loading…
Review unusual privileged account activity from last night
/api/mcp/srv-privileged-access-securityMCP enable + token are only for calling from an external client — the playground below needs neither.
Approve or deny a pending privileged access request with workflow decision and comments.
{
"type": "object",
"required": [
"request_id",
"decision"
],
"properties": {
"decision": {
"enum": [
"approved",
"denied",
"requires_additional_approval"
],
"type": "string"
},
"conditions": {
"type": "array",
"items": {
"enum": [
"time_limited",
"monitored",
"dual_control",
"break_glass"
],
"type": "string"
}
},
"request_id": {
"type": "string"
},
"approver_comments": {
"type": "string"
},
"approval_duration_hours": {
"type": "integer",
"maximum": 168,
"minimum": 1
}
}
}Approve or deny privileged access requests with workflow integration and audit trail
{
"type": "object",
"required": [
"request_id",
"action"
],
"properties": {
"action": {
"enum": [
"approve",
"deny",
"request_info"
],
"type": "string"
},
"comment": {
"type": "string"
},
"conditions": {
"type": "array",
"items": {
"type": "string"
}
},
"request_id": {
"type": "string"
},
"duration_override_hours": {
"type": "integer"
}
}
}Check out a privileged account from the vault for authorized use with justification and duration.
{
"type": "object",
"required": [
"account_id",
"justification",
"duration_hours",
"checkout_reason"
],
"properties": {
"account_id": {
"type": "string"
},
"requester_id": {
"type": "string"
},
"justification": {
"type": "string"
},
"duration_hours": {
"type": "integer",
"maximum": 72,
"minimum": 1
},
"checkout_reason": {
"enum": [
"maintenance",
"incident_response",
"emergency",
"scheduled_task"
],
"type": "string"
}
}
}Check out a managed password for a privileged account with approval workflow integration
{
"type": "object",
"required": [
"account_id",
"reason"
],
"properties": {
"reason": {
"type": "string"
},
"ticket_id": {
"type": "string"
},
"account_id": {
"type": "string"
},
"duration_hours": {
"type": "integer",
"default": 8
},
"approval_required": {
"type": "boolean",
"default": true
}
}
}Generate compliance audit report for privileged access activities covering specified systems and time period.
{
"type": "object",
"required": [
"report_type",
"start_date",
"end_date"
],
"properties": {
"format": {
"enum": [
"pdf",
"excel",
"json"
],
"type": "string"
},
"systems": {
"type": "array",
"items": {
"type": "string"
}
},
"end_date": {
"type": "string",
"format": "date"
},
"start_date": {
"type": "string",
"format": "date"
},
"report_type": {
"enum": [
"sox",
"pci_dss",
"iso27001",
"custom"
],
"type": "string"
},
"include_violations": {
"type": "boolean",
"default": true
},
"include_screenshots": {
"type": "boolean",
"default": false
}
}
}Generate compliance and usage reports for privileged access activities with customizable parameters
{
"type": "object",
"required": [
"report_type",
"format",
"time_range"
],
"properties": {
"format": {
"enum": [
"pdf",
"csv",
"json"
],
"type": "string"
},
"filters": {
"type": "object",
"properties": {
"users": {
"type": "array",
"items": {
"type": "string"
}
},
"systems": {
"type": "array",
"items": {
"type": "string"
}
},
"account_types": {
"type": "array",
"items": {
"type": "string"
}
}
}
},
"time_range": {
"enum": [
"7d",
"30d",
"90d",
"1y"
],
"type": "string"
},
"report_type": {
"enum": [
"compliance",
"usage",
"violations",
"account_inventory",
"session_analytics"
],
"type": "string"
},
"email_recipients": {
"type": "array",
"items": {
"type": "string",
"format": "email"
}
}
}
}Retrieve detailed session information including commands, file transfers, and recordings by session ID
{
"type": "object",
"required": [
"session_id"
],
"properties": {
"session_id": {
"type": "string"
},
"include_files": {
"type": "boolean",
"default": false
},
"include_commands": {
"type": "boolean",
"default": true
},
"include_recording": {
"type": "boolean",
"default": false
}
}
}Retrieve detailed session recording and audit trail for a specific privileged access session by session ID.
{
"type": "object",
"required": [
"session_id"
],
"properties": {
"session_id": {
"type": "string"
},
"include_commands": {
"type": "boolean",
"default": true
},
"include_keystrokes": {
"type": "boolean",
"default": false
},
"include_screenshots": {
"type": "boolean",
"default": true
}
}
}List privileged accounts with filtering by account type, system, and privilege level
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 50
},
"status": {
"enum": [
"active",
"inactive",
"locked",
"expired"
],
"type": "string"
},
"system_id": {
"type": "string"
},
"account_type": {
"enum": [
"service",
"admin",
"emergency",
"shared"
],
"type": "string"
},
"last_used_days": {
"type": "integer"
},
"privilege_level": {
"enum": [
"domain_admin",
"local_admin",
"root",
"service",
"application"
],
"type": "string"
}
}
}List detected privileged access policy violations filtered by severity, violation type, and time period.
