loading…
Investigate Security Risks in the CI/CD Pipeline
/api/mcp/srv-devsecops-securityMCP enable + token are only for calling from an external client — the playground below needs neither.
Grant security exception or risk acceptance for specific findings with approval workflow and expiration tracking
{
"type": "object",
"required": [
"finding_ids",
"exception_type",
"justification",
"approver_id"
],
"properties": {
"approver_id": {
"type": "string"
},
"finding_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"justification": {
"type": "string"
},
"exception_type": {
"enum": [
"risk_accepted",
"false_positive",
"compensating_control",
"temporary_waiver"
],
"type": "string"
},
"expiration_date": {
"type": "string",
"format": "date"
},
"compensating_controls": {
"type": "array",
"items": {
"type": "string"
}
}
}
}Create compliance assessment report against specified frameworks with evidence collection and gap analysis
{
"type": "object",
"required": [
"framework",
"scope"
],
"properties": {
"scope": {
"type": "object",
"properties": {
"environment": {
"enum": [
"dev",
"staging",
"prod",
"all"
],
"type": "string"
},
"repository_ids": {
"type": "array",
"items": {
"type": "string"
}
}
}
},
"framework": {
"enum": [
"owasp_asvs",
"nist_ssdf",
"pci_dss",
"sox",
"iso27001",
"cis"
],
"type": "string"
},
"time_period": {
"enum": [
"current",
"30d",
"90d",
"annual"
],
"type": "string"
},
"report_format": {
"enum": [
"pdf",
"html",
"json",
"csv"
],
"type": "string"
},
"include_evidence": {
"type": "boolean",
"default": true
}
}
}Retrieve detailed scan report by scan ID including all findings, metrics, and remediation recommendations
{
"type": "object",
"required": [
"scan_id"
],
"properties": {
"format": {
"enum": [
"json",
"sarif",
"cyclonedx",
"spdx"
],
"type": "string",
"default": "json"
},
"scan_id": {
"type": "string"
},
"include_raw_results": {
"type": "boolean",
"default": false
}
}
}Enumerate CI/CD pipelines with security gate status, policy violations, and scan integration details
{
"type": "object",
"required": [],
"properties": {
"repository_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"security_gates": {
"type": "array",
"items": {
"enum": [
"sast",
"dast",
"sca",
"secrets",
"policy",
"approval"
],
"type": "string"
}
},
"include_metrics": {
"type": "boolean",
"default": false
},
"pipeline_status": {
"type": "array",
"items": {
"enum": [
"passing",
"failing",
"blocked",
"disabled"
],
"type": "string"
}
}
}
}Retrieve security policies and compliance rules configured across repositories, pipelines, and infrastructure with enforcement status
{
"type": "object",
"required": [],
"properties": {
"framework": {
"type": "array",
"items": {
"enum": [
"owasp",
"nist",
"pci_dss",
"sox",
"hipaa",
"gdpr"
],
"type": "string"
}
},
"policy_types": {
"type": "array",
"items": {
"enum": [
"security",
"compliance",
"quality",
"license",
"secrets"
],
"type": "string"
}
},
"repository_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"enforcement_level": {
"type": "array",
"items": {
"enum": [
"blocking",
"warning",
"monitoring",
"disabled"
],
"type": "string"
}
}
}
}Search and filter security findings across all scans with support for vulnerability details, CVSS scores, and remediation status
{
"type": "object",
"required": [
"query"
],
"properties": {
"limit": {
"type": "integer",
"maximum": 1000,
"minimum": 1
},
"query": {
"type": "string"
},
"status": {
"type": "array",
"items": {
"enum": [
"open",
"triaged",
"false_positive",
"accepted_risk",
"fixed",
"verified"
],
"type": "string"
}
},
"severity": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low",
"info"
],
"type": "string"
}
},
"time_range": {
"enum": [
"1h",
"24h",
"7d",
"30d",
"90d",
"custom"
],
"type": "string"
},
"finding_types": {
"type": "array",
"items": {
"enum": [
"vulnerability",
"secret",
"misconfiguration",
"policy_violation",
"compliance"
],
"type": "string"
}
},
"repository_ids": {
"type": "array",
"items": {
"type": "string"
}
}
}
}Search for exposed secrets, API keys, and credentials across repositories with pattern matching and entropy analysis
{
"type": "object",
"required": [],
"properties": {
"secret_types": {
"type": "array",
"items": {
"enum": [
"api_key",
"password",
"certificate",
"token",
"connection_string",
"private_key"
],
"type": "string"
}
},
"exclude_paths": {
"type": "array",
"items": {
"type": "string"
}
},
"query_patterns": {
"type": "array",
"items": {
"type": "string"
}
},
"repository_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"include_historical": {
"type": "boolean",
"default": false
},
"confidence_threshold": {
"type": "number",
"maximum": 1,
"minimum": 0
}
}
}Initiate security vulnerability scan across specified repositories, containers, or infrastructure components with configurable scan types and severity thresholds
{
"type": "object",
"required": [
"target_type",
"target_ids",
"scan_types"
],
"properties": {
"scan_types": {
"type": "array",
"items": {
"enum": [
"sast",
"dast",
"sca",
"secrets",
"iac",
"container"
],
"type": "string"
}
},
"target_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"target_type": {
"enum": [
"repository",
"container",
"infrastructure",
"pipeline"
],
"type": "string"
},
"exclude_patterns": {
"type": "array",
"items": {
"type": "string"
}
},
"severity_threshold": {
"enum": [
"critical",
"high",
"medium",
"low",
"info"
],
"type": "string"
}
}
}Update finding status, assign ownership, add comments, and set remediation priority for vulnerability management workflow
{
"type": "object",
"required": [
"finding_id",
"status"
],
"properties": {
"status": {
"enum": [
"open",
"triaged",
"false_positive",
"accepted_risk",
"fixed",
"verified"
],
"type": "string"
},
"comments": {
"type": "string"
},
"due_date": {
"type": "string",
"format": "date"
},
"priority": {
"enum": [
"p0",
"p1",
"p2",
"p3",
"p4"
],
"type": "string"
},
"finding_id": {
"type": "string"
},
"assignee_id": {
"type": "string"
},
"justification": {
"type": "string"
}
}
}