> For the complete documentation index, see [llms.txt](https://docs.ox.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ox.security/api-documentation/api-reference/api--response-center/types/inputs/create-incident-input.md).

# createIncidentInput

### Examples

```graphql
input CreateIncidentInput {
  extractionToken: String
  name: String!
  description: String
  type: IncidentType!
  severity: IncidentSeverity!
  indicators: [IndicatorInput!]
  owner: String
  assignToMe: Boolean
  autoExpandFromSource: Boolean
  externalReferences: [String!]
  sourcePublishedAt: DateTime
  settings: IncidentSettingsInput
  isOxDeclared: Boolean
  publishTypeReason: String
}
```

### Fields

| Field                                                                                                                             | Description                                                                                                            | Supported fields                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| --------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| extractionToken `String`                                                                                                          |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| name `String!`                                                                                                                    |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| description `String`                                                                                                              |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| type [`IncidentType!`](/api-documentation/api-reference/api--response-center/types/enums/incident-type.md)                        |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| severity [`IncidentSeverity!`](/api-documentation/api-reference/api--response-center/types/enums/incident-severity.md)            |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| indicators [`[IndicatorInput!]`](/api-documentation/api-reference/api--response-center/types/inputs/indicator-input.md)           |                                                                                                                        | <p>kind <a href="/api-documentation/api-reference/api--response-center/types/enums/indicator-kind.md"><code>IndicatorKind!</code></a><br>value <code>String!</code><br>versionRange <code>String</code><br>fixedVersions <code>\[String!]</code><br>remediationStatus <a href="/api-documentation/api-reference/api--response-center/types/enums/indicator-remediation-status.md"><code>IndicatorRemediationStatus</code></a><br>remediations <a href="/api-documentation/api-reference/api--response-center/types/inputs/indicator-remediation-input.md"><code>\[IndicatorRemediationInput!]</code></a><br>isCompromised <code>Boolean</code><br>infectsOnInstall <code>Boolean</code><br>ecosystem <code>String</code><br>severity <a href="/api-documentation/api-reference/api--response-center/types/enums/incident-severity.md"><code>IncidentSeverity</code></a><br>cvssScore <code>Float</code><br>url <code>String</code><br>autoExpand <code>Boolean</code></p> |
| owner `String`                                                                                                                    |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| assignToMe `Boolean`                                                                                                              |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| autoExpandFromSource `Boolean`                                                                                                    |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| externalReferences `[String!]`                                                                                                    |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| sourcePublishedAt `DateTime`                                                                                                      |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| settings [`IncidentSettingsInput`](/api-documentation/api-reference/api--response-center/types/inputs/incident-settings-input.md) |                                                                                                                        | <p>allowManualClosure <code>Boolean</code><br>autoCloseWhenResolved <code>Boolean</code><br>cleanDaysBeforeClose <code>Int</code><br>autoReopenOnNewHit <code>Boolean</code><br>watchWindowDays <code>Int</code></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| isOxDeclared `Boolean`                                                                                                            | Deprecated and scheduled for removal. The createIncident mutation rejects true and treats false or omission as manual. |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| publishTypeReason `String`                                                                                                        |                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |

### References

#### Mutations using this object:

* [<\~> createIncident.input](/api-documentation/api-reference/api--response-center/mutations/create-incident.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ox.security/api-documentation/api-reference/api--response-center/types/inputs/create-incident-input.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.