incident.io
MCP server for incident.io - incident management, response coordination, and on-call operations
Tools
154 available tools
Search the tool definitions captured from the MCP server. The live list can vary with version, deployment, and credentials.
154 tools found.
Action convert
Tool name:
action_convertConvert an incident action into a follow-up.
Create action
Tool name:
action_createCreate an action on an incident.
Delete action
Tool name:
action_deleteDelete an incident action.
List action
Tool name:
action_listList incident actions with optional filters and pagination.
Update action
Tool name:
action_updateUpdate an existing incident action.
Alert attach
Tool name:
alert_attachAttach an existing alert to an incident, marking it as related.
Alert create incident
Tool name:
alert_create_incidentDeclare a new incident for one or more alerts, attaching them to it as related.
Alert detach
Tool name:
alert_detachDetach an alert from an incident, marking it as unrelated.
List alert
Read onlyTool name:
alert_listList alerts with optional filters and pagination.
List alert note
Tool name:
alert_note_listList notes attached to an alert.
Alert note manage
Tool name:
alert_note_manageWrite, edit or remove a note on an alert.
Alert resolve
Tool name:
alert_resolveResolve one or more firing alerts, marking them resolved now and recording who did it.
Alert show
Read onlyTool name:
alert_showLook up an alert by ID and return its details.
List alert source
Read onlyTool name:
alert_source_listList configured alert sources for this organisation.
Alert stats
Read onlyTool name:
alert_statsCount alerts grouped by one or more dimensions, returning aggregate statistics.
Alert tag apply
Tool name:
alert_tag_applyAdd, remove, or replace tags on up to 50 alerts.
List alert tag
Tool name:
alert_tag_listList the organisation's active alert-tag vocabulary.
Analysis start
Read onlyTool name:
analysis_startStart an operational analysis session.
Ask
DestructiveTool name:
askAsk the incident.io AI agent a question about your organisation's incidents, on-call schedules, alert routes, and operational setup.
Ask incident
DestructiveTool name:
ask_incidentAsk the incident-focused AI agent a question.
Ask telemetry
DestructiveTool name:
ask_telemetryAsk the telemetry-focused AI agent a question, or run a native query verbatim.
Assign incident role
Tool name:
assign_incident_roleAssign a specific incident role to a user for an incident
List catalog entry
Read onlyTool name:
catalog_entry_listList entries in a catalog type with optional search and pagination.
Catalog entry show
Read onlyTool name:
catalog_entry_showLook up a catalog entry by ID and return its full details.
List catalog type
Read onlyTool name:
catalog_type_listList catalog types configured in this organisation.
Close incident
Tool name:
close_incidentClose an incident by setting its status to 'Closed'
List code change
Tool name:
code_change_listList merged code changes (pull or merge requests) newest merge first, with filters on repository, merge time, deploy status, title and author.
Code change show
Tool name:
code_change_showLook up one code change (a pull or merge request we have ingested from the organisation's code host) and everything we know about when it was deployed.
Create cover request
Tool name:
cover_request_createCreate a cover request asking for volunteers to cover a shift.
List cover request
Tool name:
cover_request_listList cover requests: asks for someone else to take a stretch of an on-call shift.
Cover request manage
Tool name:
cover_request_manageManage a cover request as its requester or creator.
Cover request respond
Tool name:
cover_request_respondRespond to a cover request you are a candidate on.
Create alert event
Tool name:
create_alert_eventCreate an alert event in incident.io
Create alert route
Tool name:
create_alert_routeCreate a new alert route in incident.io
Create custom field
Tool name:
create_custom_fieldCreate a new custom field for incidents.
Create custom field option
Tool name:
create_custom_field_optionAdd a new option to a single_select or multi_select custom field
Create incident
Tool name:
create_incidentCreate a new incident in incident.io
Create incident smart
Tool name:
create_incident_smartCreate a new incident with smart defaults - automatically fetches first available severity, type, and status if not provided
Create incident update
Tool name:
create_incident_updateCreate a new incident update (status message) for an incident
Create custom dashboard
Tool name:
custom_dashboard_createCreate a native Insights dashboard from a set of organised charts and tiles.
Custom field values
Tool name:
custom_field_valuesLook up which values a custom field accepts, so you can set it to a real one.
Delete custom field
Tool name:
delete_custom_fieldDelete a custom field.
