AlertsCreate a channel

Create a channel

slack posts a text message to a Slack (or Slack-compatible) incoming webhook. webhook POSTs JSON to any HTTPS url, signed with HMAC-SHA256 in X-Mythic-Signature (sha256=<hex>). The signing secret is returned once, in signing_secret, and cannot be read again. Targets are stored encrypted. Email is not available yet. Up to 20 channels per agency.

curl -X POST "https://mythic-analytics.gulp.workers.dev/client/v1/alerts/channels" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -d '{
  "kind": "slack",
  "target": "https://hooks.slack.com/services/T000/B000/XXXX",
  "label": "#client-alerts"
}'
{
  "success": true,
  "data": {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "kind": "slack",
    "label": "example_string",
    "target": "https://hooks.slack.com/***",
    "signed": true,
    "active": true,
    "consecutive_failures": 42,
    "last_delivery_at": "2024-12-25T10:00:00Z",
    "last_error": "example_string",
    "created_at": "2024-12-25T10:00:00Z",
    "signing_secret": "example_string"
  }
}
POST
/client/v1/alerts/channels
POST
Base URLstring

Target server for requests. Edit to use your own host.

Bearer Token
Bearer Tokenstring
Required

Agency key (ak_) only; a location secret key (sk_) gets 403 agency_required. Agency-wide scoped keys (mcp_) are accepted and need alerts:read or alerts:write. Keys are server-side credentials; this surface serves no CORS headers.

Agency key (ak_) only; a location secret key (sk_) gets 403 agency_required. Agency-wide scoped keys (mcp_) are accepted and need alerts:read or alerts:write. Keys are server-side credentials; this surface serves no CORS headers.
Content-Typestring
Required

The media type of the request body

Options: application/json
kindstring
Required
Options: slack, webhook
labelstring

e.g. "#client-alerts".

Request Preview
Response

Response will appear here after sending the request

Authentication

header
Authorizationstring
Required

Bearer token. Agency key (ak_) only; a location secret key (sk_) gets 403 agency_required. Agency-wide scoped keys (mcp_) are accepted and need alerts:read or alerts:write. Keys are server-side credentials; this surface serves no CORS headers.

Body

application/json
kindstring
Required
Allowed values:slackwebhook
labelstring

e.g. "#client-alerts".

Responses