Apps

An app action's inputs

GEThttps://traceeai.com/api/v1/apps/actions/{slug}

CLI:tracee apps schema·MCP:appsaction schema

Authorizations

  • Authorizationstringheaderrequired

    Bearer <key>: a personal key (tracee login or Settings → Personal keys), a workspace key, or an MCP client's OAuth token. See Authentication.

Headers

  • Tracee-Workspacestring

    For a personal key or OAuth token that reaches several workspaces: the workspace id to act on. Workspace keys don't need it.

    uuid

Path parameters

  • slugstringrequired

    The slug. From GET /api/v1/apps/actions query=<what you want to do>

    up to 200 characters

Response

  • 200Done.

    The action's result, exactly as the MCP tool returns it to agents. A next field, when present, names the endpoint that follows up.