Skip to main content Announcing Tool Gateway MCP: the universal MCP Read the announcement
Live 174 Actions

incident.io MCP Server
for AI Agents

Connect your AI agent to StackOne's incident.io MCP server and give it 174 MCP tools out of the box. Auth, tool execution, and security all managed.

incident.io logo
incident.io MCP Server
Built by StackOne StackOne
DrataGPLocalyzeFlipMindtoolsScreenloop

Coverage

174 Agent Actions

Create, read, update, and delete across incident.io — and extend your agent's capabilities with custom actions.

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your incident.io MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every incident.io tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every incident.io call.

Tools Discovery →

What is the incident.io MCP Server?

A incident.io MCP server lets AI agents read and write incident.io data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's incident.io MCP server ships with 174 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All incident.io MCP Tools

Every action from incident.io's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.

Actions

  • Create Action

    Create a new incident action.

  • List Actions

    List actions for an organisation.

  • Get Action

    Get a single incident action.

  • Update Action

    Update an existing incident action.

  • Delete Action

    Delete an incident action.

Alert Attributes

  • Create Alert Attribute

    Create a new alert attribute.

  • List Alert Attributes

    List alert attributes.

  • Get Alert Attribute

    Show an alert attribute.

  • Update Alert Attribute

    Update an alert attribute.

  • Delete Alert Attribute

    Destroy an alert attribute.

Alert Notes

  • Create Alert Note

    Add a note to an alert.

  • List Alert Notes

    List alert notes attached to an alert.

  • Get Alert Note

    Get a single alert note.

  • Update Alert Note

    Replace the content of an alert note.

  • Delete Alert Note

    Delete an alert note.

Alert Routes

  • Create Alert Route

    Create a new alert route in your account.

  • List Alert Routes

    List all alert routes in your account.

  • Get Alert Route

    Load details about a specific alert route in your account.

  • Update Alert Route

    Update an existing alert route in your account.

  • Delete Alert Route

    Delete an existing alert route in your account.

Alert Sources

  • Create Alert Source

    Create a new alert source in your account.

  • List Alert Sources

    List all alert sources in your account.

  • Get Alert Source

    Load details about a specific alert source in your account.

  • Update Alert Source

    Update an existing alert source in your account.

  • Delete Alert Source

    Delete an existing alert source in your account.

Alert Tags

  • Add Alert Tags

    Add tags to an alert without changing its existing tags.

  • List Alert Tags

    List the alert tags in your organisation's vocabulary.

  • Set Alert Tags

    Replace all tags on an alert.

  • Remove Alert Tags

    Remove tags from an alert without changing its other tags.

Alerts

  • List Alerts

    List all alerts for your account.

  • Get Alert

    Show a single alert for your account

Incident Alerts

  • Create Incident Alert

    Attach an alert to an incident, creating the connection between them.

  • List Incident Alerts

    List the connections between incidents and alerts

Catalog Types

  • Create Catalog Type

    Create a catalog type.

  • List Catalog Types

    List all catalog types for an organisation, including those synced from external resources.

  • Get Catalog Type

    Show a single catalog type.

  • Update Catalog Type

    Updates an existing catalog type.

  • Delete Catalog Type

    Archives a catalog type and associated entries.

Catalog Entrys

  • Create Catalog Entry

    Create an entry within the catalog.

  • Get Catalog Entry

    Show a single catalog entry.

  • Update Catalog Entry

    Updates an existing catalog entry.

  • Delete Catalog Entry

    Archives a catalog entry.

Custom Field Options

  • Create Custom Field Option

    Create a custom field option.

  • List Custom Field Options

    Show custom field options for a custom field

  • Get Custom Field Option

    Get a single custom field option

  • Update Custom Field Option

    Update a custom field option

  • Delete Custom Field Option

    Delete a custom field option

Custom Fields

  • Create Custom Field

    Create a new custom field

  • List Custom Fields

    List all custom fields for an organisation.

  • Get Custom Field

    Get a single custom field.

  • Update Custom Field

    Update the details of a custom field

  • Delete Custom Field

    Delete a custom field

Escalation Path Templates

  • Create Escalation Path Template

    Create a new escalation path template.

  • List Escalation Path Templates

    List active escalation path templates.

  • Get Escalation Path Template

    Show a particular escalation path template.

  • Update Escalation Path Template

    Update a particular escalation path template.

  • Delete Escalation Path Template

    Archives a particular escalation path template.

Escalation Paths

  • Create Escalation Path

    Create an escalation path.

  • List Escalation Paths

    List all escalation paths in your account.

