Skip to content

Incident.open

POST /{namespace}/incidents/open

Open starts an Incident from a failing Monitor, an error spike or a Metric past its threshold, and pages the on-call Worker.

Mode
do
Event
Incident.opened

Inputs

InputTypeRequiredDescription
severitystringrequiredsev1 stops Customers, sev2 degrades a core path, sev3 degrades one feature.
causestringrequiredThe Monitor, error group or Metric that tripped it.

Outputs

OutputTypeRequiredDescription
incidentIncidentrequiredThe open Incident.

Effects

  • Emits Incident.opened.
  • Performed by the Reliability Engineer.
  • Two-way: it runs at once, in the try, send and do modes.
  • Pages the on-call Worker, agent first, and a Human after five minutes unacknowledged.
  • Never holds a rollback or a guardrail stop.
  • Posts sev1 and sev2 Incidents to the status page.

Refuses when

CheckErrorFixThen call
The key is valid, but its scopes do not allow this operation.forbiddenUse a key whose scopes cover the operation, or ask an owner of the namespace to grant them.Incident.open

When it waits

GateDefault
Decision classLow: two-way, nothing at stake
Delay windowNone: it runs once review passes.
LimitThe call Limit of the Permission it runs under.
Over the LimitIt waits pending for an Approval from the Founder. Approved, it runs; refused, it ends refused with limit-exceeded; unanswered by its deadline, it ends canceled.