Update Automation rule

curl --request POST \
  --url 'https://api.flashcat.cloud/safari/automation/rule/update?app_key=' \
  --header 'Content-Type: application/json' \
  --data '
{
  "rule_id": "arule_7NnLzY2Qp8xS4kUaV3mR6b",
  "enabled": true,
  "cron_expr": "15 9 * * 1",
  "rotate_http_post_trigger_token": true,
  "oncall_incident_trigger_enabled": true,
  "oncall_incident_severities": [
    "Critical",
    "Warning"
  ],
  "oncall_incident_channel_ids": [
    456
  ]
}
'

import requests

url = "https://api.flashcat.cloud/safari/automation/rule/update?app_key="

payload = {
    "rule_id": "arule_7NnLzY2Qp8xS4kUaV3mR6b",
    "enabled": True,
    "cron_expr": "15 9 * * 1",
    "rotate_http_post_trigger_token": True,
    "oncall_incident_trigger_enabled": True,
    "oncall_incident_severities": ["Critical", "Warning"],
    "oncall_incident_channel_ids": [456]
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({
    rule_id: 'arule_7NnLzY2Qp8xS4kUaV3mR6b',
    enabled: true,
    cron_expr: '15 9 * * 1',
    rotate_http_post_trigger_token: true,
    oncall_incident_trigger_enabled: true,
    oncall_incident_severities: ['Critical', 'Warning'],
    oncall_incident_channel_ids: [456]
  })
};

fetch('https://api.flashcat.cloud/safari/automation/rule/update?app_key=', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.flashcat.cloud/safari/automation/rule/update?app_key=",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'rule_id' => 'arule_7NnLzY2Qp8xS4kUaV3mR6b',
    'enabled' => true,
    'cron_expr' => '15 9 * * 1',
    'rotate_http_post_trigger_token' => true,
    'oncall_incident_trigger_enabled' => true,
    'oncall_incident_severities' => [
        'Critical',
        'Warning'
    ],
    'oncall_incident_channel_ids' => [
        456
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.flashcat.cloud/safari/automation/rule/update?app_key="

	payload := strings.NewReader("{\n  \"rule_id\": \"arule_7NnLzY2Qp8xS4kUaV3mR6b\",\n  \"enabled\": true,\n  \"cron_expr\": \"15 9 * * 1\",\n  \"rotate_http_post_trigger_token\": true,\n  \"oncall_incident_trigger_enabled\": true,\n  \"oncall_incident_severities\": [\n    \"Critical\",\n    \"Warning\"\n  ],\n  \"oncall_incident_channel_ids\": [\n    456\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.flashcat.cloud/safari/automation/rule/update?app_key=")
  .header("Content-Type", "application/json")
  .body("{\n  \"rule_id\": \"arule_7NnLzY2Qp8xS4kUaV3mR6b\",\n  \"enabled\": true,\n  \"cron_expr\": \"15 9 * * 1\",\n  \"rotate_http_post_trigger_token\": true,\n  \"oncall_incident_trigger_enabled\": true,\n  \"oncall_incident_severities\": [\n    \"Critical\",\n    \"Warning\"\n  ],\n  \"oncall_incident_channel_ids\": [\n    456\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.flashcat.cloud/safari/automation/rule/update?app_key=")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"rule_id\": \"arule_7NnLzY2Qp8xS4kUaV3mR6b\",\n  \"enabled\": true,\n  \"cron_expr\": \"15 9 * * 1\",\n  \"rotate_http_post_trigger_token\": true,\n  \"oncall_incident_trigger_enabled\": true,\n  \"oncall_incident_severities\": [\n    \"Critical\",\n    \"Warning\"\n  ],\n  \"oncall_incident_channel_ids\": [\n    456\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "data": {
    "rule_id": "arule_7NnLzY2Qp8xS4kUaV3mR6b",
    "account_id": 10023,
    "team_id": 123,
    "owner_id": 80011,
    "name": "Weekly on-call review",
    "enabled": true,
    "run_scope": "team",
    "cron_expr": "0 9 * * 1",
    "timezone": "Asia/Shanghai",
    "prompt": "Summarize last week's alert noise and escalation load.",
    "environment_kind": "",
    "environment_id": "",
    "schedule_trigger_id": "atrig_6aKp3wT9mQ2xVc8bR1nY7z",
    "schedule_trigger_enabled": true,
    "http_post_trigger_id": "atrig_2bLq4xT8mP1sWd9cN3rF6y",
    "http_post_trigger_url": "/safari/automation/triggers/atrig_2bLq4xT8mP1sWd9cN3rF6y/fire",
    "http_post_trigger_enabled": true,
    "can_edit": true,
    "created_at": 1780367971228,
    "updated_at": 1780367971228,
    "http_post_token": "sat_yQ9p8V7n6M5k4J3h2G1f0E9d8C7b6A5z4Y3x2W1v0U",
    "schedule_next_fire_at_ms": 1780630800000,
    "oncall_incident_trigger_id": "atrig_9cVb2mN7qKs4dEa8T1rY5p",
    "oncall_incident_trigger_enabled": true,
    "oncall_incident_channel_ids": [
      456
    ],
    "oncall_incident_severities": [
      "Critical",
      "Warning"
    ]
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "InvalidParameter",
    "message": "The specified parameter skill_id is not valid."
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "Unauthorized",
    "message": "You are unauthorized."
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "AccessDenied",
    "message": "Access Denied."
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "RequestTooFrequently",
    "message": "Request too frequently."
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "InternalError",
    "message": "We encountered an internal error, and it has been reported. Please try again later."
  }
}