  • Get Escalation Path

    Show an escalation path.

  • Update Escalation Path

    Updates an escalation path.

  • Delete Escalation Path

    Archives an escalation path.

Escalations

  • Create Escalation

    Create an escalation.

  • List Escalations

    List all escalations for your account.

  • Get Escalation

    Show a specific escalation.

Follow Ups

  • Create Follow Up

    Create a new incident follow-up.

  • List Follow Ups

    List follow-ups for an organisation.

  • Get Follow Up

    Get a single incident follow-up.

  • Update Follow Up

    Update an existing incident follow-up.

  • Delete Follow Up

    Delete an incident follow-up.

Incident Attachments

  • Create Incident Attachment

    Attaches an external resource to an incident.

  • List Incident Attachments

    List all incident attachments for a given external resource or incident.

  • Delete Incident Attachment

    Unattaches an external resource from an incident

Incident Roles

  • Create Incident Role

    Create a new incident role

  • List Incident Roles

    List all incident roles for an organisation.

  • Get Incident Role

    Get a single incident role.

  • Update Incident Role

    Update an existing incident role

  • Delete Incident Role

    Removes an existing role

Incident Status

  • Create Incident Status

    Create a new incident status

  • Get Incident Status

    Get a single incident status.

  • Update Incident Status

    Update an existing incident status

  • Delete Incident Status

    Delete an incident status

Incident Timeline Items

  • Create Incident Timeline Item

    Add a custom item to an incident's timeline.

  • List Incident Timeline Items

    List the timeline items for an incident, oldest first.

  • Update Incident Timeline Item

    Edit a timeline item.

Incident Timestamps

  • List Incident Timestamps

    List all incident timestamps for an organisation.

  • Get Incident Timestamp

    Get a single incident timestamp.

Incident Types

  • List Incident Types

    List all incident types for an organisation.

  • Get Incident Type

    Get a single incident type.

Incident Updates

  • Create Incident Update

    Share an update against an incident.

  • List Incident Updates

    List all incident updates for an organisation, or for a specific incident.

Incidents

  • Create Incident

    Create a new incident.

  • List Incidents

    List all incidents for an organisation.

  • Get Incident

    Get a single incident.

Postmortem Documents

  • List Postmortem Documents

    List post-mortem documents for the organisation.

  • Get Postmortem Document

    Get a single post-mortem document by ID.

Schedule Replicas

  • Create Schedule Replica

    Create a new schedule replica.

  • List Schedule Replicas

    List all replicas for a schedule.

  • Get Schedule Replica

    Get a single schedule replica.

  • Delete Schedule Replica

    Archives a single schedule replica, stopping incident.io from syncing on-call shifts to the external provider.

Schedule Overrides

  • Create Schedule Override

    Create a new schedule override.

  • List Schedule Overrides

    List the overrides on a schedule.

  • Get Schedule Override

    Get a single schedule override.

  • Update Schedule Override

    Update a schedule override, moving its window or the rotation and layer it sits on.

  • Delete Schedule Override

    Delete a schedule override, restoring whoever the rotations put on-call for that window.

Schedules

  • Create Schedule

    Create a new schedule.

  • List Schedules

    List configured schedules.

  • Get Schedule

    Get a single schedule.

  • Update Schedule

    Update a schedule.

  • Delete Schedule

    Archives a single schedule.

Schedule Sync Rules

  • Create Schedule Sync Rule

    Create a new sync rule linking a schedule to a sync target.

  • List Schedule Sync Rules

    List the sync rules configured on this schedule.

  • Get Schedule Sync Rule

    Get a single sync rule for a schedule.

  • Update Schedule Sync Rule

    Update a sync rule's sync_type and permanent members in place.

  • Delete Schedule Sync Rule

    Archive a sync rule, unlinking the schedule from the sync target.

Severitys

  • Create Severity

    Create a new severity

  • Get Severity

    Get a single incident severity.

  • Update Severity

    Update an existing severity

  • Delete Severity

    Delete a severity

Status Page Components

  • Create Status Page Component

    Create a status page component.

  • List Status Page Components

    List all status page components for an organisation.

  • Get Status Page Component

    Show a single status page component.

  • Update Status Page Component

    Update a status page component's name and description.

  • Delete Status Page Component

    Archive a status page component.

Status Page Incidents

  • Create Status Page Incident

    Create a status page incident.

  • List Status Page Incidents

    List status page incidents.

  • Get Status Page Incident

    Show a status page incident.

  • Update Status Page Incident

    Update a status page incident.

