traceeai.com Support Get a key

Apps

Run an app action

read actions run straight away; write and destructive ones become an approval request and run as soon as a person approves.

POSThttps://traceeai.com/api/v1/apps/actions/{slug}/run

CLI:tracee apps run·MCP:appsaction run

Authorizations

Authorizationstringheaderrequired
Bearer <key>: a personal key (tracee login or Settings → Personal keys), a workspace key, or an MCP client's OAuth token. See Authentication.

Headers

Tracee-Workspacestring
For a personal key or OAuth token that reaches several workspaces: the workspace id to act on. Workspace keys don't need it.
uuid

Path parameters

slugstringrequired
The slug. From GET /api/v1/apps/actions query=<what you want to do>
up to 200 characters

Body

application/json

argsobject
The args
any keys
connection_idstring
Which connection, if the app has several. From GET /api/v1/connections (connectedApps[].connection_id).
notestring
Context for the approver
up to 500 characters

Response

200Done.
The action's result, exactly as the MCP tool returns it to agents. A next field, when present, names the endpoint that follows up.

Run an app action

curl -X POST "https://traceeai.com/api/v1/apps/actions/SLACK_SEND_MESSAGE/run" \
  -H "Authorization: Bearer $TRACEE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "args": {
      "channel": "#launches",
      "text": "The dashboard post is live"
    },
    "note": "Tell the team"
  }'

{
  "…": "The action's result, as the MCP tool returns it"
}