sentry-create-alert
getsentry/sentry-for-ai
Create Sentry alerts and workflow automations via the workflow engine API.
What is sentry-create-alert?
This skill creates alerts in Sentry using the workflow engine API (currently in beta). Use it when users ask to set up notifications, configure issue-triggered actions, or build workflow automations with email, Slack, PagerDuty, Discord, and other integrations.
- Create alerts that trigger on issue events (first seen, regression, reappeared, resolved)
- Filter alerts with conditions like priority level, event frequency, tags, and issue age
- Route notifications to email, Slack, PagerDuty, Discord, MS Teams, Opsgenie, Jira, or GitHub
- Set notification frequency (0 to 1440 minutes between repeats)
- List, update, and delete existing workflows via API
- Support action filters to refine which notifications fire based on multiple conditions
How to install sentry-create-alert
npx skills add https://github.com/getsentry/sentry-for-ai --skill sentry-create-alert- curl available in shell
- Sentry organization auth token with `alerts:write` scope (or `org:admin`/`org:write`)
- Sentry org slug and region (us or de)
- For integrations: existing Slack workspace, PagerDuty account, or Discord server connected to Sentry
How to use sentry-create-alert
- 1.Gather required details: org slug, auth token, region, alert name, trigger events, and action type
- 2.Look up IDs for users, teams, or integrations using the provided API calls
- 3.Build the alert payload with triggers, filter conditions, and actions
- 4.POST the payload to the workflows API endpoint
- 5.Verify the alert was created and note the workflow ID for future management
Use cases
- Alert on high-priority errors occurring more than 50 times per hour and email the on-call team
- Notify a Slack channel when a previously resolved issue regresses
- Send PagerDuty critical alerts when new issues are first detected in production
- De-escalate alerts when issue priority drops below a threshold
- Route different issue categories to different teams (errors to backend team, feedback to product team)
- DevOps engineers setting up error monitoring and on-call workflows
- Platform teams configuring multi-channel alert routing
- Development teams automating issue notifications to Slack or email
- SREs building escalation and de-escalation alert rules
sentry-create-alert FAQ
Triggers define which issue events fire the workflow (e.g., first_seen_event). ActionFilters contain conditions that must pass before actions execute (e.g., priority >= High). Triggers always use logicType 'any-short'; actionFilters can use 'all', 'any-short', or 'none'.
Yes. Add multiple action objects to the actionFilters[].actions array, each with a different type (email, slack, pagerduty, etc.) and target.
Frequency (in minutes) controls how often repeated notifications are sent for the same alert. Allowed values are 0, 5, 10, 30, 60, 180, 720, or 1440. Set to 0 for every occurrence.
Use a condition with type 'tagged_event' and comparison format {"key": "tag_name", "match": "eq", "value": "tag_value"}. Match types include 'eq', 'ne', 'co' (contains), 'sw' (starts with), 'ew' (ends with), 'is', and 'ns'.
The alert will still be created and functional, but it will appear in the legacy Alerts UI at https://{org_slug}.sentry.io/alerts/rules/ instead of the new monitors UI.
Full instructions (SKILL.md)
Source of truth, from getsentry/sentry-for-ai.
name: sentry-create-alert description: Create Sentry alerts using the workflow engine API. Use when asked to create alerts, set up notifications, configure issue priority alerts, or build workflow automations. Supports email, Slack, PagerDuty, Discord, and other notification actions. license: Apache-2.0
Create Sentry Alert
Create alerts via Sentry’s workflow engine API.
Note: This API is currently in beta and may be subject to change. It is part of New Monitors and Alerts and may not be viewable in the legacy Alerts UI.
Invoke This Skill When
- User asks to “create a Sentry alert” or “set up notifications”
- User wants to be emailed or notified when issues match certain conditions
- User mentions priority alerts, de-escalation alerts, or workflow automations
- User wants to configure Slack, PagerDuty, or email notifications for Sentry issues
Prerequisites
curlavailable in shell- Sentry org auth token with
alerts:writescope (also acceptsorg:adminororg:write)
Phase 1: Gather Configuration
Ask the user for any missing details:
| Detail | Required | Example |
|---|---|---|
| Org slug | Yes | sentry, my-org |
| Auth token | Yes | sntryu_... (needs alerts:write scope) |
| Region | Yes (default: us) | us → us.sentry.io, de → de.sentry.io |
| Alert name | Yes | "High Priority De-escalation Alert" |
| Trigger events | Yes | Which issue events fire the workflow |
| Conditions | Optional | Filter conditions before actions execute |
| Action type | Yes | email, slack, or pagerduty |
| Action target | Yes | User email, team, channel, or service |
Phase 2: Look Up IDs
Use these API calls to resolve names to IDs as needed.
API="https://{region}.sentry.io/api/0/organizations/{org}"
AUTH="Authorization: Bearer {token}"
# Find user ID by email
curl -s "$API/members/" -H "$AUTH" | python3 -c "
import json,sys
for m in json.load(sys.stdin):
if m.get('email')=='USER_EMAIL' or m.get('user',{}).get('email')=='USER_EMAIL':
print(m['user']['id']); break"
# List teams
curl -s "$API/teams/" -H "$AUTH" | python3 -c "
import json,sys