Status Page Maintenances

  • Create Status Page Maintenance

    Schedule a Status Page maintenance window.

  • List Status Page Maintenances

    List status page maintenances.

  • Get Status Page Maintenance

    Show a status page maintenance window.

  • Update Status Page Maintenance

    Update the name and scheduled window of a Status Page maintenance window.

  • Delete Status Page Maintenance

    Delete a Status Page maintenance window.

Status Pages

  • List Status Pages

    List all status pages for your organisation.

  • Get Status Page

    Show a single status page.

Teams

  • List Teams

    List all teams in the organisation.

  • Get Team

    Get a single team.

Users

  • List Users

    List users in your account.

  • Get User

    Get a single user.

Paging Providers

  • Get Paging Provider

    Show the paging provider that would be used to escalate to this user.

  • Update Paging Provider

    Update a user's preferred paging provider.

Other (33)

  • Create Alert Event

    Create an alert event using an HTTP source.

  • Create Follow Up From Link

    Create a follow-up from the URL of an issue that already exists in an issue tracker.

  • Create Incident Membership

    Makes a user a member of a private incident

  • Import Incident Postmortem Document

    Import a postmortem document from markdown into an incident.

  • Create Status Page Incident Update

    Post an update on a Status Page incident.

  • Create Status Page Maintenance Update

    Post an update on a Status Page maintenance window.

  • Create Status Page Retrospective Incident

    Create a retrospective (historical) status page incident.

  • List Catalog Entries

    List entries for a catalog type.

  • List Catalog Resources

    List available engine resources for the catalog.

  • List Incident Statuses

    List all incident statuses for an organisation.

  • Get Postmortem Document Content

    Fetch the content of a post-mortem document, rendered as markdown.

  • List Schedule Entries

    List the schedule entries for a schedule over a window of time.

  • List Severities

    List all incident severities for an organisation.

  • List Status Page Response Incidents

    List the linked Response incidents for a status page incident.

  • Get Status Page Component Availability

    Show availability for a status page component over a time window.

  • Get Status Page Structure

    Show the structure of a status page.

  • List Notification Methods

    List notification methods for a user.

  • List Notification Rules

    List notification rules for a user.

  • Update Catalog Type Schema

    Update an existing catalog types schema, adding or removing attributes.

  • Update Postmortem Document Status

    Update the status of a post-mortem document.

  • Validate Alert Source

    Check whether an alert source template is valid, without creating or updating anything.

  • Resolve Alert

    Resolve a currently firing alert.

  • Transition Incident Alert

    Confirm or detach the connection between an alert and an incident.

  • Bulk Update Catalog Entries

    Update multiple catalog entries in a single operation.

  • Cancel Escalation

    Cancel an escalation.

  • Check Escalation Permissions

    Check whether the given users can currently acknowledge, decline, or snooze an escalation.

  • Reassign Escalation

    Reassign an escalation to a different escalation path or set of users.

  • Respond Escalation

    Respond to an escalation.

  • Connect Follow Up External Issue

    Connect a follow-up to an existing issue in an issue tracker, using the URL of the issue.

  • Revoke Incident Membership

    Revoke a user's membership of a private incident

  • Edit Incident

    Edit an existing incident.

  • Attach Postmortem Document

    Link an externally-hosted post-mortem document to an incident.

  • Preview Schedule Entries

    Preview the schedule entries that would be generated by a proposed schedule configuration.

Set Up Your incident.io MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to incident.io in under 10 lines of code.

Agent Frameworks

Claude Desktop
{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

incident.io MCP Server FAQ

Does StackOne have a incident.io MCP server?
Yes. StackOne offers a hosted incident.io MCP server with 174 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
incident.io MCP server vs direct API integration — what's the difference?
A incident.io MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling incident.io. A incident.io MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling incident.io at runtime. StackOne provides both.
How does incident.io authentication work for AI agents?
incident.io authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own incident.io account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.
Are incident.io MCP tools vulnerable to prompt injection?
Yes — incident.io MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a incident.io agent and how do I avoid it?
Context bloat happens when incident.io tool schemas and API responses eat your incident.io agent's memory, preventing it from reasoning effectively. A single incident.io query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my incident.io agent can access?
Yes — you can limit which actions your incident.io agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my incident.io MCP server?
Yes — you can create custom agent actions for your incident.io MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research incident.io's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a incident.io MCP server?
Skip a incident.io MCP server if your integration is purely software-to-software — direct incident.io API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call incident.io actions at runtime.
What AI frameworks and AI clients does the StackOne incident.io MCP server support?
The StackOne incident.io MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.