# List incidents — API reference

> Returns incident counts and items for the selected client scope, with optional `q`, `sort` and cursor parameters.

Source: https://upfour.io/docs/api/incidents/list-incidents

[Developers](https://upfour.io/docs/api.md)/[Incidents](https://upfour.io/docs/api/incidents.md)

Returns incident counts and items for the selected client scope, with optional `q`, `sort` and cursor parameters.

GET https://app.upfour.io/v1/incidents

scope incident.read stable returns 200

## Parameters

| Field | Type | Description |
| --- | --- | --- |
| `limit` optional | integer 1–250 default `50` | query parameter |
| `cursor` optional | string | query parameter |
| `client_id` optional | uuid | query parameter |
| `all_clients` optional | boolean | query parameter |
| `q` optional | string | query parameter |
| `sort` optional | string | query parameter |

## Returns

A successful request returns `200` with application/json.

Response fields 1 top-level fields

| Field | Type | Description |
| --- | --- | --- |
| `data` | IncidentListResult | |
| IncidentListResult · 49 fields FieldTypeDescription `counts` IncidentCounts IncidentCounts · 7 fields FieldTypeDescription `acknowledged` integer `open` integer `resolved_in_window` integer `started_in_window` integer `unresolved` integer `window_from` string (date-time) `window_to` string (date-time) `items` Incident[]  · nullable Each item · 37 fields FieldTypeDescription `acknowledged_at` string (date-time)  · nullable `cause` string `check_method` string `check_url` string `client_id` uuid  · nullable `correlated_count` integer `created_at` string (date-time) `created_by` string `description` string `duration_seconds` integer  · nullable `escalation_target_label` string `heartbeat_id` uuid  · nullable `heartbeat_name` string `id` uuid `metadata` map of string  · nullable max 100 keys each value max length 4096 Custom key/value pairs (at most 100 keys; keys 1-128 characters, values up to 4096). Sent to machine-readable alert channels and API webhook subscriptions, and copied onto the incidents the resource opens. `monitor_id` uuid  · nullable `monitor_name` string `notified_label` string `override_channel_ids` uuid[]  · nullable `resolved_at` string (date-time)  · nullable `resolved_by_type` string  · nullable `resolved_by_user_id` uuid  · nullable `routing_target_id` uuid  · nullable `routing_type` string one of`everyone` `escalation_policy` `team` `severity` string one of`critical` `warning` `info` `started_at` string (date-time) `started_by_type` string `started_by_user_id` uuid  · nullable `status` string one of`open` `acknowledged` `resolved` `title` string `updated_at` string (date-time) `user_id` uuid `escalation_target_channel_count` integer `escalation_target_kind` string one of`nobody` `channel_count` `channel_count_with_policy` `name` `escalation_target_name` string `notified_channel_count` integer `notified_kind` string one of`nobody` `delivery_failed` `channel_count` `channel` `page` integer `per_page` integer `total` integer | | |

## Errors

Only the errors this operation can return. Every error uses the [same envelope](https://upfour.io/docs/api/responses.md).

| Status | Code | Meaning |
| --- | --- | --- |
| 400 | [bad_request](https://upfour.io/docs/api/errors#code-bad_request) | The request is malformed or fails validation. |

Every call can also return `unauthorized` (401), `rate_limit_exceeded` (429) or `internal_error` (500 / 502). See [Responses and errors](https://upfour.io/docs/api/responses.md).

[NextCreate an incident](https://upfour.io/docs/api/incidents/create-an-incident.md)

## Request

### cURL

```bash
curl -s "https://app.upfour.io/v1/incidents" \
  -H "Authorization: Bearer $UP4_API_KEY"
```

### JavaScript

```javascript
const res = await fetch("https://app.upfour.io/v1/incidents", {
  headers: {
    Authorization: `Bearer ${process.env.UP4_API_KEY}`,
  },
});
console.log(res.status, await res.json());
```

### Python

```python
import os
import requests

res = requests.get(
    "https://app.upfour.io/v1/incidents",
    headers={"Authorization": f"Bearer {os.environ['UP4_API_KEY']}"},
)
print(res.status_code, res.json())
```

### Go

```go
package main

import (
	"fmt"
	"io"
	"net/http"
	"os"
)

func main() {
	req, _ := http.NewRequest("GET", "https://app.upfour.io/v1/incidents", nil)
	req.Header.Set("Authorization", "Bearer "+os.Getenv("UP4_API_KEY"))
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	out, _ := io.ReadAll(res.Body)
	fmt.Println(res.StatusCode, string(out))
}
```

### PHP

```php
<?php
$ch = curl_init("https://app.upfour.io/v1/incidents");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer " . getenv("UP4_API_KEY"),
    ],
]);
$response = curl_exec($ch);
echo curl_getinfo($ch, CURLINFO_RESPONSE_CODE), " ", $response, "\n";
curl_close($ch);
```

## Response

### 200

```json
{
  "data": {
    "counts": {
      "acknowledged": 0,
      "open": 1,
      "resolved_in_window": 0,
      "started_in_window": 0,
      "unresolved": 1
    },
    "items": [
      {
        "acknowledged_at": null,
        "cause": "Reported manually",
        "check_method": "GET",
        "check_url": "https://example.com",
        "client_id": null,
        "correlated_count": 0,
        "created_at": "2026-10-27T09:00:00Z",
        "created_by": "anna@example.com",
        "description": "Response times above 2 seconds since 08:40.",
        "duration_seconds": 0,
        "escalation_target_kind": "name",
        "escalation_target_label": "Default escalation",
        "escalation_target_name": "Default escalation",
        "heartbeat_id": null,
        "heartbeat_name": "",
        "id": "00000000-0000-4000-8000-000000000001",
        "metadata": {},
        "monitor_id": "00000000-0000-4000-8000-000000000002",
        "monitor_name": "Marketing website",
        "notified_kind": "nobody",
        "notified_label": "Nobody",
        "override_channel_ids": [],
        "resolved_at": null,
        "resolved_by_type": null,
        "resolved_by_user_id": null,
        "routing_target_id": "00000000-0000-4000-8000-000000000003",
        "routing_type": "escalation_policy",
        "severity": "warning",
        "started_at": "2026-10-27T09:00:00Z",
        "started_by_type": "user",
        "started_by_user_id": "00000000-0000-4000-8000-000000000004",
        "status": "open",
        "title": "Checkout is slow",
        "updated_at": "2026-10-27T09:00:00Z",
        "user_id": "00000000-0000-4000-8000-000000000004"
      }
    ],
    "page": 1,
    "per_page": 25,
    "total": 1
  }
}
```

### 400

```json
{
  "error": {
    "code": "bad_request",
    "message": "The request is malformed or fails validation.",
    "request_id": "req_…"
  }
}
```
