ilert - MCP Server

Get the current authenticated user's profile information. This tool provides current user context that is useful for other tools. This tool should be called for user context before working with alerts of the current user. Returns user ID, name, email, role, timezone, language, and other profile details needed for subsequent alert operations. Use this to determine user permissions, timezone for date filtering, and to establish the user's alert ownership context. The returned user ID can be used with list-alerts (assignedTo parameter) to get 'my alerts'.

Search and retrieve users with optional filtering. This tool provides user IDs that are required by other tools. Use this to find users by name or email, check user roles and permissions, and get user IDs for adding responders or assigning alerts. The returned user IDs can be used with: add-responder-to-alert (userId parameter), create-alert (responders array), and list-alerts (assignedTo parameter).

Retrieve alerts with flexible filtering options. This tool provides alert IDs that are required by other alert management tools. Key usage patterns: (1) Personal alerts - include the user's ID in 'assignedTo' parameter (2) All/team alerts - leave 'assignedTo' empty or specify multiple user IDs. The 'states' parameter filters by status - only use when specifically requested, otherwise defaults to active alerts (PENDING + ACCEPTED). Supports pagination and can include escalation details. The returned alert IDs can be used with: show-alert-details, accept-alert, resolve-alert, comment-alert, escalate-alert, reroute-alert, add-responder-to-alert, list-alert-action, and invoke-alert-action tools.

Retrieve comprehensive details about a specific alert including all metadata, status information, and context needed for incident response. This tool requires an alert ID from list-alerts tool. Returns: alert summary and description, current status (PENDING/ACCEPTED/RESOLVED), all current responders and their status, escalation policy and rules, alert source and integration details, priority level, creation and update timestamps, next escalation information, assigned user details, and any custom fields. Use this tool before taking any actions on an alert to understand the full context, current ownership, and available escalation paths.

Accept responsibility for an open alert and begin working on it. This tool requires an alert ID from list-alerts tool. This action changes the alert status from PENDING to ACCEPTED, marking you as the active responder. Prerequisites: (1) Alert must be in PENDING status, (2) Alert must be assigned to the current user through escalation policy or manual assignment. Once accepted, you can add investigation comments, escalate to higher levels if needed, add additional responders for collaboration, or resolve the alert when the incident is fixed. This creates an audit trail showing when responsibility was taken.

Mark an alert as resolved. This tool requires an alert ID from list-alerts tool. This action changes the alert status to RESOLVED and closes the incident. Only works on ACCEPTED or PENDING alerts that are assigned to the current user. Use this when the incident has been fully addressed and resolved. Ask the user to add a comment before resolving to document the resolution details.

Add a comment to an alert. This tool requires an alert ID from list-alerts tool, and content (the comment text). Comments are visible to all users assigned to the alert and help track progress or provide updates on the incident. Use this to document investigation steps, status updates, resolution details, or any relevant information about the alert. Comments are timestamped and help maintain a complete audit trail of the incident.

Escalate an alert to the next level or specified escalation policy. This tool requires an alert ID from list-alerts tool. Use this when the current responder cannot handle the alert and it needs to be escalated to another person or team.

Reroute an alert to a different escalation policy or team. This tool requires an alert ID from list-alerts tool and an escalation policy ID from find-escalation-policies tool. Use this to redirect an alert to the appropriate team when it was initially assigned incorrectly or needs different expertise.

Add additional team members as responders to an existing alert for collaboration and expertise. This tool requires an alert ID from list-alerts tool and optionally a user ID from find-users tool or schedule ID from find-schedules tool. Use this when: (1) The current responder needs specialized knowledge from another team member, (2) The incident requires multiple people working together, (3) You want to involve subject matter experts, (4) The alert needs escalation to a specific person without changing the escalation policy. The added responder will receive notifications, can accept the alert, add comments, and help resolve the incident. Multiple responders can work on the same alert simultaneously, creating a collaborative incident response.

Create a new alert manually. This tool can use various IDs from other tools: alert source IDs from find-alert-sources, escalation policy IDs from find-escalation-policies, and user IDs from find-users. Use this to create alerts for incidents that need immediate attention but weren't automatically detected by monitoring systems.

List available actions for a specific alert. This tool requires an alert ID from list-alerts tool. Use this to see what actions can be performed on an alert before executing them. The returned webhook IDs can be used with invoke-alert-action tool.

List all available alert actions across the system. This tool provides webhook IDs that are required by other tools. Use this to discover what automated actions, integrations, and workflows are available that can be triggered on alerts. This shows global alert actions that can be invoked, along with their webhook IDs needed for the invoke-alert-action tool. Use this before invoking alert actions to find the correct webhook ID. The returned webhook IDs can be used with: invoke-alert-action (webhookId parameter).

Invoke a specific action on an alert. This tool requires an alert ID from list-alerts tool and a webhook ID from list-alert-action or list-alert-actions tools. Use this to perform automated remediation steps, trigger integrations, or invoke custom workflows associated with an alert. Workflow: 1) Use list-alert-action to find available actions for a specific alert, 2) Use the webhookId from that response in this tool. Example: { alertId: 123, webhookId: 456 }

Search and retrieve alert sources with optional filtering. This tool provides alert source IDs that are required by other tools. Use this to find available alert sources by name, view their IDs and integration details, and understand what sources can be used when creating alerts. Alert sources represent integrations like monitoring tools, applications, or manual sources that can generate alerts. The returned data includes source IDs needed for alert creation. The returned alert source IDs can be used with: create-alert (alertSource.id field).

Search and retrieve escalation policies with optional filtering. This tool provides escalation policy IDs that are required by other tools. Use this to find escalation policies by name, view policy details, get policy IDs for creating alerts or rerouting, and understand escalation routing rules with level information. The returned escalation policy IDs can be used with: reroute-alert (escalationPolicyId parameter) and create-alert (escalationPolicy.id field).

Search and retrieve services with optional filtering. This tool provides service IDs that are required by other tools. Use this to find services by name, check service status, view service details, and get service IDs for creating incidents or alerts. The returned data prominently shows service IDs needed for other operations. The returned service IDs can be used with: create-incident (affectedServices.service.id field) and create-alert (optional alertSource.id field).

Create a new incident to track major service disruptions or issues. This tool requires service IDs from find-services tool. Use this for coordinating incident response, communication, and resolution tracking for significant problems affecting multiple services or users.

Update an existing incident. This tool requires incident ID from list-incidents tool. Use this to update the incident summary, status, message, and affected services.

Retrieve incidents with flexible filtering options. This tool provides incident IDs that are required by other incident management tools. The 'states' parameter filters by status - only use when specifically requested, otherwise defaults to all states (INVESTIGATING, IDENTIFIED, MONITORING, RESOLVED). Supports pagination and filtering by service IDs and date ranges. The returned incident IDs can be used with: update-incident tool.

Find on-call schedules to see who is currently on duty. This tool provides schedule IDs that can be used by other tools. Returns schedule details including current and upcoming on-call rotations. The returned schedule IDs can be used with: add-responder-to-alert (scheduleId parameter) to add schedules as responders to alerts.