POST

safari

automation

rule

update

Update Automation rule

curl --request POST \
  --url 'https://api.flashcat.cloud/safari/automation/rule/update?app_key=' \
  --header 'Content-Type: application/json' \
  --data '
{
  "rule_id": "arule_7NnLzY2Qp8xS4kUaV3mR6b",
  "enabled": true,
  "cron_expr": "15 9 * * 1",
  "rotate_http_post_trigger_token": true,
  "oncall_incident_trigger_enabled": true,
  "oncall_incident_severities": [
    "Critical",
    "Warning"
  ],
  "oncall_incident_channel_ids": [
    456
  ]
}
'

import requests

url = "https://api.flashcat.cloud/safari/automation/rule/update?app_key="

payload = {
    "rule_id": "arule_7NnLzY2Qp8xS4kUaV3mR6b",
    "enabled": True,
    "cron_expr": "15 9 * * 1",
    "rotate_http_post_trigger_token": True,
    "oncall_incident_trigger_enabled": True,
    "oncall_incident_severities": ["Critical", "Warning"],
    "oncall_incident_channel_ids": [456]
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({
    rule_id: 'arule_7NnLzY2Qp8xS4kUaV3mR6b',
    enabled: true,
    cron_expr: '15 9 * * 1',
    rotate_http_post_trigger_token: true,
    oncall_incident_trigger_enabled: true,
    oncall_incident_severities: ['Critical', 'Warning'],
    oncall_incident_channel_ids: [456]
  })
};

fetch('https://api.flashcat.cloud/safari/automation/rule/update?app_key=', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.flashcat.cloud/safari/automation/rule/update?app_key=",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'rule_id' => 'arule_7NnLzY2Qp8xS4kUaV3mR6b',
    'enabled' => true,
    'cron_expr' => '15 9 * * 1',
    'rotate_http_post_trigger_token' => true,
    'oncall_incident_trigger_enabled' => true,
    'oncall_incident_severities' => [
        'Critical',
        'Warning'
    ],
    'oncall_incident_channel_ids' => [
        456
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.flashcat.cloud/safari/automation/rule/update?app_key="

	payload := strings.NewReader("{\n  \"rule_id\": \"arule_7NnLzY2Qp8xS4kUaV3mR6b\",\n  \"enabled\": true,\n  \"cron_expr\": \"15 9 * * 1\",\n  \"rotate_http_post_trigger_token\": true,\n  \"oncall_incident_trigger_enabled\": true,\n  \"oncall_incident_severities\": [\n    \"Critical\",\n    \"Warning\"\n  ],\n  \"oncall_incident_channel_ids\": [\n    456\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.flashcat.cloud/safari/automation/rule/update?app_key=")
  .header("Content-Type", "application/json")
  .body("{\n  \"rule_id\": \"arule_7NnLzY2Qp8xS4kUaV3mR6b\",\n  \"enabled\": true,\n  \"cron_expr\": \"15 9 * * 1\",\n  \"rotate_http_post_trigger_token\": true,\n  \"oncall_incident_trigger_enabled\": true,\n  \"oncall_incident_severities\": [\n    \"Critical\",\n    \"Warning\"\n  ],\n  \"oncall_incident_channel_ids\": [\n    456\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.flashcat.cloud/safari/automation/rule/update?app_key=")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"rule_id\": \"arule_7NnLzY2Qp8xS4kUaV3mR6b\",\n  \"enabled\": true,\n  \"cron_expr\": \"15 9 * * 1\",\n  \"rotate_http_post_trigger_token\": true,\n  \"oncall_incident_trigger_enabled\": true,\n  \"oncall_incident_severities\": [\n    \"Critical\",\n    \"Warning\"\n  ],\n  \"oncall_incident_channel_ids\": [\n    456\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "data": {
    "rule_id": "arule_7NnLzY2Qp8xS4kUaV3mR6b",
    "account_id": 10023,
    "team_id": 123,
    "owner_id": 80011,
    "name": "Weekly on-call review",
    "enabled": true,
    "run_scope": "team",
    "cron_expr": "0 9 * * 1",
    "timezone": "Asia/Shanghai",
    "prompt": "Summarize last week's alert noise and escalation load.",
    "environment_kind": "",
    "environment_id": "",
    "schedule_trigger_id": "atrig_6aKp3wT9mQ2xVc8bR1nY7z",
    "schedule_trigger_enabled": true,
    "http_post_trigger_id": "atrig_2bLq4xT8mP1sWd9cN3rF6y",
    "http_post_trigger_url": "/safari/automation/triggers/atrig_2bLq4xT8mP1sWd9cN3rF6y/fire",
    "http_post_trigger_enabled": true,
    "can_edit": true,
    "created_at": 1780367971228,
    "updated_at": 1780367971228,
    "http_post_token": "sat_yQ9p8V7n6M5k4J3h2G1f0E9d8C7b6A5z4Y3x2W1v0U",
    "schedule_next_fire_at_ms": 1780630800000,
    "oncall_incident_trigger_id": "atrig_9cVb2mN7qKs4dEa8T1rY5p",
    "oncall_incident_trigger_enabled": true,
    "oncall_incident_channel_ids": [
      456
    ],
    "oncall_incident_severities": [
      "Critical",
      "Warning"
    ]
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "InvalidParameter",
    "message": "The specified parameter skill_id is not valid."
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "Unauthorized",
    "message": "You are unauthorized."
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "AccessDenied",
    "message": "Access Denied."
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "RequestTooFrequently",
    "message": "Request too frequently."
  }
}

