Preview integration resources as incidents

GET

/v1/integrations/{name}/incidents/import

const url = 'https://api.adversarial.com/api/v1/integrations/example/incidents/import';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://api.adversarial.com/api/v1/integrations/example/incidents/import

Parameters

Path Parameters

name

required

string

Integration vendor short name (e.g. ‘jira’, ‘wiz’, ‘bugcrowd’)

Responses

200

Preview incident integration resources before importing

application/json

Paginated list envelope: { "results": [...], "pagination": {...} }.

object

pagination

required

Pagination metadata for responses sourced from an external integration.

Paging is driven by a single opaque next_page_token: pass it back to fetch the following page, and treat its absence as the end of the collection. Do not parse the token — its contents are not part of the contract, and this one field covers every integration regardless of how the upstream API pages internally. total_items is best-effort and may be absent when the upstream does not report a total.

object

next_page_token

Opaque continuation token. Absent means there are no further pages — the sole end-of-collection signal.

string | null

total_items

Total matching items, when the upstream API reports it. Informational only — never used for loop control. Absent when the API reports no total (e.g. HackerOne, GitHub Dependabot).

integer | null format: int64

results

required

The items on this page.

Array<object>

Relationship, core incident information

object

assigned_to

One of:

null
object

null

A User as returned by the API.

Profile images are not embedded — clients fetch them from GET /api/v1/{icon} when icon is Some.

object

email

required

string

first_name

required

string

icon

Relative path to the user’s avatar endpoint, e.g. "users/{id}/avatar?v={hash}". None when the user has no avatar.

string | null

required

string format: uuid

last_name

required

string

contained_date

string | null format: date-time

created_date

required

string format: date-time

description

required

string

detected_date

required

string format: date-time

required

string

occurred_date

string | null format: date-time

opened_by

required

A User as returned by the API.

Profile images are not embedded — clients fetch them from GET /api/v1/{icon} when icon is Some.

object

email

required

string

first_name

required

string

icon

Relative path to the user’s avatar endpoint, e.g. "users/{id}/avatar?v={hash}". None when the user has no avatar.

string | null

required

string format: uuid

last_name

required

string

parent_id

When set, this incident is linked under the named parent incident.

string | null

responded_date

string | null format: date-time

severity

One of:

null
string

null

severity_reasoning

string | null

source

required

Where the incident was reported from (e.g. “Employee Reported”). Always present.

string

status

required

The status of an incident

string

Allowed values: New In Progress Review Closed

title

required

string

updated_by

required

A User as returned by the API.

Profile images are not embedded — clients fetch them from GET /api/v1/{icon} when icon is Some.

object

email

required

string

first_name

required

string

icon

Relative path to the user’s avatar endpoint, e.g. "users/{id}/avatar?v={hash}". None when the user has no avatar.

string | null

required

string format: uuid

last_name

required

string

updated_date

required

string format: date-time

Example

{
  "results": [
    {
      "id": "INC-00001",
      "parent_id": "INC-00001",
      "severity": "SEV-5",
      "status": "New"
    }
  ]
}