Delete incident update
Tool name:
delete_incident_updateDelete an incident update
Document search
Tool name:
document_searchSearch the organisation's synced knowledge base documents — runbooks, guides, post-mortems, architecture notes and similar — indexed from sources like GitHub, Notion, and Confluence.
Document show
Tool name:
document_showRead a document from the organisation's synced knowledge base, returning the full text content (typically markdown) alongside its title, generated summary and tags, source system, and URL.
Duration metrics stats
Tool name:
duration_metrics_statsAggregate incident duration metrics (e.g. time to acknowledge, time to resolve) grouped by one or more dimensions, returning per-group statistics.
Create escalation
Tool name:
escalation_createRaise an escalation to page a specific user or an escalation path.
List escalation
Read onlyTool name:
escalation_listList escalations (also known as "pages") with optional filters, newest first.
List escalation path
Read onlyTool name:
escalation_path_listList escalation paths configured in this organisation.
Escalation path show
Read onlyTool name:
escalation_path_showLook up an escalation path and show who would be paged at each level.
Escalation respond
DestructiveTool name:
escalation_respondRespond to an active escalation (page) on behalf of the authenticated user.
Escalation show
Read onlyTool name:
escalation_showLook up an escalation (page) by ID and return its details.
Escalation stats
Read onlyTool name:
escalation_statsCount escalations (pages) grouped by one or more dimensions, returning aggregate statistics with workload from linked incidents.
List extension connector
Tool name:
extension_connector_listList the organisation's extension connectors — the MCP servers and HTTP APIs connected through Extensions — with their capabilities and connection health.
Create extension plugin
Tool name:
extension_plugin_createLoad a plugin from a source-control repository as an extension, and start its first sync.
List extension plugin
Tool name:
extension_plugin_listList the organisation's extension plugins with their skills and sync state.
Extension plugin sync
Tool name:
extension_plugin_syncRequest a re-sync of an extension plugin from its source repository.
Update extension plugin
Tool name:
extension_plugin_updateUpdate an extension plugin: enable or disable it, rename its mount, or change which of its skills agents may load.
Extension skill feedback list
Tool name:
extension_skill_feedback_listGet the current feedback on an extension plugin's skills, so their author can improve them.
Extension skill feedback update
Tool name:
extension_skill_feedback_updateDismiss a skill feedback issue the organisation won't fix, or reopen one dismissed earlier.
Extension skill usage list
Tool name:
extension_skill_usage_listList individual assessed skill loads — one row per time an agent loaded a skill and the retrospective assessment judged how it went.
Extension upload URL
Tool name:
extension_upload_urlGet a URL to upload extension content you want to check, when it isn't in a repository we can read.
Extension verify
Tool name:
extension_verifyTest proposed extension content before landing it.
Extension verify show
Tool name:
extension_verify_showShow a plugin verification's status and result.
List external service
Tool name:
external_service_listList the third-party services whose status pages we monitor.
External service status
Tool name:
external_service_statusRead the state of third-party services we monitor, and the state changes inside a window.
Feedback
DestructiveTool name:
feedbackSubmit feedback about the incident.io MCP tools to help us improve them.
Create follow up
DestructiveTool name:
follow_up_createCreate a follow-up on an incident, either from scratch or by importing an existing external ticket.
List follow up
Read onlyTool name:
follow_up_listList follow-ups with optional filters and pagination.
Follow up stats
Read onlyTool name:
follow_up_statsCount follow-ups grouped by one or more dimensions, returning aggregate statistics.
Update follow up
DestructiveTool name:
follow_up_updateUpdate an existing follow-up.
Get action
Tool name:
get_actionGet details of a specific action by ID
Get alert
Tool name:
get_alertGet details of a specific alert by ID
Get alert route
Tool name:
get_alert_routeGet details of a specific alert route by ID
Get custom field
Tool name:
get_custom_fieldGet details of a specific custom field by ID, including its options, type, and configuration
Get follow up
Tool name:
get_follow_upGet details of a specific follow-up by ID.
Get incident
Tool name:
get_incidentGet details of a specific incident by ID or reference.
Get incident update
Tool name:
get_incident_updateGet details of a specific incident update by ID
Get severity
Tool name:
get_severityGet details of a specific severity level by ID
Get workflow
Tool name:
get_workflowGet details of a specific workflow by ID
Create glossary
Tool name:
glossary_createCreate a glossary entry: a coined term (acronym, service name, or internal jargon) and what it means.
