loading…
Figure out why this user still has admin access
/api/mcp/srv-identity-access-reviewMCP enable + token are only for calling from an external client — the playground below needs neither.
Generate risk analytics and metrics for identity governance including access sprawl, review completion rates, and violation trends
{
"type": "object",
"required": [
"metric_type",
"time_range"
],
"properties": {
"format": {
"enum": [
"summary",
"detailed",
"trend"
],
"type": "string",
"default": "summary"
},
"group_by": {
"enum": [
"department",
"application",
"risk_level",
"reviewer"
],
"type": "string"
},
"department": {
"type": "string"
},
"time_range": {
"enum": [
"7d",
"30d",
"90d",
"1y"
],
"type": "string"
},
"metric_type": {
"enum": [
"access_sprawl",
"review_completion",
"violation_trends",
"privilege_creep",
"attestation_coverage"
],
"type": "string"
}
}
}Analyze user access patterns and identify anomalies or excessive privileges for risk assessment
{
"type": "object",
"required": [
"analysis_type"
],
"properties": {
"user_id": {
"type": "string"
},
"analysis_type": {
"enum": [
"privilege_creep",
"unused_access",
"anomaly_detection",
"segregation_conflicts"
],
"type": "string"
},
"application_id": {
"type": "string"
},
"risk_threshold": {
"enum": [
"low",
"medium",
"high"
],
"type": "string"
},
"time_window_days": {
"type": "integer",
"default": 90,
"maximum": 365,
"minimum": 30
},
"include_recommendations": {
"type": "boolean",
"default": true
}
}
}Process multiple certification decisions in batch with validation and rollback capability
{
"type": "object",
"required": [
"review_id",
"certifications"
],
"properties": {
"review_id": {
"type": "string"
},
"validate_only": {
"type": "boolean",
"default": false
},
"certifications": {
"type": "array",
"items": {
"type": "object",
"required": [
"user_id",
"entitlement_id",
"decision",
"justification"
],
"properties": {
"user_id": {
"type": "string"
},
"decision": {
"enum": [
"approve",
"revoke",
"modify",
"escalate"
],
"type": "string"
},
"justification": {
"type": "string"
},
"entitlement_id": {
"type": "string"
}
}
}
}
}
}Record reviewer decision on access review items with justification and effective date
{
"type": "object",
"required": [
"review_item_id",
"decision",
"justification"
],
"properties": {
"comments": {
"type": "string"
},
"decision": {
"enum": [
"approve",
"revoke",
"modify",
"reassign"
],
"type": "string"
},
"reassign_to": {
"type": "string"
},
"justification": {
"type": "string"
},
"effective_date": {
"type": "string",
"format": "date"
},
"review_item_id": {
"type": "string"
}
}
}Run policy violation detection across accounts and entitlements for SOD conflicts, excessive privileges, and dormant accounts
{
"type": "object",
"required": [
"policy_type"
],
"properties": {
"department": {
"type": "string"
},
"policy_type": {
"enum": [
"SOD",
"excessive_access",
"dormant_account",
"unauthorized_elevation",
"cross_application"
],
"type": "string"
},
"account_filter": {
"type": "string"
},
"include_exceptions": {
"type": "boolean",
"default": false
},
"severity_threshold": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
}
}
}Escalate access review to manager or security team with risk context and urgency level
{
"type": "object",
"required": [
"review_id",
"escalation_type",
"urgency",
"escalation_reason"
],
"properties": {
"context": {
"type": "string"
},
"urgency": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"due_date": {
"type": "string",
"format": "date"
},
"review_id": {
"type": "string"
},
"escalation_type": {
"enum": [
"manager",
"security_team",
"compliance_officer",
"risk_committee"
],
"type": "string"
},
"escalation_reason": {
"type": "string"
}
}
}Generate compliance attestation report for completed reviews with SOX or audit trail formatting
{
"type": "object",
"required": [
"review_period_start",
"review_period_end",
"report_format"
],
"properties": {
"business_unit": {
"type": "string"
},
"report_format": {
"enum": [
"sox_compliance",
"audit_trail",
"executive_summary",
"detailed"
],
"type": "string"
},
"application_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"review_period_end": {
"type": "string",
"format": "date"
},
"include_exceptions": {
"type": "boolean",
"default": true
},
"review_period_start": {
"type": "string",
"format": "date"
},
"certifier_signature_required": {
"type": "boolean",
"default": false
}
}
}Retrieve detailed access review including all entitlements, decisions, and audit trail by review ID
{
"type": "object",
"required": [
"review_id"
],
"properties": {
"review_id": {
"type": "string"
},
"include_history": {
"type": "boolean",
"default": false
},
"include_entitlements": {
"type": "boolean",
"default": true
}
}
}Retrieve detailed account information including entitlements, group memberships, and access history by account ID
{
"type": "object",
"required": [
"account_id"
],