for t in json.load(sys.stdin):
print(t['id'], t['slug'])"
# List integrations (for Slack/PagerDuty)
curl -s "$API/integrations/" -H "$AUTH" | python3 -c "
import json,sys
for i in json.load(sys.stdin):
print(i['id'], i['provider']['key'], i['name'])"
Phase 3: Build Payload
Trigger Events
Pick which issue events fire the workflow.
Use logicType: "any-short" (triggers must always use this).
| Type | Fires when |
|---|---|
first_seen_event | New issue created |
regression_event | Resolved issue recurs |
reappeared_event | Archived issue reappears |
issue_resolved_trigger | Issue is resolved |
Filter Conditions
Conditions that must pass before actions execute.
Use logicType: "all", "any-short", or "none".
The comparison field is polymorphic — its shape depends on the condition type:
| Type | comparison format | Description |
|---|---|---|
issue_priority_greater_or_equal | 75 (bare integer) | Priority >= Low(25)/Medium(50)/High(75) |
issue_priority_deescalating | true (bare boolean) | Priority dropped below peak |
event_frequency_count | {"value": 100, "interval": "1hr"} | Event count in time window |
event_unique_user_frequency_count | {"value": 50, "interval": "1hr"} | Affected users in time window |
tagged_event | {"key": "level", "match": "eq", "value": "error"} | Event tag matches |
assigned_to | {"targetType": "Member", "targetIdentifier": 123} | Issue assigned to target |
level | {"level": 40, "match": "gte"} | Event level (fatal=50, error=40, warning=30) |
age_comparison | {"time": "hour", "value": 24, "comparisonType": "older"} | Issue age |
issue_category | {"value": 1} | Category (1=Error, 6=Feedback) |
issue_occurrences | {"value": 100} | Total occurrence count |
Interval options: "1min", "5min", "15min", "1hr", "1d", "1w", "30d"
Tag match types: "co" (contains), "nc" (not contains), "eq", "ne", "sw"
(starts with), "ew" (ends with), "is" (set), "ns" (not set)
Set conditionResult to false to invert (fire when condition is NOT met).
Actions
| Type | Key Config |
|---|---|
email | config.targetType: "user" / "team" / "issue_owners", config.targetIdentifier: <id> |
slack | integrationId: <id>, config.targetDisplay: "#channel-name" |
pagerduty | integrationId: <id>, config.targetDisplay: <service_name>, data.priority: "critical" |
discord | integrationId: <id>, data.tags: tag list |
msteams | integrationId: <id>, config.targetDisplay: <channel> |
opsgenie | integrationId: <id>, data.priority: "P1"-"P5" |
jira | integrationId: <id>, data: project/issue config |
github | integrationId: <id>, data: repo/issue config |
Full Payload Structure
{
"name": "<Alert Name>",
"enabled": true,
"environment": null,
"config": { "frequency": 30 },
"triggers": {
"logicType": "any-short",
"conditions": [
{ "type": "first_seen_event", "comparison": true, "conditionResult": true }
],
"actions": []
},
"actionFilters": [{
"logicType": "all",
"conditions": [
{ "type": "issue_priority_greater_or_equal", "comparison": 75, "conditionResult": true },
{ "type": "event_frequency_count", "comparison": {"value": 50, "interval": "1hr"}, "conditionResult": true }
],
"actions": [{
"type": "email",
"integrationId": null,
"data": {},
"config": {
"targetType": "user",
"targetIdentifier": "<user_id>",
"targetDisplay": null
},
"status": "active"
}]
}]
}
frequency: minutes between repeated notifications.
Allowed values: 0, 5, 10, 30, 60, 180, 720, 1440.
Structure note: triggers.actions is always [] — actions live inside
actionFilters[].actions.
Phase 4: Create the Alert
curl -s -w "\n%{http_code}" -X POST \
"https://{region}.sentry.io/api/0/organizations/{org}/workflows/" \
-H "Authorization: Bearer {token}" \
-H "Content-Type: application/json" \
-d '{payload}'
Expect HTTP 201. The response contains the workflow id.
Phase 5: Verify
Confirm the alert was created and provide the UI link:
https://{org_slug}.sentry.io/monitors/alerts/{workflow_id}/
If the org lacks the workflow-engine-ui feature flag, the alert appears at:
https://{org_slug}.sentry.io/alerts/rules/
Managing Alerts
# List all workflows
curl -s "$API/workflows/" -H "$AUTH"
# Get one workflow
curl -s "$API/workflows/{id}/" -H "$AUTH"
# Update a workflow
curl -s -X PUT "$API/workflows/{id}/" -H "$AUTH" -H "Content-Type: application/json" -d '{payload}'
# Delete a workflow
curl -s -X DELETE "$API/workflows/{id}/" -H "$AUTH"
# Expect 204
Troubleshooting
| Issue | Solution |
|---|---|
| 401 Unauthorized | Token needs alerts:write scope |
| 403 Forbidden | Token must belong to the target org |
| 404 Not Found | Check org slug and region (us vs de) |
| 400 Bad Request | Validate payload JSON structure, check required fields |
| User ID not found | Verify email matches a member of the org |
Related skills
More from getsentry/sentry-for-ai and the wider catalog.

sentry-debug-issue
Debug and fix Sentry issues end-to-end: find, analyze, apply code fixes, and resolve via commit.

sentry-dotnet-sdk
Full Sentry SDK setup for .NET with error monitoring, tracing, profiling, and logging across all frameworks.

sentry-elixir-sdk
Full Sentry SDK setup for Elixir, Phoenix, and Plug applications with error monitoring, tracing, logging, and crons.

sentry-feature-setup
Route to the right Sentry feature skill—OpenTelemetry, alerts, or Apple Snapshots.

sentry-fix-issues
Find and fix production issues from Sentry by analyzing stack traces, breadcrumbs, and traces to identify root causes.

sentry-fix-stack-traces
Upload source maps and debug files to make Sentry stack traces readable instead of minified or hex-addressed.