{
  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
  "error": {
    "code": "InternalError",
    "message": "We encountered an internal error, and it has been reported. Please try again later."
  }
}

Restrictions

Aspect	Value
Rate limits	300 requests/minute; 20 requests/second per account
Permissions	Valid `app_key`; management operations require the caller to manage the target rule

Usage

Omitted or null fields are left unchanged; team_id cannot be changed from its current value.
cron_expr and timezone can be updated independently — sending only one keeps the other at its current stored value.
rotate_http_post_trigger_token=true issues a fresh webhook token, returned only in this response.
To trigger from On-call incidents, send oncall_incident_trigger_enabled, oncall_incident_channel_ids, and oncall_incident_severities; matching events run with trigger_kind=oncall_incident.
Every call is recorded in the account audit log.

Authorizations

app_key

string

query

required

App key issued from the Flashduty console. Required on every public API call. Keep it secret — it grants the same access as the owning account.

Body

application/json

Update an Automation rule. Omit or send null on a field to leave it unchanged.

rule_id

string

required

Target rule ID.

name

string | null

New rule name.

Maximum string length: 255

team_id

integer<int64> | null

Only the current value is accepted; personal/team scope is immutable after creation.

Required range: x >= 0

enabled

boolean | null

Whether the rule is enabled.

cron_expr

string | null

Run cadence. Supports 4 fields (hour day month weekday, minute defaults to 0) and 5 fields (minute hour day month weekday). The minute must be one fixed integer; 6-field seconds are not supported.

Example:

"15 9 * * *"

timezone

string | null

New IANA timezone for evaluating cron_expr. Omit or send null to leave the current timezone unchanged.

schedule_trigger_enabled

boolean | null

Whether the schedule trigger is enabled.

prompt

string | null

New task prompt.

environment_kind

enum<string> | null

Runtime environment kind. Omit or send an empty value for automatic selection.

Available options:

cloud,

byoc

environment_id

string | null

BYOC Runner ID.

http_post_trigger_enabled

boolean | null

Whether the HTTP POST trigger is enabled. Sending true creates one when missing.

oncall_incident_trigger_enabled

boolean | null

Whether the On-call incident trigger is enabled.

oncall_incident_channel_ids

integer<int64>[]

On-call integration IDs to watch. Creating or enabling this trigger requires at least one valid ID.

Required range: x >= 1

oncall_incident_severities

enum<string>[]

Incident severities to watch. Supported values are Critical, Warning, and Info; creating or enabling this trigger requires at least one value.

Available options:

Critical,

Warning,

Info

rotate_http_post_trigger_token

boolean

Whether to rotate the HTTP POST trigger token. The new token is returned only in this response.

Response

Success

Standard response envelope used by every Flashduty public API. On success data contains the endpoint-specific payload and error is absent. On failure error is present and data is absent. request_id is always present and is also mirrored in the Flashcat-Request-Id response header.

request_id

string

required

Unique ID for this request. Mirrored in the Flashcat-Request-Id header. Include it when reporting issues.

Example:

"01HK8XQE3Z7JM2NTFQ5YJ8P9R4"

error

object

Error payload inside the response envelope. Present only on non-2xx responses.

Show child attributes

data

object

Automation rule.

Show child attributes

Get Automation rule Delete Automation rule

Developer Guide

On-call

Monitors

RUM

AI SRE

Platform

Update Automation rule

Restrictions

Usage

Authorizations

Body

Response

​Restrictions

​Usage

Authorizations

Body

Response

Restrictions

Usage