"properties": {
"account_id": {
"type": "string"
},
"include_history": {
"type": "boolean",
"default": false
},
"include_entitlements": {
"type": "boolean",
"default": true
}
}
}Retrieve access review items for a specific campaign including account details, entitlements, and reviewer decisions
{
"type": "object",
"required": [
"review_id"
],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"offset": {
"type": "integer",
"default": 0
},
"status": {
"enum": [
"pending",
"approved",
"revoked",
"reassigned"
],
"type": "string"
},
"review_id": {
"type": "string"
},
"reviewer_id": {
"type": "string"
}
}
}List user accounts with filters for account status, last login, department, and risk level
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100,
"maximum": 1000
},
"offset": {
"type": "integer",
"default": 0
},
"status": {
"enum": [
"active",
"inactive",
"disabled",
"locked"
],
"type": "string"
},
"department": {
"type": "string"
},
"risk_level": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"last_login_days": {
"type": "integer",
"minimum": 0
}
}
}List all pending access certifications grouped by application or reviewer with summary counts
{
"type": "object",
"required": [
"group_by"
],
"properties": {
"group_by": {
"enum": [
"application",
"reviewer",
"business_unit",
"risk_level"
],
"type": "string"
},
"risk_level": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"reviewer_id": {
"type": "string"
},
"overdue_only": {
"type": "boolean",
"default": false
},
"application_type": {
"enum": [
"enterprise",
"cloud",
"privileged",
"legacy"
],
"type": "string"
}
}
}List access review campaigns with filters for status, reviewer, due date, and review type
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 50
},
"status": {
"enum": [
"draft",
"active",
"overdue",
"completed",
"cancelled"
],
"type": "string"
},
"due_after": {
"type": "string",
"format": "date"
},
"due_before": {
"type": "string",
"format": "date"
},
"review_type": {
"enum": [
"periodic",
"event_driven",
"SOX",
"role_based"
],
"type": "string"
},
"reviewer_id": {
"type": "string"
}
}
}Execute access remediation actions including deprovisioning, role modifications, and exception approvals
{
"type": "object",
"required": [
"remediation_id",
"action",
"target_accounts"
],
"properties": {
"action": {
"enum": [
"deprovision",
"modify_role",
"grant_exception",
"escalate",
"defer"
],
"type": "string"
},
"approver_id": {
"type": "string"
},
"effective_date": {
"type": "string",
"format": "date"
},
"remediation_id": {
"type": "string"
},
"target_accounts": {
"type": "array",
"items": {
"type": "string"
}
},
"business_justification": {
"type": "string"
}
}
}Configure automated recurring access review campaign with scope, reviewers, and notification settings
{
"type": "object",
"required": [
"campaign_name",
"application_ids",
"review_frequency",
"reviewer_assignment"
],
"properties": {
"campaign_name": {
"type": "string"
},
"application_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"custom_reviewers": {
"type": "array",
"items": {
"type": "string"
}
},
"review_frequency": {
"enum": [
"monthly",
"quarterly",
"semi_annual",
"annual"
],
"type": "string"
},
"reviewer_assignment": {
"enum": [
"manager",
"application_owner",
"security_team",
"custom"
],
"type": "string"
},
"notification_schedule": {
"type": "object",
"properties": {
"initial_days": {
"type": "integer",
"default": 14
},
"reminder_days": {
"type": "array",
"items": {
"type": "integer"
}
},
"escalation_days": {
"type": "integer",
"default": 7
}
}
},
"include_service_accounts": {
"type": "boolean",
"default": false
},
"auto_approve_threshold_days": {
"type": "integer"
}
}
}Search access reviews by status, reviewer, application, or user identity with filtering and pagination
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100,
"maximum": 1000,
"minimum": 1
},
"offset": {
"type": "integer",
"default": 0,
"minimum": 0
},
"status": {
"enum": [
"pending",
"in_progress",
"completed",
"overdue",
"cancelled"
],
"type": "string"
},
"reviewer_id": {
"type": "string"
},
"review_period": {
"enum": [
"quarterly",
"annual",
"ad_hoc"
],
"type": "string"
},
"user_identity": {
"type": "string"
},
"application_id": {
"type": "string"
},
"due_date_range": {
"type": "object",
"properties": {
"end": {
"type": "string",
"format": "date"
},
"start": {
"type": "string",
"format": "date"
}
}
}
}
}Search access entitlements across applications and systems with filters for permission type, application, and assignment date
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"query": {
"type": "string"
},
"orphaned": {
"type": "boolean"
},
"application": {
"type": "string"
},
"assigned_after": {
"type": "string",
"format": "date"
},
"assigned_before": {
"type": "string",
"format": "date"
},
"permission_type": {
"enum": [
"read",
"write",
"admin",
"execute",
"delete"
],
"type": "string"
}
}
}