Push with native repeat-until-ack on emergency priority.
Where to get it
A Pushover account (one-time app fee) + an application token.
Install / what you need
No install. Register an application at pushover.net → copy the API token + your user key.
How to connect
- 1 Create an application at pushover.net → copy the API token.
- 2 Open the dashboard's Notifications panel → Add destination → choose pushover, fill in the token + user key.
- 3 Hit Send test on the destination card — emergency priority repeats until acked.
When you'd use it
What Herald sends through this channel
2 setup fields · ack-capable
Herald hands every alert to the
PushoverAdapter
as a DispatchPlan. The fields
below are what the dashboard form asks for; the sample is the plan the adapter receives.
The adapter renders it into the channel-native shape (Discord embeds, Teams MessageCards,
PagerDuty Events-API payloads, TwiML, JSON POST bodies) on the way out — that wire transcript varies per channel.
Setup form fields
| field | type | required | description / default |
|---|---|---|---|
| app_token_secret_ref | string | required | Vault ref for Pushover app token |
| timeout_seconds | number | optional | no description · default: 10 |
Sample DispatchPlan (input to the adapter)
{
"decision_id": "tdc-2026-06-20-abc12",
"channel": "<channel-type>",
"recipient": {
"recipient_id": "soc-oncall",
"display_name": "SOC on-call",
"addresses": [
{
"channel": "<channel-type>",
"address": "<destination>",
"min_defcon": 5
}
]
},
"urgency": "high",
"retry_policy": {
"max_attempts": 3,
"initial_backoff_seconds": 5
},
"subject": "Suspicious login on CEO-LAPTOP",
"body": "Warden flagged a PowerShell child of WINWORD.EXE. The encoded command resolved to a base64-wrapped Invoke-WebRequest to a newly-registered domain. Trust ladder: L3.",
"approval_link": "https://app.cybercli.local/approve/abc12",
"incident_ref": "case-2026-0142",
"signal_id": "sig-2026-06-20-9f3"
} Sovereignty: byo_external · Min tier (BYO): pro · Pushover API; priority +2 emergencies repeat-until-ack natively.
Push routes through Pushover's service; tokens are vault-stored. (Self-host with ntfy/Gotify for full local.)
Herald — the Guild's voice role — routes alerts, daily digests, and AI verdicts here, on a per-CYCON-state matrix you control. CYCON 1/2 alerts repeat until an operator acks.
The Guild →