Dregs Escalation Rules API

Escalation rule management

Operations 6

GET /api/escalation-rules List escalation rules #
POST /api/escalation-rules Create escalation rule #
POST /api/escalation-rules/preview Preview escalation rule #
GET /api/escalation-rules/{id} Get escalation rule #
DELETE /api/escalation-rules/{id} Delete escalation rule #
PATCH /api/escalation-rules/{id} Update escalation rule #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/dregs-com:dregs-com-escalation-rules-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

dregs-com-escalation-rules-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Dregs Escalation Rules API
  description: 'Customer REST API for sending events and reading fraud scores, identities, devices, escalations, channels, datasets, and mappings.


    Authenticate with a secret key created in the dashboard under Settings > Credentials (security scheme secretKey). Send it as a Bearer token: Authorization: Bearer sk_... The key acts as an admin of that credential''s team. POST /api/events and GET /api/devices/{fingerprint} also accept the credential''s public key (security scheme publicKey, Bearer pk_...). Public keys may be embedded in a browser. Secret keys must not.


    This document is the curated public surface. Dashboard sign-in, billing, team administration, and trainer tools are not included.'
  version: '1.0'
servers:
- url: https://dregs.com
  description: Dregs API
security:
- secretKey: []
tags:
- name: Escalation Rules
  description: Escalation rule management
paths:
  /api/escalation-rules:
    get:
      tags:
      - Escalation Rules
      summary: List escalation rules
      description: Returns all escalation rules for the current team
      operationId: listEscalationRules
      responses:
        '200':
          description: Escalation rules retrieved successfully
          content:
            '*/*':
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/V1EscalationRule'
        '401':
          description: Authentication required
          content:
            '*/*':
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/V1EscalationRule'
      security:
      - secretKey: []
    post:
      tags:
      - Escalation Rules
      summary: Create escalation rule
      description: Creates a new escalation rule
      operationId: createEscalationRule
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/V1CreateEscalationRuleRequest'
        required: true
      responses:
        '200':
          description: Escalation rule created
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/V1EscalationRule'
        '400':
          description: Invalid request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/V1EscalationRule'
      security:
      - secretKey: []
  /api/escalation-rules/preview:
    post:
      tags:
      - Escalation Rules
      summary: Preview escalation rule
      description: Returns how many identities currently match the given conditions
      operationId: previewEscalationRule
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/V1PreviewEscalationRuleRequest'
        required: true
      responses:
        '200':
          description: Preview computed
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/V1EscalationRulePreview'
        '400':
          description: Invalid conditions
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/V1EscalationRulePreview'
      security:
      - secretKey: []
  /api/escalation-rules/{id}:
    get:
      tags:
      - Escalation Rules
      summary: Get escalation rule
      description: Returns a single escalation rule by ID
      operationId: getEscalationRule
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: integer
          format: int64
      responses:
        '200':
          description: Escalation rule found
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/V1EscalationRule'
        '404':
          description: Escalation rule not found
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/V1EscalationRule'
      security:
      - secretKey: []
    delete:
      tags:
      - Escalation Rules
      summary: Delete escalation rule
      description: Deletes an escalation rule
      operationId: deleteEscalationRule
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: integer
          format: int64
      responses:
        '204':
          description: Escalation rule deleted
        '404':
          description: Escalation rule not found
      security:
      - secretKey: []
    patch:
      tags:
      - Escalation Rules
      summary: Update escalation rule
      description: Updates an escalation rule
      operationId: updateEscalationRule
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: integer
          format: int64
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/V1UpdateEscalationRuleRequest'
        required: true
      responses:
        '200':
          description: Escalation rule updated
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/V1EscalationRule'
        '404':
          description: Escalation rule not found
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/V1EscalationRule'
      security:
      - secretKey: []
components:
  schemas:
    V1EscalationRulePreview:
      type: object
      properties:
        matchCount:
          type: integer
          format: int64
        totalCount:
          type: integer
          format: int64
    V1PreviewEscalationRuleRequest:
      type: object
      properties:
        conditions:
          type: array
          items:
            $ref: '#/components/schemas/RuleCondition'
    V1UpdateEscalationRuleRequest:
      type: object
      properties:
        name:
          type: string
        conditions:
          type: array
          items:
            $ref: '#/components/schemas/RuleCondition'
        severity:
          type: string
          enum:
          - INFO
          - WARNING
          - CRITICAL
        channels:
          type: array
          items:
            type: string
        openAfterSeconds:
          type: integer
          format: int32
        closeAfterSeconds:
          type: integer
          format: int32
        effectiveAt:
          type: string
          format: date-time
        enabled:
          type: boolean
    RuleCondition:
      type: object
      properties:
        condition:
          type: string
        category:
          type: string
        threshold:
          type: integer
          format: int32
        badge:
          type: string
        seconds:
          type: integer
          format: int32
    V1CreateEscalationRuleRequest:
      type: object
      properties:
        name:
          type: string
        conditions:
          type: array
          items:
            $ref: '#/components/schemas/RuleCondition'
        severity:
          type: string
          enum:
          - INFO
          - WARNING
          - CRITICAL
        channels:
          type: array
          items:
            type: string
        openAfterSeconds:
          type: integer
          format: int32
        closeAfterSeconds:
          type: integer
          format: int32
        effectiveAt:
          type: string
          format: date-time
    V1EscalationRule:
      type: object
      properties:
        id:
          type: integer
          format: int64
        slug:
          type: string
        name:
          type: string
        conditions:
          type: array
          items:
            $ref: '#/components/schemas/RuleCondition'
        severity:
          type: string
          enum:
          - INFO
          - WARNING
          - CRITICAL
        channels:
          type: array
          items:
            type: string
        openAfterSeconds:
          type: integer
          format: int32
        closeAfterSeconds:
          type: integer
          format: int32
        effectiveAt:
          type: string
          format: date-time
        enabled:
          type: boolean
        createdAt:
          type: string
          format: date-time
        updatedAt:
          type: string
          format: date-time
  securitySchemes:
    secretKey:
      type: http
      description: Customer secret key from Settings > Credentials, sent as a Bearer token. The token value starts with sk_. It acts as an admin of that credential's team for every operation in this document. MCP tokens (dmcp_) are refused. Prefer the publicKey scheme on operations that accept a pk_ key.
      scheme: bearer
      bearerFormat: sk_
    publicKey:
      type: http
      description: Customer public key from Settings > Credentials, sent as a Bearer token. The token value starts with pk_. Accepted only by POST /api/events and GET /api/devices/{fingerprint}. It may be embedded in a browser. It cannot call the other operations in this document.
      scheme: bearer
      bearerFormat: pk_