PluginBench
Skill
Official
Fail
Audit score 45

sentry-create-alert

getsentry/sentry-for-ai

Create Sentry alerts and workflow automations via the workflow engine API.

What is sentry-create-alert?

This skill creates alerts in Sentry using the workflow engine API (currently in beta). Use it when users ask to set up notifications, configure issue-triggered actions, or build workflow automations with email, Slack, PagerDuty, Discord, and other integrations.

  • Create alerts that trigger on issue events (first seen, regression, reappeared, resolved)
  • Filter alerts with conditions like priority level, event frequency, tags, and issue age
  • Route notifications to email, Slack, PagerDuty, Discord, MS Teams, Opsgenie, Jira, or GitHub
  • Set notification frequency (0 to 1440 minutes between repeats)
  • List, update, and delete existing workflows via API
  • Support action filters to refine which notifications fire based on multiple conditions

How to install sentry-create-alert

npx skills add https://github.com/getsentry/sentry-for-ai --skill sentry-create-alert
Prerequisites
  • curl available in shell
  • Sentry organization auth token with `alerts:write` scope (or `org:admin`/`org:write`)
  • Sentry org slug and region (us or de)
  • For integrations: existing Slack workspace, PagerDuty account, or Discord server connected to Sentry
Claude Code
Cursor
Windsurf
Cline

How to use sentry-create-alert

  1. 1.Gather required details: org slug, auth token, region, alert name, trigger events, and action type
  2. 2.Look up IDs for users, teams, or integrations using the provided API calls
  3. 3.Build the alert payload with triggers, filter conditions, and actions
  4. 4.POST the payload to the workflows API endpoint
  5. 5.Verify the alert was created and note the workflow ID for future management

Use cases

Good for
  • Alert on high-priority errors occurring more than 50 times per hour and email the on-call team
  • Notify a Slack channel when a previously resolved issue regresses
  • Send PagerDuty critical alerts when new issues are first detected in production
  • De-escalate alerts when issue priority drops below a threshold
  • Route different issue categories to different teams (errors to backend team, feedback to product team)
Who it's for
  • DevOps engineers setting up error monitoring and on-call workflows
  • Platform teams configuring multi-channel alert routing
  • Development teams automating issue notifications to Slack or email
  • SREs building escalation and de-escalation alert rules

sentry-create-alert FAQ

What's the difference between triggers and actionFilters?

Triggers define which issue events fire the workflow (e.g., first_seen_event). ActionFilters contain conditions that must pass before actions execute (e.g., priority >= High). Triggers always use logicType 'any-short'; actionFilters can use 'all', 'any-short', or 'none'.

Can I send notifications to multiple channels at once?

Yes. Add multiple action objects to the actionFilters[].actions array, each with a different type (email, slack, pagerduty, etc.) and target.

What does the frequency field do?

Frequency (in minutes) controls how often repeated notifications are sent for the same alert. Allowed values are 0, 5, 10, 30, 60, 180, 720, or 1440. Set to 0 for every occurrence.

How do I filter alerts by event tags?

Use a condition with type 'tagged_event' and comparison format {"key": "tag_name", "match": "eq", "value": "tag_value"}. Match types include 'eq', 'ne', 'co' (contains), 'sw' (starts with), 'ew' (ends with), 'is', and 'ns'.

What if my org doesn't have the workflow-engine-ui feature flag?

The alert will still be created and functional, but it will appear in the legacy Alerts UI at https://{org_slug}.sentry.io/alerts/rules/ instead of the new monitors UI.

Full instructions (SKILL.md)

Source of truth, from getsentry/sentry-for-ai.


name: sentry-create-alert description: Create Sentry alerts using the workflow engine API. Use when asked to create alerts, set up notifications, configure issue priority alerts, or build workflow automations. Supports email, Slack, PagerDuty, Discord, and other notification actions. license: Apache-2.0

Create Sentry Alert

Create alerts via Sentry’s workflow engine API.

Note: This API is currently in beta and may be subject to change. It is part of New Monitors and Alerts and may not be viewable in the legacy Alerts UI.

Invoke This Skill When

  • User asks to “create a Sentry alert” or “set up notifications”
  • User wants to be emailed or notified when issues match certain conditions
  • User mentions priority alerts, de-escalation alerts, or workflow automations
  • User wants to configure Slack, PagerDuty, or email notifications for Sentry issues

Prerequisites

  • curl available in shell
  • Sentry org auth token with alerts:write scope (also accepts org:admin or org:write)

Phase 1: Gather Configuration

Ask the user for any missing details:

DetailRequiredExample
Org slugYessentry, my-org
Auth tokenYessntryu_... (needs alerts:write scope)
RegionYes (default: us)us → us.sentry.io, de → de.sentry.io
Alert nameYes"High Priority De-escalation Alert"
Trigger eventsYesWhich issue events fire the workflow
ConditionsOptionalFilter conditions before actions execute
Action typeYesemail, slack, or pagerduty
Action targetYesUser email, team, channel, or service

Phase 2: Look Up IDs

Use these API calls to resolve names to IDs as needed.

