List Incidents

curl --request GET \
  --url {scheme}://{host}:{port}/{basePath}/incidents \
  --header 'X-API-Key: <api-key>'

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('{scheme}://{host}:{port}/{basePath}/incidents', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_PORT => "62437",
  CURLOPT_URL => "{scheme}://{host}:{port}/{basePath}/incidents",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "{scheme}://{host}:{port}/{basePath}/incidents"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("{scheme}://{host}:{port}/{basePath}/incidents")

http = Net::HTTP.new(url.host, url.port)

request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "apiVersion": "v1",
  "kind": "IncidentList",
  "metadata": {
    "totalCount": 42,
    "page": 1,
    "pageSize": 20
  },
  "items": [
    {
      "name": "payment-service-oom-kill-1773933600",
      "namespace": "production",
      "severity": "high",
      "source": "watcher",
      "signalType": "oom_kill",
      "resource": {
        "kind": "Deployment",
        "name": "payment-service",
        "namespace": "production"
      },
      "description": "Auto-detected oom_kill anomaly: container restarted after OOMKill (value=5, threshold=3)",
      "riskScore": 65,
      "state": "Analyzing",
      "detectedAt": "2026-03-19T15:20:00Z",
      "remediationAttempts": 0,
      "maxRemediationAttempts": 5,
      "creationTimestamp": "2026-03-19T15:20:00Z",
      "labels": {
        "platform.chatcli.io/inc-id": "INC-20260319-001",
        "platform.chatcli.io/resource": "payment-service",
        "platform.chatcli.io/signal": "oom_kill"
      }
    },
    {
      "name": "api-gateway-latency-1773929400",
      "namespace": "staging",
      "severity": "medium",
      "source": "watcher",
      "signalType": "latency",
      "resource": {
        "kind": "Deployment",
        "name": "api-gateway",
        "namespace": "staging"
      },
      "description": "Auto-detected latency anomaly: p99 latency above threshold (value=1.8s, threshold=1s)",
      "riskScore": 30,
      "state": "Resolved",
      "detectedAt": "2026-03-19T14:10:00Z",
      "resolvedAt": "2026-03-19T14:35:00Z",
      "resolution": "Restarted deployment; latency back under threshold",
      "remediationAttempts": 1,
      "maxRemediationAttempts": 5,
      "creationTimestamp": "2026-03-19T14:10:00Z",
      "labels": {
        "platform.chatcli.io/inc-id": "INC-20260319-002",
        "platform.chatcli.io/resource": "api-gateway",
        "platform.chatcli.io/signal": "latency"
      }
    }
  ]
}

GET

incidents

List Incidents

curl --request GET \
  --url {scheme}://{host}:{port}/{basePath}/incidents \
  --header 'X-API-Key: <api-key>'

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('{scheme}://{host}:{port}/{basePath}/incidents', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_PORT => "62437",
  CURLOPT_URL => "{scheme}://{host}:{port}/{basePath}/incidents",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "{scheme}://{host}:{port}/{basePath}/incidents"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("{scheme}://{host}:{port}/{basePath}/incidents")

http = Net::HTTP.new(url.host, url.port)

request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "apiVersion": "v1",
  "kind": "IncidentList",
  "metadata": {
    "totalCount": 42,
    "page": 1,
    "pageSize": 20
  },
  "items": [
    {
      "name": "payment-service-oom-kill-1773933600",
      "namespace": "production",
      "severity": "high",
      "source": "watcher",
      "signalType": "oom_kill",
      "resource": {
        "kind": "Deployment",
        "name": "payment-service",
        "namespace": "production"
      },
      "description": "Auto-detected oom_kill anomaly: container restarted after OOMKill (value=5, threshold=3)",
      "riskScore": 65,
      "state": "Analyzing",
      "detectedAt": "2026-03-19T15:20:00Z",
      "remediationAttempts": 0,
      "maxRemediationAttempts": 5,
      "creationTimestamp": "2026-03-19T15:20:00Z",
      "labels": {
        "platform.chatcli.io/inc-id": "INC-20260319-001",
        "platform.chatcli.io/resource": "payment-service",
        "platform.chatcli.io/signal": "oom_kill"
      }
    },
    {
      "name": "api-gateway-latency-1773929400",
      "namespace": "staging",
      "severity": "medium",
      "source": "watcher",
      "signalType": "latency",
      "resource": {
        "kind": "Deployment",
        "name": "api-gateway",
        "namespace": "staging"
      },
      "description": "Auto-detected latency anomaly: p99 latency above threshold (value=1.8s, threshold=1s)",
      "riskScore": 30,
      "state": "Resolved",
      "detectedAt": "2026-03-19T14:10:00Z",
      "resolvedAt": "2026-03-19T14:35:00Z",
      "resolution": "Restarted deployment; latency back under threshold",
      "remediationAttempts": 1,
      "maxRemediationAttempts": 5,
      "creationTimestamp": "2026-03-19T14:10:00Z",
      "labels": {
        "platform.chatcli.io/inc-id": "INC-20260319-002",
        "platform.chatcli.io/resource": "api-gateway",
        "platform.chatcli.io/signal": "latency"
      }
    }
  ]
}

