Apps
Find actions in connected apps
Matching actions with their slug, risk (read, write, destructive) and required inputs.
GET
https://traceeai.com/api/v1/apps/actionsCLI:tracee apps search·MCP:appsaction search
Authorizations
AuthorizationstringheaderrequiredBearer <key>: a personal key (tracee loginor Settings → Personal keys), a workspace key, or an MCP client's OAuth token. See Authentication.
Headers
Tracee-WorkspacestringFor a personal key or OAuth token that reaches several workspaces: the workspace id to act on. Workspace keys don't need it.
uuid
Query parameters
Lists: comma-separated or repeated
querystringrequiredThe query
up to 300 characters
appsstring[]Limit search to these toolkit slugs
limitintegerThe limit.
1–25
Response
- 200Done.
The action's result, exactly as the MCP tool returns it to agents. A
nextfield, when present, names the endpoint that follows up.