---
title: "Rootly"
description: "Reference for the Tracecat Rootly integration: registered actions, required secrets, expected inputs, and example workflow usage."
---

{/* Auto-generated by scripts/generate_tool_docs.py; do not edit by hand. */}
## Create alert

Action ID: `tools.rootly.create_alert`

Creates a new alert from provided data.

Reference: [https://docs.rootly.com/api-reference/alerts/creates-an-alert](https://docs.rootly.com/api-reference/alerts/creates-an-alert)

### Secrets

Required secrets:

- `rootly`: required values `ROOTLY_API_KEY`.

### Input fields

<ParamField path="attributes" type="object">

Alert data attributes

Default: `null`.

</ParamField>

## Create incident

Action ID: `tools.rootly.create_incident`

Creates a new incident from provided data.

Reference: [https://docs.rootly.com/api-reference/incidents/creates-an-incident](https://docs.rootly.com/api-reference/incidents/creates-an-incident)

### Secrets

Required secrets:

- `rootly`: required values `ROOTLY_API_KEY`.

### Input fields

<ParamField path="attributes" type="object">

Incident data attributes

Default: `null`.

</ParamField>

## Get alert

Action ID: `tools.rootly.get_alert`

Retrieves a specific alert by id.

Reference: [https://docs.rootly.com/api-reference/alerts/retrieves-an-alert](https://docs.rootly.com/api-reference/alerts/retrieves-an-alert)

### Secrets

Required secrets:

- `rootly`: required values `ROOTLY_API_KEY`.

### Input fields

<ParamField path="alert_id" type="string" required>

The ID of the alert.

</ParamField>

<ParamField path="include" type="string | null">

Include additional data. Comma separated if needed (e.g. environments,services,groups)

Default: `null`.

</ParamField>

## Get incident

Action ID: `tools.rootly.get_incident`

Retrieves a specific incident by id.

Reference: [https://docs.rootly.com/api-reference/incidents/retrieves-an-incident](https://docs.rootly.com/api-reference/incidents/retrieves-an-incident)

### Secrets

Required secrets:

- `rootly`: required values `ROOTLY_API_KEY`.

### Input fields

<ParamField path="incident_id" type="string" required>

The ID of the incident.

</ParamField>

<ParamField path="include" type="string | null">

Include additional data. Comma separated if needed (e.g. sub_statuses,causes,subscribers)

Default: `null`.

</ParamField>

## List alerts

Action ID: `tools.rootly.list_alerts`

List alerts.

Reference: [https://docs.rootly.com/api-reference/alerts/list-alerts](https://docs.rootly.com/api-reference/alerts/list-alerts)

### Secrets

Required secrets:

- `rootly`: required values `ROOTLY_API_KEY`.

### Input fields

<ParamField path="include" type="string | null">

Include additional data. Comma separated if needed (e.g. environments,services,groups)

Default: `null`.

</ParamField>

<ParamField path="page_number" type="integer | null">

Page number.

Default: `null`.

</ParamField>

<ParamField path="page_size" type="integer | null">

Page size.

Default: `null`.

</ParamField>

<ParamField path="status" type="string | null">

Filter by status (e.g. triggered, acknowledged, resolved)

Default: `null`.

</ParamField>

## List incidents

Action ID: `tools.rootly.list_incidents`

List incidents.

Reference: [https://docs.rootly.com/api-reference/incidents/list-incidents](https://docs.rootly.com/api-reference/incidents/list-incidents)

### Secrets

Required secrets:

- `rootly`: required values `ROOTLY_API_KEY`.

### Input fields

<ParamField path="include" type="string | null">

Include additional data. Comma separated if needed (e.g. sub_statuses,causes,subscribers)

Default: `null`.

</ParamField>

<ParamField path="page_number" type="integer | null">

Page number.

Default: `null`.

</ParamField>

<ParamField path="page_size" type="integer | null">

Page size.

Default: `null`.

</ParamField>

<ParamField path="severity" type="string | null">

Filter by severity (e.g. not-sure-yet, sev4-minor-issue)

Default: `null`.

</ParamField>

<ParamField path="status" type="string | null">

Filter by status (e.g. started, mitigated, resolved)

Default: `null`.

</ParamField>

## List incidents alerts

Action ID: `tools.rootly.list_incident_alerts`

List incidents alerts.

Reference: [https://docs.rootly.com/api-reference/alerts/list-incident-alerts](https://docs.rootly.com/api-reference/alerts/list-incident-alerts)

### Secrets

Required secrets:

- `rootly`: required values `ROOTLY_API_KEY`.

### Input fields

<ParamField path="incident_id" type="string" required>

The ID of the incident.

</ParamField>

<ParamField path="include" type="string | null">

Include additional data. Comma separated if needed (e.g. environments,services,groups)

Default: `null`.

</ParamField>
