CyberCLI
← All notification channels

Opsgenie

Business BYO Paging Live · v1

Escalation and on-call — page the human who's actually on rotation.

Atlassian on-call paging. Wake the right person on a real incident.

Where to get it

An Opsgenie account + an API integration key.

Install / what you need

No install — create an API integration in Opsgenie and copy its key.

How to connect

  1. 1 Create an API integration in Opsgenie and copy the API key.
  2. 2 Dashboard → Notifications → Add destination → opsgenie, paste the API key.
  3. 3 Send test.

When you'd use it

24/7 on-call escalation.
Severity-gated paging.
Teams standardized on Atlassian.

What Herald sends through this channel

3 setup fields

Herald hands every alert to the OpsgenieAdapter as a DispatchPlan. The fields below are what the dashboard form asks for; the sample is the plan the adapter receives. The adapter renders it into the channel-native shape (Discord embeds, Teams MessageCards, PagerDuty Events-API payloads, TwiML, JSON POST bodies) on the way out — that wire transcript varies per channel.

Setup form fields

field type required description / default
api_key string required Opsgenie API integration key (Settings → API key management)
region string optional Opsgenie data region: 'us' (api.opsgenie.com) or 'eu' (api.eu.opsgenie.com) · default: "us"
timeout_seconds number optional no description · default: 10

Sample DispatchPlan (input to the adapter)

{
  "decision_id": "tdc-2026-06-20-abc12",
  "channel": "<channel-type>",
  "recipient": {
    "recipient_id": "soc-oncall",
    "display_name": "SOC on-call",
    "addresses": [
      {
        "channel": "<channel-type>",
        "address": "<destination>",
        "min_defcon": 5
      }
    ]
  },
  "urgency": "high",
  "retry_policy": {
    "max_attempts": 3,
    "initial_backoff_seconds": 5
  },
  "subject": "Suspicious login on CEO-LAPTOP",
  "body": "Warden flagged a PowerShell child of WINWORD.EXE. The encoded command resolved to a base64-wrapped Invoke-WebRequest to a newly-registered domain. Trust ladder: L3.",
  "approval_link": "https://app.cybercli.local/approve/abc12",
  "incident_ref": "case-2026-0142",
  "signal_id": "sig-2026-06-20-9f3"
}

Sovereignty: byo_external · Min tier (BYO): pro · Atlassian Opsgenie Alert API v2; enterprise on-call escalation (Pro+).

Sovereignty

Alerts go to Opsgenie's cloud for routing; the API key is the only secret, vault-stored.

Who notifies through it

Herald — the Guild's voice role — routes alerts, daily digests, and AI verdicts here, on a per-CYCON-state matrix you control. CYCON 1/2 alerts repeat until an operator acks.

The Guild →

Other Paging channels

Go deeper