Tools Catalog

Overview

IncidentFox provides 300+ built-in tools across 20+ categories. These tools enable agents to interact with your infrastructure, observability stack, databases, and collaboration platforms.

Tool Categories

Category	Tools	Description
Kubernetes	9	Pod logs, deployments, events, resource usage
AWS	8+	EC2, Lambda, RDS, ECS, CloudWatch
Docker	15	Container logs, stats, exec, events, inspect
Observability	15+	Grafana, Datadog, Prometheus, Coralogix, New Relic
Log Analysis	7	Statistics, sampling, pattern search, anomaly detection
Anomaly Detection	8	Z-score, Prophet, correlation, change points
GitHub	16	Code search, PRs, issues, Actions, commits
Git	12	Diff, log, blame, branches, tags
Database	70+	MySQL, PostgreSQL, Snowflake, BigQuery
PagerDuty	12	Incidents, escalations, MTTR
Sentry	4	Issues, project stats, releases
Slack	5	Search, channel history, post messages
Custom MCP	Unlimited	Add your own tools via MCP (100+ compatible servers)

Tool Distribution by Runtime

IncidentFox uses dual agent runtimes, each with access to different tool sets:

OpenAI SDK Agent (Production Automation)

Agent	Tools	Purpose
Planner	Orchestration	Coordinates specialists, creates investigation plans
K8s Agent	9	Kubernetes troubleshooting
AWS Agent	8+	AWS resource debugging
Metrics Agent	22+	Anomaly detection, correlation, forecasting
Coding Agent	15+	Code analysis, CI/CD
Investigation Agent	300+	All tools (dynamic loading)

Claude SDK SRE Agent (Interactive Debugging)

Feature	Description
K8s Sandbox	Isolated Kubernetes environment with gVisor
All Tools	Full access to 300+ tools
Interactive	Supports interrupt/resume during investigations
Streaming	Real-time response streaming

How Tools Work

Tool Loading

Tools are loaded dynamically based on:

Integration Installed - Is the package available?
Credentials Configured - Are API keys set?
Team Settings - Is the tool enabled?

Example log output:

slack_tools_loaded: count=4
github_tools_loaded: count=16
kubernetes_tools_loaded: count=9
aws_tools_loaded: count=8

Configuring Tools

Enable/Disable

{
  "tools": {
    "kubernetes": {
      "enabled": true
    },
    "docker_exec": {
      "enabled": false
    }
  }
}

Per-Agent Configuration

{
  "agents": {
    "investigation_agent": {
      "disable_default_tools": ["shell", "docker_exec"],
      "enable_extra_tools": ["custom_runbook_search"]
    }
  }
}

Tool Metrics

All tools track:

tool_calls_total{tool_name, status} - Call count
tool_duration_seconds{tool_name} - Execution time

View in Prometheus or the Web UI under Agent Runs.

Common Tools

Most Used for Investigations

Tool	Category	Description
`get_pod_logs`	Kubernetes	Fetch container logs
`get_cloudwatch_logs`	AWS	Query CloudWatch logs
`search_logs`	Log Analysis	Universal log search across backends
`query_prometheus`	Observability	Query Grafana/Prometheus
`detect_anomalies`	Anomaly Detection	Find unusual patterns in metrics
`search_github_code`	GitHub	Search across repos

Most Used for CI/CD

Tool	Category	Description
`get_github_actions_logs`	GitHub	CI build logs
`describe_codepipeline`	AWS	Pipeline status
`read_github_file`	GitHub	Read code files
`git_diff`	Git	Show changes
`correlate_with_deployment`	Git	Link issues to recent deploys

Most Used for Log Analysis

Tool	Category	Description
`log_get_statistics`	Log Analysis	Get log volume and error rate stats
`log_sample`	Log Analysis	Sample logs for pattern discovery
`log_search_pattern`	Log Analysis	Regex pattern search
`log_around_timestamp`	Log Analysis	Get context around an event
`log_extract_signatures`	Log Analysis	Identify recurring error patterns

Most Used for Anomaly Detection

Tool	Category	Description
`detect_anomalies`	Anomaly Detection	Z-score statistical detection
`prophet_detect_anomalies`	Anomaly Detection	Seasonal anomaly detection
`find_change_point`	Anomaly Detection	Identify when issues started
`correlate_metrics`	Anomaly Detection	Find relationships between metrics
`forecast_metric`	Anomaly Detection	Capacity planning forecasts

Next Steps

Kubernetes Tools

K8s troubleshooting tools

AWS Tools

AWS infrastructure tools

Observability Tools

Metrics and logging tools

Custom MCP Tools

Add your own tools

Getting Started

Core Concepts

Configuration

Integrations

Data Sources

Tools Catalog

Overview

Tool Categories

Tool Distribution by Runtime

OpenAI SDK Agent (Production Automation)

Claude SDK SRE Agent (Interactive Debugging)

How Tools Work

Tool Loading

Configuring Tools

Enable/Disable

Per-Agent Configuration

Tool Metrics

Common Tools

Most Used for Investigations

Most Used for CI/CD

Most Used for Log Analysis

Most Used for Anomaly Detection

Next Steps

Kubernetes Tools

AWS Tools

Observability Tools

Custom MCP Tools

​Overview

​Tool Categories

​Tool Distribution by Runtime

​OpenAI SDK Agent (Production Automation)

​Claude SDK SRE Agent (Interactive Debugging)

​How Tools Work

​Tool Loading

​Configuring Tools

​Enable/Disable

​Per-Agent Configuration

​Tool Metrics

​Common Tools

​Most Used for Investigations

​Most Used for CI/CD

​Most Used for Log Analysis

​Most Used for Anomaly Detection

​Next Steps

Kubernetes Tools

AWS Tools

Observability Tools

Custom MCP Tools

Overview

Tool Categories

Tool Distribution by Runtime

OpenAI SDK Agent (Production Automation)

Claude SDK SRE Agent (Interactive Debugging)

How Tools Work

Tool Loading

Configuring Tools

Enable/Disable

Per-Agent Configuration

Tool Metrics

Common Tools

Most Used for Investigations

Most Used for CI/CD

Most Used for Log Analysis

Most Used for Anomaly Detection

Next Steps