_typeGet catalog typeGETShow a single catalog type.list_catalog_typesList catalog typesGETList all catalog types for an organisation, including those synced from external resources.
Custom field, 4 operations
create_custom_fieldCreate custom fieldPOSTCreate a new custom field.delete_custom_fieldDelete custom fieldDELETEDelete a custom field.get_custom_fieldGet custom fieldGETGet a single custom field.list_custom_fieldsList custom fieldsGETList all custom fields for an organisation.
Custom field option, 4 operations
create_custom_field_optionCreate custom field optionPOSTCreate a custom field option. If the sort key is not supplied, it'll default to 1000, so the option appears near the end of the list.delete_custom_field_optionDelete custom field optionDELETEDelete a custom field option.get_custom_field_optionGet custom field optionGETGet a single custom field option.list_custom_field_optionsList custom field optionsGETShow custom field options for a custom field.
Escalation path, 4 operations
create_escalation_pathCreate escalation pathPOSTCreate an escalation path.delete_escalation_pathDelete escalation pathDELETEArchives an escalation path.get_escalation_pathGet escalation pathGETShow an escalation path.list_escalation_pathsList escalation pathsGETList all escalation paths in your account.
Follow up, 4 operations
create_follow_upCreate follow upPOSTCreate a new incident follow-up.delete_follow_upDelete follow upDELETEDelete an incident follow-up.get_follow_upGet follow upGETGet a single incident follow-up.list_follow_upsList follow upsGETList all follow-ups for an organisation.
Incident role, 4 operations
create_incident_roleCreate incident rolePOSTCreate a new incident role.delete_incident_roleDelete incident roleDELETERemoves an existing role.get_incident_roleGet incident roleGETGet a single incident role.list_incident_rolesList incident rolesGETList all incident roles for an organisation.
Incident statuse, 4 operations
create_incident_statusCreate incident statusPOSTCreate a new incident status.delete_incident_statusDelete incident statusDELETEDelete an incident status.get_incident_statusGet incident statusGETGet a single incident status.list_incident_statusesList incident statusesGETList all incident statuses for an organisation.
Maintenance window, 4 operations
create_maintenance_windowCreate maintenance windowPOSTCreate a new maintenance window.delete_maintenance_windowDelete maintenance windowDELETEArchives a maintenance window. Cannot archive active windows.get_maintenance_windowGet maintenance windowGETShow a particular maintenance window.list_maintenance_windowsList maintenance windowsGETList maintenance windows for your organisation.
Escalation, 3 operations
create_escalationCreate escalationPOSTCreate an escalation.get_escalationGet escalationGETShow a specific escalation.list_escalationsList escalationsGETList all escalations for your account.
Incident, 3 operations
create_incidentCreate incidentPOSTCreate a new incident.get_incidentGet incidentGETGet a single incident.list_incidentsList incidentsGETList all incidents for an organisation.
Incident attachment, 3 operations
create_incident_attachmentCreate incident attachmentPOSTAttaches an external resource to an incident.delete_incident_attachmentDelete incident attachmentDELETEUnattaches an external resource from an incident.list_incident_attachmentsList incident attachmentsGETList all incident attachments for a given external resource or incident. You must provide either a specific incident ID or a specific external resource type and external ID.
Replica, 3 operations
create_schedule_replicaCreate schedule replicaPOSTCreate a new schedule replica.delete_schedule_replicaDelete schedule replicaDELETEArchives a single schedule replica, stopping incident.io from syncing on-call shifts to the external provider.get_schedule_replicaGet schedule replicaGETGet a single schedule replica.
Schedule, 3 operations
create_scheduleCreate schedulePOSTCreate a new schedule.delete_scheduleDelete scheduleDELETEArchives a single schedule. Will fail if the schedule has active replicas , remove all replicas before deleting.get_scheduleGet scheduleGETGet a single schedule.
Schedule sync target, 3 operations
create_schedule_sync_targetCreate schedule sync targetPOSTCreate a new schedule sync target for a Slack user group.delete_schedule_sync_targetDelete schedule sync targetDELETEArchive a schedule sync target. Will fail if any active sync rules reference this target.get_schedule_sync_targetGet schedule sync targetGETGet a single schedule sync target.
Severitie, 3 operations
create_severityCreate severityPOSTCreate a new severity.delete_severityDelete severityDELETEDelete a severity.get_severityGet severityGETGet a single incident severity.
Sync rule, 3 operations
create_schedule_sync_ruleCreate schedule sync rulePOSTCreate a new sync rule linking a schedule to a sync target.delete_schedule_sync_ruleDelete schedule sync ruleDELETEArchive a sync rule, unlinking the schedule from the sync target.get_schedule_sync_ruleGet schedule sync ruleGETGet a single sync rule for a schedule.
Workflow, 3 operations
create_workflowCreate workflowPOSTCreate a new workflow.delete_workflowDelete workflowDELETEArchives a workflow.get_workflowGet workflowGETShow a workflow by ID.
