# List active alerts **GET /alerts** Retrieves active alerts from Mimir for the caller's scope, paginated and sorted by `startsAt` descending (fingerprint as tiebreaker for stable pagination). Scope follows the same three modes as `/alerts/totals`: - `organization_id` omitted → caller's full hierarchy (cross-tenant fan-out). - `organization_id=X` → single tenant `X`. - `organization_id=X&include=descendants` → `X` plus its sub-tree. All filter params support **multiple values** (repeat the param): values within the same filter are matched as OR; different filters AND together. Example: `?severity=critical&severity=warning&alertname=CVE-2024-1234` returns CVE-2024-1234 alerts that are critical or warning. Per-tenant failures during fan-out (timeout, 5xx) are non-fatal: the rest of the result is returned and the failure is reported in the `warnings` array. ## Servers - Backend API server (port 8080): https://api.your-domain.com/api (Backend API server (port 8080)) - Collect API server (port 8081): https://collect.your-domain.com/api (Collect API server (port 8081)) ## Authentication methods - Bearer auth ## Parameters ### Query parameters - **organization_id** (string) Target organization ID. Optional for all roles except Customer (where it is ignored). - **include** (string) Set to `descendants` together with `organization_id` to drill down on a sub-tree. - **page** (integer) 1-based page number. - **page_size** (integer) Page size. Default 50, max 100. - **state** (array[string]) Filter alerts by state. Supports multiple values. - **severity** (array[string]) Filter alerts by severity label. Supports multiple values. - **system_key** (array[string]) Filter alerts by system_key label. Supports multiple values. - **alertname** (array[string]) Filter alerts by alertname label (the alert "type" — e.g. `HighCPU`, `DiskFull`, `CVE-2024-1234`). Supports multiple values. ## Responses ### 200 Paginated list of active alerts #### Body: application/json (object) - **code** (integer) - **message** (string) - **data** (object) ### 400 Bad request - validation error #### Body: application/json (object) - **code** (integer) HTTP error code - **message** (string) Error message - **data** (object) ### 401 Unauthorized - invalid or missing token #### Body: application/json (object) - **code** (integer) - **message** (string) - **data** (object | null) ### 403 Forbidden - insufficient permissions #### Body: application/json (object) - **code** (integer) - **message** (string) - **data** (object | null) ### 500 Internal server error #### Body: application/json (object) - **code** (integer) - **message** (string) - **data** (object | null) [Powered by Bump.sh](https://bump.sh)