Skip to main content

API 2.0.0: active contract required

POST /incidents requires a contract with status active. Status approved is insufficient. Without an active contract, the request fails with HTTP 422 and EMPLOYEE_HAS_NO_ACTIVE_CONTRACT, including when dryRun=true; no incident is created. Resolve the contract state through the responsible business process before submitting a new request with a new X-Request-ID. Existing incidents remain editable under their existing lifecycle and field restrictions. This new prerequisite applies to creation. The employee activation prerequisite remains documented separately; no precedence between validation errors is specified. The Incidents API supports reporting employee incidents, reading lifecycle state, updating documented editable fields, and uploading permitted attachments.

Types and statuses

The public contract exposes status for observation but does not expose a direct arbitrary status field in the patch schema.

Status responsibility

The public contract does not expose a generic status property in IncidentPatch. Synchronize status by reading the incident.

Incident swimlane

Create an incident

The referenced employee must be accessible in the selected tenant context and must already be activated. The API assigns reporter metadata and initial lifecycle state. If the employee exists but has not completed activation, POST /incidents may return 422 EMPLOYEE_NOT_ACTIVATED:
For EMPLOYEE_NOT_ACTIVATED, complete activation before retrying. For EMPLOYEE_HAS_NO_ACTIVE_CONTRACT, resolve the active-contract prerequisite first. Before submitting a new create request, ensure both prerequisites are satisfied; do not assume a validation error precedence.

Update supported fields

The patch contract exposes type, dateFrom, and dateUntil. Setting dateUntil closes or schedules completion of an open temporary incident according to server rules.
Incidents cannot be reopened through this endpoint.

Attachment conditions

The 5 MiB limit applies to the encoded multipart request, including boundaries and headers.

Upload flow

Data minimization

Upload only documents necessary for the incident process. Do not add unrelated personal data, and protect local source files, retry queues, and downloaded evidence according to the customer’s retention and access rules.

Common failures

Last modified on October 20, 2026