Alert, 2 operations
get_alertGet alertGETShow a single alert for your account.list_alertsList alertsGETList all alerts for your account. This endpoint supports a number of filters, which can help find alerts matching certain criteria. These filters work similarly to the filters on.
Incident timestamp, 2 operations
get_incident_timestampGet incident timestampGETGet a single incident timestamp.list_incident_timestampsList incident timestampsGETList all incident timestamps for an organisation.
Incident type, 2 operations
get_incident_typeGet incident typeGETGet a single incident type.list_incident_typesList incident typesGETList all incident types for an organisation.
Schedule override, 2 operations
create_schedule_overrideCreate schedule overridePOSTCreate a new schedule override.delete_schedule_overrideDelete schedule overrideDELETEDelete a schedule override, restoring whoever the rotations put on-call for that window.
Status page incident, 2 operations
create_status_page_incidentCreate status page incidentPOSTCreate a status page incident.get_status_page_incidentGet status page incidentGETShow a status page incident.
Status page maintenance, 2 operations
create_status_page_maintenanceCreate status page maintenancePOSTSchedule a Status Page maintenance window.get_status_page_maintenanceGet status page maintenanceGETShow a status page maintenance window.
Attach, 1 operation
attach_postmortem_documentAttach postmortem documentPOSTLink an externally-hosted post-mortem document to an incident.
Bulk update, 1 operation
bulk_update_catalog_entriesBulk update catalog entriesPOSTUpdate multiple catalog entries in a single operation. You can update up to 250 entries at once. This operation is atomic - either all entries are updated successfully, or none.
Cancel, 1 operation
cancel_escalationCancel escalationPOSTCancel an escalation.
Catalog resource, 1 operation
list_catalog_resourcesList catalog resourcesGETList available engine resources for the catalog.
Connect external issue, 1 operation
connect_follow_up_external_issueConnect follow up external issuePOSTConnect a follow-up to an existing issue in an issue tracker, using the URL of the issue.
Content, 1 operation
get_postmortem_document_contentGet postmortem document contentGETFetch the content of a post-mortem document, rendered as markdown.
Edit, 1 operation
edit_incidentEdit incidentPOSTEdit an existing incident.
Http, 1 operation
create_http_alert_eventCreate http alert eventPOSTCreate an alert event using an HTTP source.
Identity, 1 operation
get_identityGet identityGETTest if your API key is valid, and which roles it has.
Import postmortem document, 1 operation
import_incident_postmortem_documentImport incident postmortem documentPOSTImport a postmortem document from markdown into an incident.
Incident alert, 1 operation
list_incident_alertsList incident alertsGETList the connections between incidents and alerts.
Incident membership, 1 operation
create_incident_membershipCreate incident membershipPOSTMakes a user a member of a private incident.
Incident participant, 1 operation
list_incident_participantsList incident participantsGETList the participants of an incident with the role they took.
Incident participant workload, 1 operation
list_incident_participant_workloadsList incident participant workloadsGETList the participants of an incident with their workload.
Incident relationship, 1 operation
list_incident_relationshipsList incident relationshipsGETList related incidents for a specific incident.
Incident update, 1 operation
list_incident_updatesList incident updatesGETList all incident updates for an organisation, or for a specific incident.
Paging provider, 1 operation
get_user_paging_providerGet user paging providerGETShow the paging provider that would be used to escalate to this user. Reflects their explicit preference if set; otherwise resolves to the effective fallback (typically `native`.
Postmortem document, 1 operation
get_postmortem_documentGet postmortem documentGETGet a single post-mortem document by ID.
Status page incident update, 1 operation
create_status_page_incident_updateCreate status page incident updatePOSTPost an update on a Status Page incident.
Status page maintenance update, 1 operation
create_status_page_maintenance_updateCreate status page maintenance updatePOSTPost an update on a Status Page maintenance window.
Status page retrospective incident, 1 operation
create_status_page_retrospective_incidentCreate status page retrospective incidentPOSTCreate a retrospective (historical) status page incident.
Status page structure, 1 operation
get_status_page_structureGet status page structureGETShow the structure of a status page.
Team, 1 operation
get_teamGet teamGETGet a single team.
User, 1 operation
get_userGet userGETGet a single user.
Workflow run, 1 operation
get_workflow_runGet workflow runGETShow a single workflow run, including the full webhook delivery for any step that sent one.
Showing the first 120 of 166 endpoints. The rest are in the product, searchable from the workflow builder and from chat.
Use incident.io from Claude Code, Cursor or Codex
Connect incident.io in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its incident.io operations become tools the client can call, next to every other integration you connected.
claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"
[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"{
"mcpServers": {
"livecontext": {
"type": "http",
"url": "https://livecontext.ai/mcp",
"headers": {
"X-API-Key": "YOUR_API_KEY"
}
}
}
}How to connect incident.io
- Create your workspace
Sign up free. Nothing to install.
- Connect incident.io once
Add your incident.io connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
- Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.
incident.io integration FAQ
What can you do with the incident.io integration?
LiveContext exposes 166 operations on incident.io, covering action, alert attribute, alert note and alert route.
