---
title: "Get Incident States"
method: GET
path: "/api/v1/user/incidentstates/{incidentId}/"
tags: ["Incidents"]
---

# Get Incident States

`GET /api/v1/user/incidentstates/{incidentId}/`

## Request

- Base URL: `https://urlscan.io`
- URL: `https://urlscan.io/api/v1/user/incidentstates/{incidentId}/`
- Auth: API key in header `api-key`

Retrieve individual incident states of an incident.

## Path parameters

- `incidentId` string, required

## Response `200`

OK

- object
  - `incidentstates` object[]
    - `_id` string: Unique ID of incident state interval
    - `incident` string: ID of the incident
    - `state` object: Current state of the interval
    - `timeStart` string, date: Start time of the interval
    - `timeEnd` string, date: End time of the interval

---

[API](https://skmtc.dev/urlscan/apis/urlscan-io-apis.md) - [All operations](https://skmtc.dev/urlscan/apis/urlscan-io-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/urlscan/apis/urlscan-io-apis/revisions/868c1c89a6e8?raw)