> ## Documentation Index
> Fetch the complete documentation index at: https://docs.calseta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# search_alerts

> MCP tool to search and filter alerts.

## search\_alerts

Search alerts with filters on status, severity, source, tags, and time range.

### Parameters

| Parameter     | Type      | Required | Description                                                              |
| ------------- | --------- | -------- | ------------------------------------------------------------------------ |
| `status`      | string    | No       | Filter by status: `Open`, `Triaging`, `Escalated`, `Closed`              |
| `severity`    | string    | No       | Filter by severity: `Informational`, `Low`, `Medium`, `High`, `Critical` |
| `source_name` | string    | No       | Filter by alert source                                                   |
| `tags`        | string\[] | No       | Filter by tags (alerts must match any tag)                               |
| `since`       | string    | No       | ISO 8601 timestamp — only alerts after this time                         |
| `limit`       | integer   | No       | Maximum results (default: 20)                                            |

At least one parameter must be provided.

### Example

```json theme={null}
{
  "status": "Open",
  "severity": "High",
  "since": "2025-01-14T00:00:00Z",
  "limit": 10
}
```

### Return Value

```json theme={null}
[
  {
    "uuid": "9f2a-b3c1-...",
    "title": "Impossible Travel Detected",
    "severity": "High",
    "status": "Open",
    "source_name": "sentinel",
    "occurred_at": "2025-01-15T10:28:00Z",
    "indicator_count": 3
  }
]
```

### Required Scope

`alerts:read`