Skip to main content
GET
List Incidents
string
Filter by severity: critical, high, medium, low
string
Filter by state: Detected, Analyzing, Remediating, Resolved, Escalated, Failed
string
Filter by Kubernetes namespace
string
Filter by resource (e.g., Deployment/payment-service)
string
Filter incidents from a given ISO 8601 date (e.g., 2026-03-19T00:00:00Z)
integer
default:"1"
Page number
integer
default:"20"
Items per page (maximum 100)

Authorizations

Authorization
string
header
required

Bearer token issued by the operator. Format: Authorization: Bearer <token>.

Query Parameters

severity
enum<string>

Filter by severity: critical, high, medium, low.

Available options:
critical,
high,
medium,
low
state
enum<string>

Filter by state: Detected, Analyzing, Remediating, Resolved, Escalated, Failed.

Available options:
Detected,
Analyzing,
Remediating,
Resolved,
Escalated,
Failed
namespace
string

Filter by Kubernetes namespace.

resource
string

Filter by resource (e.g. Deployment/payment-service).

since
string<date-time>

ISO 8601 timestamp — only return incidents detected at or after this time.

Example:

"2026-03-19T00:00:00Z"

page
integer
default:1

Page number.

pageSize
integer
default:20

Items per page (max 100).

Required range: x <= 100

Response

Paginated list of incidents

apiVersion
string
Example:

"v1"

kind
string
Example:

"IncidentList"

metadata
object
items
object[]