Delete glossary
Tool name:
glossary_deleteDelete a glossary entry so it no longer appears in glossary_list.
List glossary
Tool name:
glossary_listList and search this organisation's glossary: coined terms (acronyms, service names, internal jargon) and what they mean.
Update glossary
Tool name:
glossary_updateUpdate a live glossary entry's item and description.
Help query
Tool name:
help_queryAsk how incident.io works and get an answer written from incident.io's own product documentation.
Create
DestructiveTool name:
incident_createCreate a new incident.
List
Read onlyTool name:
incident_listSearch and list incidents, returning a summary per result.
Merge
Tool name:
incident_mergeMerge incidents that turn out to be the same problem into one.
Message
Tool name:
incident_messageShare a finding, insight, or piece of analysis into an incident's chat channel, so the responders can see it.
Show
Read onlyTool name:
incident_showLook up an incident by ID or reference (e.g. INC-123, 123, or a full ID) and return its details.
Stats
Read onlyTool name:
incident_statsCount incidents grouped by one or more dimensions, returning aggregate statistics.
Unmerge
Tool name:
incident_unmergeReverse a merge, restoring an incident as a standalone incident.
Update
DestructiveTool name:
incident_updateUpdate an incident: post a status update message, rename it, change its summary, severity or status (including pausing it), set custom fields, assign roles, or set incident timestamps.
Update list
Read onlyTool name:
incident_update_listList status updates for an incident, most recent first.
Insights chart explore URL
Tool name:
insights_chart_explore_urlLink to a chart of the organisation's incident.io data in Insights explore.
Insights chart options
Tool name:
insights_chart_optionsList the charts this organisation can draw, for a dashboard or a single chart: ready-made presets, the measures a custom chart can plot, the filters each measure takes, and the ids of the…
Insights dashboard add chart
Tool name:
insights_dashboard_add_chartAdd a chart or a trend or KPI tile to the bottom of one of the organisation's Insights dashboards, as a full-width row.
List insights dashboard
Tool name:
insights_dashboard_listList the organisation's custom Insights dashboards that insights_dashboard_add_chart can add a chart to, by name.
Insights dashboard remove panel
Tool name:
insights_dashboard_remove_panelRemove one panel (a chart, trend or KPI tile, text or divider) from one of the organisation's custom Insights dashboards, as "Delete panel" does in the editor.
Insights dashboard show
Tool name:
insights_dashboard_showShow a custom Insights dashboard's layout: its numbered sections with their titles and filters, each section's numbered rows, and each row's columns with their widths and panels.
Insights dashboard update chart
Tool name:
insights_dashboard_update_chartChange a chart, trend tile, KPI tile or text panel already on one of the organisation's custom Insights dashboards.
Insights dashboard update section
Tool name:
insights_dashboard_update_sectionSet the title or description of a section on one of the organisation's custom Insights dashboards.
Investigation feedback
Tool name:
investigation_feedbackRecord a user's overall feedback on an AI investigation — whether it was helpful in responding to the incident.
Investigation start
Tool name:
investigation_startStart an AI SRE investigation for an incident.
Investigation steer
Tool name:
investigation_steerFeed information into an in-progress investigation so it re-assesses its hypothesis.
Investigation sync
Read onlyTool name:
investigation_syncDownload an investigation as a tar.gz archive containing the full investigation filesystem.
List actions
Tool name:
list_actionsList actions from incident.io with optional filters.
List alert routes
Tool name:
list_alert_routesList alert routes from incident.io with optional pagination
List alert sources
Tool name:
list_alert_sourcesList available alert sources in incident.io
List alerts
Tool name:
list_alertsList alerts from incident.io with optional filters.
List available incident roles
Tool name:
list_available_incident_rolesList all available incident roles that can be assigned to users
List catalog entries
Tool name:
list_catalog_entriesList catalog entries for a given catalog type.
List catalog types
Tool name:
list_catalog_typesList available catalog types in incident.io (filtered to only include types with TypeName starting with 'Custom' - case insensitive)
List custom field options
Tool name:
list_custom_field_optionsList all custom field options across all custom fields.
List custom fields
Tool name:
list_custom_fieldsList all custom fields configured in incident.io.
List follow ups
Tool name:
list_follow_upsList follow-ups for an organization.
List incident alerts
Tool name:
list_incident_alertsList connections between incidents and alerts.