Each item is an Issue custom resource projected into the incident shape below. Filters are exact matches and are combined with AND.

string

Only incidents in this Kubernetes namespace. Omit to list every namespace.

string

Filter by severity: critical, high, medium, low

string

Filter by state: Detected, Analyzing, Remediating, Contained, Resolved, Escalated, Failed

string

Only incidents created at or after this RFC 3339 time (e.g., 2026-03-19T00:00:00Z)

string

Only incidents created at or before this RFC 3339 time

integer

default:"1"

Page number

integer

default:"20"

Items per page (maximum 100)

requiresHumanAction is true when the incident is Contained (the operator silenced the workload and a person must restore it) and requiredAction says what to do. chaosInduced / chaosExperiment are set when the incident was correlated with an active ChaosExperiment. Empty optional fields are omitted.

{
  "apiVersion": "v1",
  "kind": "IncidentList",
  "metadata": {
    "totalCount": 42,
    "page": 1,
    "pageSize": 20
  },
  "items": [
    {
      "name": "payment-service-oom-kill-1773933600",
      "namespace": "production",
      "severity": "high",
      "source": "watcher",
      "signalType": "oom_kill",
      "resource": {
        "kind": "Deployment",
        "name": "payment-service",
        "namespace": "production"
      },
      "description": "Auto-detected oom_kill anomaly: container restarted after OOMKill (value=5, threshold=3)",
      "riskScore": 65,
      "state": "Analyzing",
      "detectedAt": "2026-03-19T15:20:00Z",
      "remediationAttempts": 0,
      "maxRemediationAttempts": 5,
      "creationTimestamp": "2026-03-19T15:20:00Z",
      "labels": {
        "platform.chatcli.io/inc-id": "INC-20260319-001",
        "platform.chatcli.io/resource": "payment-service",
        "platform.chatcli.io/signal": "oom_kill"
      }
    },
    {
      "name": "api-gateway-latency-1773929400",
      "namespace": "staging",
      "severity": "medium",
      "source": "watcher",
      "signalType": "latency",
      "resource": {
        "kind": "Deployment",
        "name": "api-gateway",
        "namespace": "staging"
      },
      "description": "Auto-detected latency anomaly: p99 latency above threshold (value=1.8s, threshold=1s)",
      "riskScore": 30,
      "state": "Resolved",
      "detectedAt": "2026-03-19T14:10:00Z",
      "resolvedAt": "2026-03-19T14:35:00Z",
      "resolution": "Restarted deployment; latency back under threshold",
      "remediationAttempts": 1,
      "maxRemediationAttempts": 5,
      "creationTimestamp": "2026-03-19T14:10:00Z",
      "labels": {
        "platform.chatcli.io/inc-id": "INC-20260319-002",
        "platform.chatcli.io/resource": "api-gateway",
        "platform.chatcli.io/signal": "latency"
      }
    }
  ]
}

Authorizations

X-API-Key

string

header

required

API key sent in the X-API-Key header. Keys are read from the Secret chatcli-operator-secrets, key api-keys (fallback: ConfigMap chatcli-operator-config, key api-keys) in the operator namespace, as a YAML list of {key, role, name, description} (name is the identity recorded on approval decisions); the operator chart creates it only with apiKeys.create: true. Roles: viewer < operator < admin — any other role string is denied everywhere. Changes are picked up within about 30 seconds; deleting both the Secret and the ConfigMap revokes every key. With no keys configured every /api/ call returns 401, unless CHATCLI_OPERATOR_DEV_MODE=true, which grants admin without a key (development only).

Query Parameters

namespace

string

Kubernetes namespace. Empty means all namespaces.

severity

enum<string>

Exact match on spec.severity.

Available options:

critical,

high,

medium,

low

state

enum<string>

Exact match on status.state.

Available options:

Detected,

Analyzing,

Remediating,

Contained,

Resolved,

Escalated,

Failed

from

string<date-time>

Start of the time range (RFC3339). Unparseable values are ignored.

Example:

"2026-03-01T00:00:00Z"

string<date-time>

End of the time range (RFC3339). Unparseable values are ignored.

Example:

"2026-03-19T23:59:59Z"

page

integer

default:1

Page number (1-based). Invalid values fall back to 1.

Required range: x >= 1

pageSize

integer

default:20

Items per page. Values above 100 are capped at 100.

Required range: 1 <= x <= 100

Response

Paginated list of incidents

apiVersion

string

Example:

"v1"

kind

string

Example:

"IncidentList"

metadata

object

Show child attributes

items

object[]

Show child attributes

Get started

Documentation

List Incidents

Authorizations

Query Parameters

Response