Get the incident-chart rows for an organization

GET

/v1/incidents/chart

const url = 'https://api.adversarial.com/api/v1/incidents/chart?start_date=2026-01-01&end_date=2026-12-31';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'https://api.adversarial.com/api/v1/incidents/chart?start_date=2026-01-01&end_date=2026-12-31'

Returns the incidents visible in the requested window, unpaginated. The window may span at most two years, and each requested severity level’s rows are capped server-side so one severity cannot crowd out the others.

Parameters

Query Parameters

start_date

One of:

string
null

One side of a date range: an RFC 3339 timestamp in any UTC offset, used as given, or a bare YYYY-MM-DD naming a whole UTC day.

string

Inclusive start of the window. A bare YYYY-MM-DD starts it at 00:00:00Z of that day; an RFC 3339 timestamp in any UTC offset is used as given. Defaults to 365 days before now.

Example

2026-01-01

end_date

One of:

string
null

One side of a date range: an RFC 3339 timestamp in any UTC offset, used as given, or a bare YYYY-MM-DD naming a whole UTC day.

string

Inclusive end of the window. A bare YYYY-MM-DD ends it at 23:59:59.999999Z of that day, so the whole last day is plotted; an RFC 3339 timestamp in any UTC offset is used as given. Defaults to now.

Example

2026-12-31

severity

Array<string> | null

Allowed values: SEV-5 SEV-4 SEV-3 SEV-2 SEV-1

Severity levels to plot. Absent means every level. Unscored incidents are never plotted, so there is no unscored bucket to select.

parent_id

Array | null

Filter on what an incident is linked under, using the same vocabulary as the register: null (top-level), any (linked children only), or a parent id as INC-<n> or a bare number. Repeat to union. Defaults to null — parity with the register, so the chart plots bundle parents only.

Responses

200

Incident rows visible in the requested chart window

application/json

Array<object>

One incident row for the incident chart, as served by GET /v1/incidents/chart: the incident’s identity, severity, and lifecycle dates.

object

contained_date

string | null format: date-time

detected_date

required

string format: date-time

required

string

occurred_date

string | null format: date-time

severity

One of:

string
null

string

Allowed values: SEV-5 SEV-4 SEV-3 SEV-2 SEV-1

Example

[
  {
    "id": "INC-00001",
    "severity": "SEV-5"
  }
]