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"status": {
"enum": [
"open",
"investigating",
"resolved",
"false_positive"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"severity": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"system_id": {
"type": "string"
},
"time_range": {
"enum": [
"last_hour",
"last_24h",
"last_7d",
"last_30d"
],
"type": "string"
},
"violation_type": {
"enum": [
"unauthorized_access",
"policy_breach",
"anomalous_behavior",
"credential_misuse",
"session_abuse"
],
"type": "string"
}
}
}List privileged accounts in the password vault filtered by account type, system, and checkout status.
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 50
},
"status": {
"enum": [
"available",
"checked_out",
"disabled",
"expired"
],
"type": "string"
},
"platform": {
"enum": [
"windows",
"linux",
"database",
"network",
"cloud"
],
"type": "string"
},
"system_id": {
"type": "string"
},
"account_type": {
"enum": [
"service",
"admin",
"emergency",
"shared"
],
"type": "string"
}
}
}List policy violations and risk events with severity filtering and investigation status
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"status": {
"enum": [
"open",
"investigating",
"resolved",
"false_positive"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"time_range": {
"enum": [
"1h",
"4h",
"24h",
"7d",
"30d"
],
"type": "string"
},
"violation_type": {
"enum": [
"unauthorized_access",
"privilege_escalation",
"policy_breach",
"suspicious_commands",
"after_hours"
],
"type": "string"
}
}
}Search privileged access sessions using filters for user, target system, session type, and time range
{
"type": "object",
"required": [
"time_range"
],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"query": {
"type": "string",
"description": "Free text search across session metadata"
},
"status": {
"enum": [
"active",
"terminated",
"suspended",
"failed"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"end_time": {
"type": "string",
"format": "date-time"
},
"start_time": {
"type": "string",
"format": "date-time"
},
"time_range": {
"enum": [
"1h",
"4h",
"24h",
"7d",
"30d"
],
"type": "string"
},
"session_type": {
"enum": [
"rdp",
"ssh",
"console",
"web",
"database"
],
"type": "string"
},
"target_system": {
"type": "string"
}
}
}Initiate credential rotation for privileged accounts across managed systems
{
"type": "object",
"required": [
"account_id",
"rotation_type"
],
"properties": {
"account_id": {
"type": "string"
},
"notify_users": {
"type": "boolean",
"default": true
},
"rotation_type": {
"enum": [
"immediate",
"scheduled",
"emergency"
],
"type": "string"
},
"schedule_time": {
"type": "string",
"format": "date-time"
},
"target_systems": {
"type": "array",
"items": {
"type": "string"
}
}
}
}Initiate automated password rotation for a privileged account in the vault with verification and rollback capability.
{
"type": "object",
"required": [
"account_id"
],
"properties": {
"account_id": {
"type": "string"
},
"force_rotation": {
"type": "boolean",
"default": false
},
"scheduled_time": {
"type": "string",
"format": "date-time"
},
"rollback_on_failure": {
"type": "boolean",
"default": true
},
"verify_connectivity": {
"type": "boolean",
"default": true
}
}
}Search privileged access sessions by user, target system, session type, time range, and risk score filters.
{
"type": "object",
"required": [
"time_range"
],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"query": {
"type": "string",
"description": "Free text search across session metadata"
},
"user_id": {
"type": "string"
},
"end_time": {
"type": "string",
"format": "date-time"
},
"risk_level": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"start_time": {
"type": "string",
"format": "date-time"
},
"time_range": {
"enum": [
"last_hour",
"last_24h",
"last_7d",
"last_30d",
"custom"
],
"type": "string"
},
"session_type": {
"enum": [
"rdp",
"ssh",
"console",
"web",
"database"
],
"type": "string"
},
"target_system": {
"type": "string"
}
}
}Immediately terminate an active privileged access session and revoke access for security purposes.
{
"type": "object",
"required": [
"session_id",
"termination_reason"
],
"properties": {
"session_id": {
"type": "string"
},
"notify_user": {
"type": "boolean",
"default": true
},
"block_reconnect": {
"type": "boolean",
"default": false
},
"termination_reason": {
"enum": [
"security_violation",
"policy_breach",
"emergency",
"administrative"
],
"type": "string"
}
}
}