agent-incident

incident.io triage CLI for AI agents

Language
Go
Version
0.16.1
License
PolyForm Perimeter 1.0.0
Category
CLI Tool

An incident.io CLI shaped around triage rather than administration — incidents, alerts, actions, follow-ups, on-call schedules and overrides, escalations and status pages, plus the reference data that makes them readable. Compact projections that fit a context window, cursor pagination handled for you, and classified errors so an agent can self-correct.

Features

01

Triage-shaped, not admin-shaped — the commands incident response needs, not 165+ incident.io API endpoints

02

Compact by default — an incident comes back as id, name, status, severity, created_at and lead until you ask for --full

03

Flexible incident ids — INC-2000, 2000 or a UUID all work, and get takes several at once

04

Item-level misses do not lose the batch — an unresolvable id becomes an @unresolved line on stdout with exit 0; only auth and network failures exit non-zero

05

Errors classify themselves — fixable_by: agent means fix your parameters, human means stop and ask, retry means wait

06

Cursor pagination handled automatically, so a list is a list rather than a paging exercise

07

On-call in full — schedules, who is on now, entries over a window, overrides, escalation paths and creating an escalation

08

Status pages and their updates, for the part of an incident customers see

09

Reference data alongside — severities, statuses, roles, users, custom fields, timestamps and the catalog

10

Keys never touch argv — --form opens a native OS dialog, or pipe the key on stdin; INCIDENT_API_KEY also works with no setup

11

Multi-org — several incident.io organizations side by side, selected with --org

12

Self-documenting — agent-incident usage, and a usage page per command group

13

Single compiled Go binary — no runtime dependencies

Install

Homebrew

>_
$ brew install shhac/tap/agent-incident

AI Agent Skill

>_
$ npx skills add shhac/agent-skills --skill agent-incident --global

GitHub Release (macOS)

>_
$ curl -L https://github.com/shhac/agent-incident/releases/latest/download/agent-incident-darwin-arm64.tar.gz | tar xz

Go Install

>_
$ go install github.com/shhac/agent-incident/cmd/agent-incident@latest

Build from Source

>_
$ git clone https://github.com/shhac/agent-incident.git && cd agent-incident && make build

Getting Started

agent-incident needs an incident.io API key. Set it up without the key reaching the command line — a pasted secret on --api-key lands in argv, shell history and the agent transcript.

01 · Add an organization through a native dialog

>_
$ agent-incident auth add prod --form

The key is typed straight into the OS, so the agent driving the CLI never sees it.

02 · Or pipe it, for CI and headless hosts

>_
$ printf '%s' "$KEY" | agent-incident auth add prod

Keeps the secret off argv. INCIDENT_API_KEY works directly too, with no setup at all.

03 · Check the credential

>_
$ agent-incident auth check

Add more organizations the same way and select one per command with --org, or set a default.

04 · See what is active

>_
$ agent-incident incident list --status active

Compact NDJSON. agent-incident usage prints the reference card; each command has its own usage page.

Usage

>_ What is happening right now
$ agent-incident incident list --status active
>_ Full detail on one incident
$ agent-incident incident get INC-2000
>_ What alerts are firing
$ agent-incident alert list --status firing
>_ Who is on call for the next hour
$ agent-incident oncall schedule entries SCHEDULE_ID --from now --to now+1h
>_ Escalate to a path
$ agent-incident oncall escalation create --incident INC-2000 --path PATH_ID
>_ Outstanding follow-ups
$ agent-incident follow-up list
>_ The customer-facing view
$ agent-incident status-page update list
>_ What severities exist here
$ agent-incident ref severity list