Apps
An app action's inputs
GET
https://traceeai.com/api/v1/apps/actions/{slug}CLI:tracee apps schema·MCP:appsaction schema
Authorizations
AuthorizationstringheaderrequiredBearer <key>: a personal key (tracee loginor Settings → Personal keys), a workspace key, or an MCP client's OAuth token. See Authentication.
Headers
Tracee-WorkspacestringFor a personal key or OAuth token that reaches several workspaces: the workspace id to act on. Workspace keys don't need it.
uuid
Path parameters
slugstringrequiredThe slug. From GET /api/v1/apps/actions query=<what you want to do>
up to 200 characters
Response
- 200Done.
The action's result, exactly as the MCP tool returns it to agents. A
nextfield, when present, names the endpoint that follows up.