Apps

Find actions in connected apps

Matching actions with their slug, risk (read, write, destructive) and required inputs.

GEThttps://traceeai.com/api/v1/apps/actions

CLI:tracee apps search·MCP:appsaction search

Authorizations

  • Authorizationstringheaderrequired

    Bearer <key>: a personal key (tracee login or Settings → Personal keys), a workspace key, or an MCP client's OAuth token. See Authentication.

Headers

  • Tracee-Workspacestring

    For a personal key or OAuth token that reaches several workspaces: the workspace id to act on. Workspace keys don't need it.

    uuid

Query parameters

Lists: comma-separated or repeated
  • querystringrequired

    The query

    up to 300 characters

  • appsstring[]

    Limit search to these toolkit slugs

  • limitinteger

    The limit.

    1–25

Response

  • 200Done.

    The action's result, exactly as the MCP tool returns it to agents. A next field, when present, names the endpoint that follows up.