X-Rollbar-Access-Token header; the plugin never uses Authorization or the query string. Things to know before you call:
- Every response carries
err.err: 0is success and anything else is a failure — and the HTTP status is not a reliable proxy for it. The live “access token required” response is a401with{ "err": 1, "message": "access token required" }, while a rejected item update can be a200witherr: 1. The plugin readserrand turns a non-zero value into an error even on a 200. - Tokens are scoped, and no single token covers every operation. A project token with
readandwritecovers items, occurrences, events, comments (reading) and deploy listing for its own project; Rollbar will not give one token bothwriteandpost_server_item.deploys.createneeds a project token withpost_server_item.projects.listneeds an account or personal access token.itemComments.createneeds a personal access token withwrite, and posts as that user. With an account or personal token, passproject_idon the item and occurrence operations, or Rollbar answers403“Requires project access”. A401means the token is missing or malformed; a403means it is valid but lacks the scope or project. instancesis the API’s word for occurrences. Rollbar lists occurrences at/api/1/instancesand returns them under aninstanceskey; the plugin exposes them asoccurrencesso the name matches the concept.- Repeated filters.
levelandproject_idsare repeated query parameters, soitems.listtakes arrays and sends each value under the same key. Rollbar’s documentedidsfilter is not offered: in a live check it ignored one id and answered502to several. - Item ids.
items.listreturns eachidas a numeric string whileitems.getreturns a number; the plugin returns a number from both. - Paging is a page number. Lists return 20 per page by default (
items.list100) and the item, comment and event lists reporttotal_countbeside it, which isnullwhen a project has more than 100,000 unique items. A snooze needs a duration, soitems.updaterejectssnooze_enabledwithoutsnooze_expiration_in_seconds. - Timestamps are unix seconds, on requests and responses alike.
- Retries. A
429is the token’s rate limit. Rollbar sends noRetry-After; the plugin waits for the time inX-Rate-Limit-Remaining-Seconds/X-Rate-Limit-Resetand backs off exponentially when neither is present. A5xxis retried only for a read; a body-level failure has no status and is never retried. - Deploys.
deploys.createanswers{ "data": { "deploy_id": … } }, the one route withouterr/result; the plugin returnsdeploy_id.deploys.listhas no environment filter (Rollbar ignores one).
- 11 typed API operations
Setup
1
Install
2
Add the plugin
corsair.ts
multiTenancy: true, scope calls with corsair.withTenant(id). See Quick start for KEK + Hub keys, and Multi-tenancy for account isolation.3
Choose authentication
- API Key (Recommended)
No setup required yet. When you make your first request as a tenant, Corsair prompts for the API key.More: API Key
4
Connect a tenant
Mint a connect link and send the tenant to it. Hub hosts the page and delivers the result to your app — see Connect / OAuth.
Example API calls
List errors in productionWhat’s next
API reference
Every
rollbar.api.* operation with input and output types.Connect / OAuth
createLink, Hub delivery, and tenant connect flows.
Use with agents
Expose this plugin’s operations as MCP tools.