API="https://{region}.sentry.io/api/0/organizations/{org}"
AUTH="Authorization: Bearer {token}"

# Find user ID by email
curl -s "$API/members/" -H "$AUTH" | python3 -c "
import json,sys
for m in json.load(sys.stdin):
  if m.get('email')=='USER_EMAIL' or m.get('user',{}).get('email')=='USER_EMAIL':
    print(m['user']['id']); break"

# List teams
curl -s "$API/teams/" -H "$AUTH" | python3 -c "
import json,sys
for t in json.load(sys.stdin):
  print(t['id'], t['slug'])"

# List integrations (for Slack/PagerDuty)
curl -s "$API/integrations/" -H "$AUTH" | python3 -c "
import json,sys
for i in json.load(sys.stdin):
  print(i['id'], i['provider']['key'], i['name'])"

Phase 3: Build Payload

Trigger Events

Pick which issue events fire the workflow. Use logicType: "any-short" (triggers must always use this).

TypeFires when
first_seen_eventNew issue created
regression_eventResolved issue recurs
reappeared_eventArchived issue reappears
issue_resolved_triggerIssue is resolved

Filter Conditions

Conditions that must pass before actions execute. Use logicType: "all", "any-short", or "none".

The comparison field is polymorphic — its shape depends on the condition type:

Typecomparison formatDescription
issue_priority_greater_or_equal75 (bare integer)Priority >= Low(25)/Medium(50)/High(75)
issue_priority_deescalatingtrue (bare boolean)Priority dropped below peak
event_frequency_count{"value": 100, "interval": "1hr"}Event count in time window
event_unique_user_frequency_count{"value": 50, "interval": "1hr"}Affected users in time window
tagged_event{"key": "level", "match": "eq", "value": "error"}Event tag matches
assigned_to{"targetType": "Member", "targetIdentifier": 123}Issue assigned to target
level{"level": 40, "match": "gte"}Event level (fatal=50, error=40, warning=30)
age_comparison{"time": "hour", "value": 24, "comparisonType": "older"}Issue age
issue_category{"value": 1}Category (1=Error, 6=Feedback)
issue_occurrences{"value": 100}Total occurrence count

Interval options: "1min", "5min", "15min", "1hr", "1d", "1w", "30d"

Tag match types: "co" (contains), "nc" (not contains), "eq", "ne", "sw" (starts with), "ew" (ends with), "is" (set), "ns" (not set)

Set conditionResult to false to invert (fire when condition is NOT met).

Actions

TypeKey Config
emailconfig.targetType: "user" / "team" / "issue_owners", config.targetIdentifier: <id>
slackintegrationId: <id>, config.targetDisplay: "#channel-name"
pagerdutyintegrationId: <id>, config.targetDisplay: <service_name>, data.priority: "critical"
discordintegrationId: <id>, data.tags: tag list
msteamsintegrationId: <id>, config.targetDisplay: <channel>
opsgenieintegrationId: <id>, data.priority: "P1"-"P5"
jiraintegrationId: <id>, data: project/issue config
githubintegrationId: <id>, data: repo/issue config

Full Payload Structure

{
  "name": "<Alert Name>",
  "enabled": true,
  "environment": null,
  "config": { "frequency": 30 },
  "triggers": {
    "logicType": "any-short",
    "conditions": [
      { "type": "first_seen_event", "comparison": true, "conditionResult": true }
    ],
    "actions": []
  },
  "actionFilters": [{
    "logicType": "all",
    "conditions": [
      { "type": "issue_priority_greater_or_equal", "comparison": 75, "conditionResult": true },
      { "type": "event_frequency_count", "comparison": {"value": 50, "interval": "1hr"}, "conditionResult": true }
    ],
    "actions": [{
      "type": "email",
      "integrationId": null,
      "data": {},
      "config": {
        "targetType": "user",
        "targetIdentifier": "<user_id>",
        "targetDisplay": null
      },
      "status": "active"
    }]
  }]
}

frequency: minutes between repeated notifications. Allowed values: 0, 5, 10, 30, 60, 180, 720, 1440.

Structure note: triggers.actions is always [] — actions live inside actionFilters[].actions.

Phase 4: Create the Alert

curl -s -w "\n%{http_code}" -X POST \
  "https://{region}.sentry.io/api/0/organizations/{org}/workflows/" \
  -H "Authorization: Bearer {token}" \
  -H "Content-Type: application/json" \
  -d '{payload}'

Expect HTTP 201. The response contains the workflow id.

Phase 5: Verify

Confirm the alert was created and provide the UI link:

https://{org_slug}.sentry.io/monitors/alerts/{workflow_id}/

If the org lacks the workflow-engine-ui feature flag, the alert appears at:

https://{org_slug}.sentry.io/alerts/rules/

Managing Alerts

# List all workflows
curl -s "$API/workflows/" -H "$AUTH"

# Get one workflow
curl -s "$API/workflows/{id}/" -H "$AUTH"

# Update a workflow
curl -s -X PUT "$API/workflows/{id}/" -H "$AUTH" -H "Content-Type: application/json" -d '{payload}'

# Delete a workflow
curl -s -X DELETE "$API/workflows/{id}/" -H "$AUTH"
# Expect 204

Troubleshooting

IssueSolution
401 UnauthorizedToken needs alerts:write scope
403 ForbiddenToken must belong to the target org
404 Not FoundCheck org slug and region (us vs de)
400 Bad RequestValidate payload JSON structure, check required fields
User ID not foundVerify email matches a member of the org