List incident statuses
Tool name:
list_incident_statusesList all available incident statuses (useful for updating incident status)
List incident types
Tool name:
list_incident_typesList available incident types
List incident updates
Tool name:
list_incident_updatesList incident updates (status messages posted during an incident).
List incidents
Tool name:
list_incidentsList incidents with server-side filtering.
List severities
Tool name:
list_severitiesList available severity levels
List users
Tool name:
list_usersList all users available for incident role assignment (automatically paginated to return ALL users)
List workflows
Tool name:
list_workflowsList workflows from incident.io with optional pagination
Maintenance window alerts
Tool name:
maintenance_window_alertsCount the alerts a maintenance window held.
Create maintenance window
Tool name:
maintenance_window_createSchedule a maintenance window: a period where matching alerts are held back instead of paging anyone.
Delete maintenance window
Tool name:
maintenance_window_deleteCancel a maintenance window that has not started.
List maintenance window
Tool name:
maintenance_window_listList maintenance windows by status.
Update maintenance window
Tool name:
maintenance_window_updateChange a maintenance window's name, lead or times, or end an active one now.
Nexus health show
Tool name:
nexus_health_showShow the health of the AI data sources the organisation has connected — the same view the dashboard's health page computes.
Create notification pause
Tool name:
notification_pause_createPause someone's on-call notifications for a window: while the pause is active, escalations skip them instead of paging them.
Delete notification pause
Tool name:
notification_pause_deleteCancel an upcoming notification pause, so it never takes effect.
List notification pause
Tool name:
notification_pause_listList notification pauses: windows in which someone's on-call notifications are paused, so escalations skip them instead of paging them.
Notification pause resume
Tool name:
notification_pause_resumeEnd an active notification pause now, so that person can be paged again.
Update notification pause
Tool name:
notification_pause_updateChange a notification pause's window or reason, such as extending a holiday or coming back a day early.
List resource
Read onlyTool name:
resource_listList all available resources.
Resource show
Read onlyTool name:
resource_showRead a resource by name.
List schedule
Read onlyTool name:
schedule_listList on-call schedules with optional search, user filter, and pagination.
Create schedule override
Tool name:
schedule_override_createCreate a schedule override, placing a user on call (or clearing the schedule) for a time period.
Delete schedule override
Tool name:
schedule_override_deleteDelete a schedule override, restoring the underlying rotation for its window.
Schedule show
Read onlyTool name:
schedule_showLook up an on-call schedule by ID and return its full details and shifts.
Search custom fields
Tool name:
search_custom_fieldsSearch for custom fields by name to get their IDs AND options for filtering.
Update status page
Tool name:
status_page_updateDraft an update to a public status page for an incident: the next update when it is already published, or the first update, which publishes it to one of your existing status pages.
List suggestion
Tool name:
suggestion_listList AI suggestions — drafts awaiting human action — with optional filters and pagination.
List team
Read onlyTool name:
team_listList teams with optional name search.
Team show
Read onlyTool name:
team_showLook up a team by ID and return its details with all owned resources.
Telemetry inspect
Tool name:
telemetry_inspectInspect one telemetry datasource to see the real labels, label values and metric names that exist on it, so a query you author references things that actually exist.
Time spent stats
Tool name:
time_spent_statsBreak down the time responders spent working on incidents, grouped by who spent it, by time bucket, or by a custom field.
Update alert route
Tool name:
update_alert_routeUpdate an alert route's configuration
Update catalog entry
Tool name:
update_catalog_entryUpdate a catalog entry by ID
Update custom field
Tool name:
update_custom_fieldUpdate an existing custom field's configuration, including its name, description, and display settings
Update incident
Tool name:
update_incidentUpdate an existing incident
Update workflow
Tool name:
update_workflowUpdate a workflow's configuration
List user
Tool name:
user_listList users in the organisation.
Compatibility
Connect incident.io to the clients your teams already use
27 AI clients can connect to incident.io through Runlayer. Pick one for its setup steps and controls.
Why Runlayer
Why connect incident.io through Runlayer?
One approved path
Approve incident.io once and everyone gets it in the AI clients they already use. Runlayer holds the credentials, so nothing sits in client configuration.
Fine-grained policy
Control who can use each server, tool, and resource, and under which runtime conditions.
Runtime security
Scan tool inputs and outputs for prompt injection, credential exposure, PII, and data exfiltration, then alert, mask, or block.
Audit and observability
Trace every request across users, clients, tools, policies, scanner decisions, and downstream systems.
