List incident events

curl --request GET \
  --url https://api.igrisecurity.com/api/v1/incidents/{id}/events \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.igrisecurity.com/api/v1/incidents/{id}/events', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.igrisecurity.com/api/v1/incidents/{id}/events"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

{
  "data": [
    {
      "id": "1a2b3c4d-0000-4000-8000-000000000009",
      "type": "mcp_tool_call",
      "timestamp": "2026-01-01T00:40:00Z",
      "toolName": "delete_repo",
      "policyAction": "deny",
      "connectionSlug": "github-prod"
    }
  ],
  "meta": {
    "total": 1,
    "limit": 20,
    "offset": 0,
    "nextCursor": null
  }
}

{
  "error": "<string>"
}

{
  "error": "Unauthorized"
}

{
  "error": "Forbidden",
  "required": "policies:write"
}

{
  "error": "Not found"
}