loading…
Investigate Exposed Credentials and Secrets
/api/mcp/srv-secrets-securityMCP enable + token are only for calling from an external client — the playground below needs neither.
Generate compliance report for secrets management practices across specified scope and frameworks
{
"type": "object",
"required": [
"report_type",
"compliance_frameworks"
],
"properties": {
"scope": {
"type": "array",
"items": {
"type": "string"
}
},
"format": {
"enum": [
"pdf",
"json",
"csv"
],
"type": "string"
},
"end_date": {
"type": "string",
"format": "date"
},
"start_date": {
"type": "string",
"format": "date"
},
"time_range": {
"enum": [
"last_30_days",
"last_90_days",
"last_year",
"custom"
],
"type": "string"
},
"report_type": {
"enum": [
"executive_summary",
"detailed_findings",
"remediation_plan",
"trend_analysis"
],
"type": "string"
},
"compliance_frameworks": {
"type": "array",
"items": {
"enum": [
"pci_dss",
"sox",
"hipaa",
"gdpr",
"iso27001"
],
"type": "string"
}
}
}
}Retrieve detailed information about a specific secret detection including file location, matched pattern, and remediation guidance
{
"type": "object",
"required": [
"detection_id"
],
"properties": {
"detection_id": {
"type": "string"
},
"include_context": {
"type": "boolean",
"default": true
},
"include_remediation": {
"type": "boolean",
"default": true
}
}
}List secret detections with filtering by severity, status, repository, detection type, and time range
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"offset": {
"type": "integer",
"default": 0
},
"status": {
"enum": [
"open",
"investigating",
"resolved",
"false_positive",
"accepted_risk"
],
"type": "string"
},
"end_time": {
"type": "string",
"format": "date-time"
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"start_time": {
"type": "string",
"format": "date-time"
},
"repository_id": {
"type": "string"
},
"detection_type": {
"enum": [
"api_key",
"password",
"certificate",
"token",
"connection_string",
"private_key"
],
"type": "string"
}
}
}List policy violations for secrets management including expired credentials, weak entropy, and compliance failures
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"start_time": {
"type": "string",
"format": "date-time"
},
"environment": {
"enum": [
"production",
"staging",
"development",
"test"
],
"type": "string"
},
"policy_type": {
"enum": [
"expiration",
"entropy",
"compliance",
"access_control"
],
"type": "string"
},
"compliance_framework": {
"enum": [
"pci_dss",
"sox",
"hipaa",
"gdpr"
],
"type": "string"
}
}
}Monitor external sources and dark web for exposed organizational secrets and credentials
{
"type": "object",
"required": [
"monitoring_scope"
],
"properties": {
"domains": {
"type": "array",
"items": {
"type": "string"
}
},
"keywords": {
"type": "array",
"items": {
"type": "string"
}
},
"alert_threshold": {
"enum": [
"immediate",
"daily",
"weekly"
],
"type": "string"
},
"monitoring_scope": {
"type": "array",
"items": {
"enum": [
"github",
"pastebin",
"dark_web",
"public_repos",
"social_media"
],
"type": "string"
}
},
"include_historical": {
"type": "boolean",
"default": false
}
}
}Initiate automated rotation of a managed credential with configurable rotation policy and notification settings
{
"type": "object",
"required": [
"credential_id",
"rotation_type"
],
"properties": {
"notify_teams": {
"type": "array",
"items": {
"type": "string"
}
},
"credential_id": {
"type": "string"
},
"rotation_type": {
"enum": [
"immediate",
"scheduled",
"emergency"
],
"type": "string"
},
"rollback_window": {
"type": "integer",
"default": 24
},
"validation_required": {
"type": "boolean",
"default": true
}
}
}Scan a code repository for exposed secrets, API keys, passwords, and other sensitive credentials using configurable detection rules
{
"type": "object",
"required": [
"repository_url"
],
"properties": {
"branch": {
"type": "string",
"default": "main"
},
"rule_sets": {
"type": "array",
"items": {
"enum": [
"default",
"pci",
"hipaa",
"custom"
],
"type": "string"
}
},
"scan_type": {
"enum": [
"full",
"incremental",
"commit_range"
],
"type": "string"
},
"commit_hash": {
"type": "string"
},
"exclude_paths": {
"type": "array",
"items": {
"type": "string"
}
},
"repository_id": {
"type": "string"
},
"repository_url": {
"type": "string"
}
}
}Search the secrets vault for stored credentials by name, environment, application, or metadata tags
{
"type": "object",
"required": [],
"properties": {
"tags": {
"type": "array",
"items": {
"type": "string"
}
},
"limit": {
"type": "integer",
"default": 50
},
"query": {
"type": "string"
},
"application": {
"type": "string"
},
"environment": {
"enum": [
"production",
"staging",
"development",
"test"
],
"type": "string"
},
"secret_type": {
"enum": [
"api_key",
"database_password",
"certificate",
"token",
"ssh_key"
],
"type": "string"
}
}
}Update the triage status and assignment of a secret detection with investigator notes and remediation actions
{
"type": "object",
"required": [
"detection_id",
"status"
],
"properties": {
"notes": {
"type": "string"
},
"status": {
"enum": [
"open",
"investigating",
"resolved",
"false_positive",
"accepted_risk"
],
"type": "string"
},
"assignee": {
"type": "string"
},
"detection_id": {
"type": "string"
},
"remediation_action": {
"enum": [
"rotate_secret",
"revoke_access",
"patch_code",
"monitor",
"none"
],
"type": "string"
},
"risk_justification": {
"type": "string"
}
}
}