loading…
Check whether this MFA fatigue alert is a real compromise
/api/mcp/srv-mfa-securityMCP enable + token are only for calling from an external client — the playground below needs neither.
Generate risk analysis report identifying suspicious authentication patterns, anomalous locations, and potential compromise indicators
{
"type": "object",
"required": [
"time_range"
],
"properties": {
"user_id": {
"type": "string"
},
"time_range": {
"enum": [
"24h",
"7d",
"30d",
"90d"
],
"type": "string"
},
"risk_threshold": {
"enum": [
"low",
"medium",
"high"
],
"type": "string"
},
"include_geolocation": {
"type": "boolean",
"default": true
},
"include_device_fingerprint": {
"type": "boolean",
"default": true
}
}
}Create temporary MFA bypass for user with expiration time and justification for emergency access scenarios
{
"type": "object",
"required": [
"user_id",
"duration_hours",
"justification"
],
"properties": {
"user_id": {
"type": "string"
},
"approver_id": {
"type": "string"
},
"justification": {
"type": "string"
},
"duration_hours": {
"type": "integer",
"maximum": 72,
"minimum": 1
}
}
}Initiate MFA authenticator enrollment for a user with specified device type and delivery method
{
"type": "object",
"required": [
"user_id",
"device_type"
],
"properties": {
"email": {
"type": "string"
},
"user_id": {
"type": "string"
},
"device_type": {
"enum": [
"totp",
"sms",
"voice",
"push",
"hardware_token"
],
"type": "string"
},
"phone_number": {
"type": "string"
},
"force_enrollment": {
"type": "boolean",
"default": false
}
}
}Enroll a user in a new MFA method and generate enrollment data
{
"type": "object",
"required": [
"user_id",
"method"
],
"properties": {
"method": {
"enum": [
"totp",
"sms",
"push",
"hardware_token",
"webauthn"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"device_name": {
"type": "string"
},
"phone_number": {
"type": "string"
}
}
}Generate temporary bypass codes for users experiencing MFA issues
{
"type": "object",
"required": [
"user_id",
"reason",
"approver_id"
],
"properties": {
"reason": {
"enum": [
"device_unavailable",
"travel",
"emergency_access"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"approver_id": {
"type": "string"
},
"duration_hours": {
"type": "integer",
"default": 24,
"maximum": 72,
"minimum": 1
}
}
}Fetch detailed authentication event by event ID including challenge details, response metadata, and risk assessment
{
"type": "object",
"required": [
"event_id"
],
"properties": {
"event_id": {
"type": "string"
}
}
}Retrieve MFA policy compliance status and violations for users or groups
{
"type": "object",
"required": [],
"properties": {
"user_id": {
"type": "string"
},
"group_id": {
"type": "string"
},
"policy_id": {
"type": "string"
},
"compliance_status": {
"enum": [
"compliant",
"non_compliant",
"grace_period",
"exempt"
],
"type": "string"
}
}
}Get MFA enrollment status and configured methods for a specific user
{
"type": "object",
"required": [
"user_id"
],
"properties": {
"user_id": {
"type": "string"
}
}
}Retrieve authentication events with optional filtering by user, device, method, and time range
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100,
"maximum": 1000,
"minimum": 1
},
"status": {
"enum": [
"success",
"failed",
"pending",
"expired"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"device_id": {
"type": "string"
},
"time_range": {
"enum": [
"1h",
"6h",
"24h",
"7d",
"30d"
],
"type": "string"
},
"auth_method": {
"enum": [
"totp",
"sms",
"push",
"hardware_token",
"backup_codes",
"webauthn"
],
"type": "string"
}
}
}Retrieve all registered MFA authenticators for users with optional filtering by user, device type, and enrollment status
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"offset": {
"type": "integer",
"default": 0
},
"status": {
"enum": [
"active",
"inactive",
"pending",
"revoked"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"device_type": {
"enum": [
"totp",
"sms",
"voice",
"push",
"hardware_token",
"backup_codes"
],
"type": "string"
}
}
}Revoke an MFA authenticator device by authenticator ID and record reason for audit trail
{
"type": "object",
"required": [
"authenticator_id",
"reason"
],
"properties": {
"notes": {
"type": "string"
},
"reason": {
"enum": [
"compromised",
"lost",
"employee_departure",
"policy_violation",
"user_request"
],
"type": "string"
},
"authenticator_id": {
"type": "string"
}
}
}Revoke a user's MFA method and disable associated tokens
{
"type": "object",
"required": [
"user_id",
"method_id"
],
"properties": {
"reason": {
"enum": [
"user_request",
"security_incident",
"device_lost",
"policy_violation"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"method_id": {
"type": "string"
}
}
}Query authentication logs with filters for user, time range, success status, and risk factors
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"status": {
"enum": [
"success",
"failure",
"challenge_sent",
"timeout",
"blocked"
],
"type": "string"
},
"user_id": {
"type": "string"
},
"end_time": {
"type": "string",
"format": "date-time"
},
"source_ip": {
"type": "string"
},
"risk_level": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"start_time": {
"type": "string",
"format": "date-time"
}
}
}Search for high-risk authentication events using filters for anomaly detection
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 50,
"maximum": 500,
"minimum": 1
},
"user_id": {
"type": "string"
},
"event_type": {
"enum": [
"impossible_travel",
"new_device",
"repeated_failures",
"bypass_attempt"
],
"type": "string"
},
"ip_address": {
"type": "string"
},
"risk_level": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"time_range": {
"enum": [
"1h",
"6h",
"24h",
"7d",
"30d"
],
"type": "string"
}
}
}Assign or modify MFA policy requirements for users or groups
{
"type": "object",
"required": [
"policy_id",
"target_type",
"target_id"
],
"properties": {
"policy_id": {
"type": "string"
},
"target_id": {
"type": "string"
},
"target_type": {
"enum": [
"user",
"group",
"application"
],
"type": "string"
},
"enforcement_mode": {
"enum": [
"enforced",
"grace_period",
"report_only"
],
"type": "string"
},
"required_methods": {
"type": "array",
"items": {
"enum": [
"totp",
"sms",
"push",
"hardware_token",
"webauthn"
],
"type": "string"
}
}
}
}Modify MFA policy configuration including enforcement rules, grace periods, and exemption criteria
{
"type": "object",
"required": [
"policy_id"
],
"properties": {
"policy_id": {
"type": "string"
},
"enforcement_mode": {
"enum": [
"enforced",
"monitor",
"disabled"
],
"type": "string"
},
"required_methods": {
"type": "array",
"items": {
"enum": [
"totp",
"sms",
"push",
"hardware_token"
],
"type": "string"
}
},
"grace_period_days": {
"type": "integer",
"maximum": 90,
"minimum": 0
},
"high_risk_enforcement": {
"type": "boolean"
}
}
}