List Cases
List cases with default filtering and sorting options.
Authorizations
Path Parameters
Query Parameters
Maximum items per page
1 <= x <= 200Cursor for pagination
Reverse pagination direction
Column name to order by (e.g. created_at, updated_at, priority, severity, status, tasks, assignee, tags). Default: created_at
created_at, updated_at, priority, severity, status, tasks, assignee, tags Direction to sort (asc or desc)
asc, desc Include linked table rows
Include only the requested custom field IDs
Include case duration values
Include case payload
Return only these literal top-level payload keys, automatically including the subset regardless of include_payload. Dots are literal; nested values are returned whole. Missing keys are omitted and null values preserved. An empty list acts as omitted; an empty string selects the literal empty key.
Include the exact filtered total_estimate for compatibility. Set false when fetching aggregate counts separately; total_estimate will be null.
Return every case, or only top-level cases without a parent.
all, top_level JSON-encoded array of up to 100 object paths, e.g. [["alert","source","ip"]]. Each path contains 1 to 32 literal keys. Preserves nesting, combines with payload_fields, and includes the subset automatically. Selected parents include their whole value. Missing paths are omitted; nulls are preserved. Arrays can be selected whole, without index traversal. An empty list acts as omitted.
Response
Successful Response
Cursor for next page
Cursor for previous page
Whether more items exist
Whether previous items exist
Estimated total count from table statistics