Incident routes: create, get

Reference for Incident, one group of Incident routes.

Incident.create

Creates an Incident. Verb page.

Text

POST /{namespace}/incidents

Body, as JSON: the inputs. Emits Incident.created.

Inputs

Input	Type	Required	Description
`by`	Worker		The Worker that performed it.
`for`	Party		The Party it was done on behalf of.
`via`	`string`		The Interface or request it arrived through.
`on`	`string`		The Action or Event that caused it, such as the failed attempt a retry follows.
`thing`	`string`		The record, at the Version the Action was decided against.
`input`	`json`		The input it was called with.
`createdAt`	`datetime`		When it was called.
`reserved`	`money`		The most this Action may cost, held against its Limits from the check until it settles, billed misses included.
`due`	`datetime`		When the Task is due.
`priority`	`integer`		Its rank in the inbox, highest first.
`recurrence`	`string`		The schedule a recurring duty repeats on.
`kind`	`string`		One of `bug`, `request`, or `question`.
`advisory`	`string`		For a vulnerability: the public advisory it matches, with the affected package and range.
`severity`	`string`	required	One of `minor`, `major`, or `critical`.
`detectedAt`	`datetime`	required	When monitoring or a Customer first reported it.
`resolvedAt`	`datetime`		When service was restored.
`personalData`	`boolean`		True when the Incident exposed personal data, which starts the breach-notice clock.
`monitor`	Monitor		A failing internal Monitor opens an Incident, which names the Monitor that saw it first.

Returns

Output	Type	Required	Description
`incident`	Incident	required	The Incident.

Refuses when

Check	Error	Fix	Then call
The key is valid, but its scopes do not allow this operation.	`forbidden`	Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them.	None.

Example

Terminal

curl -X POST https://api.sb/leaseline.app/incidents \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"severity":"minor","detectedAt":"2026-10-22T12:00:00Z"}'

JSON

{
  "api": "https://api.sb/leaseline.app",
  "incident": {
    "$id": "https://api.sb/leaseline.app/incidents/incident_2XOYkIEno0",
    "$type": "Incident",
    "status": "pending",
    "mode": "try",
    "severity": "minor",
    "detectedAt": "2026-10-22T12:00:00Z"
  },
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/act_br07HsG8MG",
    "operation": "Incident.create",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/leaseline.app/actions/act_br07HsG8MG"
  }
}

Incident.get

Returns one Incident by id. Verb page.