Command palette search

curl "http://localhost:5080/api/v1/web/search?q=app&types=stream&limit=5" \
  -H "authorization: Bearer $MS_JWT"

{
  "items": [
    { "kind": "stream", "id": "3KDXoznFWyKPsch4ETi37U3GdxM", "label": "app", "subtitle": "builtin.logs" },
    { "kind": "stream", "id": "3JtcZGko1Q5czEBK9nBJjiFxpo1", "label": "app_logs", "subtitle": "builtin.logs" }
  ]
}

curl "http://localhost:5080/api/v1/web/search?q=app&types=stream&limit=5" \
  -H "authorization: Bearer $MS_JWT"

{
  "items": [
    { "kind": "stream", "id": "3KDXoznFWyKPsch4ETi37U3GdxM", "label": "app", "subtitle": "builtin.logs" },
    { "kind": "stream", "id": "3JtcZGko1Q5czEBK9nBJjiFxpo1", "label": "app_logs", "subtitle": "builtin.logs" }
  ]
}

GET /api/v1/web/search

Powers the ⌘K command palette. The call searches six kinds of entities of the organization by fuzzy name match and returns the best matches first. The call requires streams.query, or sys.telemetry.read in the system scope. Query parameters

Param	Type	Required	Notes
`q`	string	Yes	The search text, up to 256 characters. Matching uses PostgreSQL trigram similarity, so a very short text, such as one letter, rarely matches. An empty `q` answers an empty list.
`types`	string	No	A comma-separated subset of `stream`, `dashboard`, `saved_view`, `alert`, `incident`, and `service`. Omit it to search every kind. An unknown value matches nothing.
`limit`	integer	No	Default `20`. The value is clamped to 1 through 50.

A q that contains only spaces, combined with types=stream, lists streams alphabetically instead of searching. Each hit names the entity with these fields:

`kind`	`id`	`label`	`subtitle`
`stream`	Stream identifier	Stream name	Stream type in its internal form, such as `builtin.logs`.
`dashboard`	Dashboard identifier	Title	Dashboard `uid`.
`saved_view`	Saved view identifier	Name	Query language.
`alert`	Rule identifier	Rule name	`enabled` or `disabled`.
`incident`	Incident identifier	Incident fingerprint	Incident status.
`service`	Edge identifier	Service name from the service graph	None.

curl "http://localhost:5080/api/v1/web/search?q=app&types=stream&limit=5" \
  -H "authorization: Bearer $MS_JWT"

{
  "items": [
    { "kind": "stream", "id": "3KDXoznFWyKPsch4ETi37U3GdxM", "label": "app", "subtitle": "builtin.logs" },
    { "kind": "stream", "id": "3JtcZGko1Q5czEBK9nBJjiFxpo1", "label": "app_logs", "subtitle": "builtin.logs" }
  ]
}

Errors

Status	Cause
`400`	`q` is missing (plain text), or longer than 256 characters (`invalid_argument`).
`403`	The token lacks `streams.query`.

Last modified on October 9, 2026

Overview

Authentication

Intake

Query

APM

RUM

Streams

Alerting

Correlation & Web

Platform & Administration