# Incidents

**urlscan Pro** - Incidents track observables, like hostnames and domains, and automatically scan and alert on changes.


## Create Incident

 - [POST /api/v1/user/incidents](https://docs.urlscan.io/apis/urlscan-openapi/incidents/createincident.md): Create an incident with specific options

## Get Incident

 - [GET /api/v1/user/incidents/{incidentId}](https://docs.urlscan.io/apis/urlscan-openapi/incidents/getincident.md): Get details for a specific incident.

## Update Incident options

 - [PUT /api/v1/user/incidents/{incidentId}](https://docs.urlscan.io/apis/urlscan-openapi/incidents/updateincident.md): Update specific runtime options of the incident

## Close Incident

 - [PUT /api/v1/user/incidents/{incidentId}/close](https://docs.urlscan.io/apis/urlscan-openapi/incidents/closeincident.md): Close (stop) the incident

## Restart Incident

 - [PUT /api/v1/user/incidents/{incidentId}/restart](https://docs.urlscan.io/apis/urlscan-openapi/incidents/restartincident.md): Restart a closed incident. Automatically extends the incident expireAt. Starts with new incident states.

## Copy Incident

 - [POST /api/v1/user/incidents/{incidentId}/copy](https://docs.urlscan.io/apis/urlscan-openapi/incidents/copyincident.md): Copy an incident without its history.

## Fork Incident

 - [POST /api/v1/user/incidents/{incidentId}/fork](https://docs.urlscan.io/apis/urlscan-openapi/incidents/forkincident.md): Copy an incident along with its history (incident states).

## Get Watchable Attributes

 - [GET /api/v1/user/watchableAttributes](https://docs.urlscan.io/apis/urlscan-openapi/incidents/getwatchableattributes.md): Get the list of attributes which can be supplied to the watchedAttributes property of the incident.

## Get Incident States

 - [GET /api/v1/user/incidentstates/{incidentId}/](https://docs.urlscan.io/apis/urlscan-openapi/incidents/getincidentstates.md): Retrieve individual incident states of an incident.