loading…
Investigate Critical Application Security Findings
/api/mcp/srv-application-securityMCP enable + token are only for calling from an external client — the playground below needs neither.
Define security scanning policies with vulnerability thresholds, scan schedules, and enforcement rules for application security governance
{
"type": "object",
"required": [
"name",
"scan_types"
],
"properties": {
"name": {
"type": "string"
},
"schedule": {
"type": "object",
"properties": {
"time": {
"type": "string",
"pattern": "^([0-1]?[0-9]|2[0-3]):[0-5][0-9]$"
},
"frequency": {
"enum": [
"daily",
"weekly",
"monthly",
"on_commit",
"on_deploy"
],
"type": "string"
}
}
},
"scan_types": {
"type": "array",
"items": {
"enum": [
"sast",
"dast",
"iast",
"sca",
"secrets",
"container"
],
"type": "string"
}
},
"thresholds": {
"type": "object",
"properties": {
"high_max": {
"type": "integer",
"minimum": 0
},
"critical_max": {
"type": "integer",
"minimum": 0
},
"block_deployment": {
"type": "boolean",
"default": false
}
}
},
"description": {
"type": "string"
},
"application_tags": {
"type": "array",
"items": {
"type": "string"
}
},
"notification_channels": {
"type": "array",
"items": {
"type": "string"
}
}
}
}Generate compliance assessment report for specified applications against security frameworks like PCI DSS, SOX, or OWASP standards
{
"type": "object",
"required": [
"application_ids",
"framework"
],
"properties": {
"framework": {
"enum": [
"pci_dss",
"sox",
"hipaa",
"owasp_top10",
"owasp_asvs",
"nist_ssdf"
],
"type": "string"
},
"time_range": {
"enum": [
"last_30_days",
"last_90_days",
"last_year",
"all_time"
],
"type": "string",
"default": "last_90_days"
},
"report_format": {
"enum": [
"pdf",
"csv",
"json",
"html"
],
"type": "string",
"default": "pdf"
},
"application_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"include_remediation": {
"type": "boolean",
"default": true
}
}
}Retrieve detailed scan results including vulnerability findings, scan metrics, code quality issues, and dependency analysis for a completed security scan
{
"type": "object",
"required": [
"scan_id"
],
"properties": {
"format": {
"enum": [
"summary",
"detailed",
"sarif"
],
"type": "string",
"default": "detailed"
},
"scan_id": {
"type": "string"
},
"include_raw_output": {
"type": "boolean",
"default": false
},
"vulnerability_severity_filter": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low",
"info"
],
"type": "string"
}
}
}
}Retrieve detailed vulnerability information including CVSS vector, CWE mapping, proof of concept, remediation guidance, and affected code locations
{
"type": "object",
"required": [
"vulnerability_id"
],
"properties": {
"include_evidence": {
"type": "boolean",
"default": true
},
"vulnerability_id": {
"type": "string"
},
"include_remediation": {
"type": "boolean",
"default": true
}
}
}Retrieve applications in the portfolio with filtering by business unit, technology stack, risk score, and compliance requirements
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 50,
"maximum": 500
},
"offset": {
"type": "integer",
"default": 0
},
"technology": {
"type": "array",
"items": {
"enum": [
"java",
"dotnet",
"python",
"nodejs",
"php",
"ruby",
"go",
"native"
],
"type": "string"
}
},
"criticality": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
}
},
"scan_status": {
"type": "array",
"items": {
"enum": [
"never_scanned",
"scanning",
"scan_complete",
"scan_failed"
],
"type": "string"
}
},
"business_unit": {
"type": "string"
},
"risk_score_max": {
"type": "integer",
"maximum": 10,
"minimum": 1
},
"risk_score_min": {
"type": "integer",
"maximum": 10,
"minimum": 1
},
"compliance_framework": {
"type": "array",
"items": {
"enum": [
"pci_dss",
"sox",
"hipaa",
"gdpr",
"iso27001"
],
"type": "string"
}
}
}
}Search and filter vulnerabilities across applications using CVSS scores, CWE categories, application tags, and remediation status
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 50,
"maximum": 1000
},
"query": {
"type": "string",
"description": "Free-text search across vulnerability titles and descriptions"
},
"cwe_id": {
"type": "array",
"items": {
"type": "string"
}
},
"offset": {
"type": "integer",
"default": 0
},
"status": {
"type": "array",
"items": {
"enum": [
"open",
"in_progress",
"resolved",
"false_positive",
"accepted_risk"
],
"type": "string"
}
},
"severity": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low",
"info"
],
"type": "string"
}
},
"application_id": {
"type": "string"
},
"cvss_score_max": {
"type": "number",
"maximum": 10,
"minimum": 0
},
"cvss_score_min": {
"type": "number",
"maximum": 10,
"minimum": 0
},
"discovered_after": {
"type": "string",
"format": "date-time"
},
"discovered_before": {
"type": "string",
"format": "date-time"
}
}
}Initiate a security scan against an application or application component to identify vulnerabilities, misconfigurations, and security weaknesses
{
"type": "object",
"required": [
"target",
"scan_type"
],
"properties": {
"target": {
"type": "string",
"description": "Application URL, IP address, or application identifier"
},
"policy_id": {
"type": "string"
},
"scan_type": {
"enum": [
"sast",
"dast",
"iast",
"sca",
"secrets",
"container"
],
"type": "string"
},
"scan_profile": {
"enum": [
"quick",
"standard",
"comprehensive",
"custom"
],
"type": "string"
},
"exclude_paths": {
"type": "array",
"items": {
"type": "string"
}
},
"authentication": {
"type": "object",
"properties": {
"type": {
"enum": [
"none",
"basic",
"bearer",
"cookie",
"custom"
],
"type": "string"
},
"credentials": {
"type": "object"
}
}
}
}
}Monitor and report on vulnerability remediation SLA compliance across applications with breach notifications and escalation triggers
{
"type": "object",
"required": [],
"properties": {
"group_by": {
"enum": [
"application",
"business_unit",
"severity",
"assignee"
],
"type": "string",
"default": "application"
},
"sla_type": {
"enum": [
"critical_30_days",
"high_60_days",
"medium_90_days",
"custom"
],
"type": "string"
},
"time_range": {
"enum": [
"last_30_days",
"last_90_days",
"last_180_days",
"last_year"
],
"type": "string"
},
"application_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"include_breached_only": {
"type": "boolean",
"default": false
}
}
}Update vulnerability status, assign ownership, set remediation timeline, and add triage notes for vulnerability management workflow
{
"type": "object",
"required": [
"vulnerability_id"
],
"properties": {
"notes": {
"type": "string"
},
"status": {
"enum": [
"open",
"in_progress",
"resolved",
"false_positive",
"accepted_risk"
],
"type": "string"
},
"assignee": {
"type": "string"
},
"due_date": {
"type": "string",
"format": "date"
},
"priority": {
"enum": [
"p1",
"p2",
"p3",
"p4"
],
"type": "string"
},
"vulnerability_id": {
"type": "string"
},
"remediation_effort": {
"enum": [
"low",
"medium",
"high"
],
"type": "string"
}
}
}