loading…
MFA_Security
/
tools
/ tool editor
mfa__search_risk_events
name (registry, task__-namespaced)
description
Search for high-risk authentication events using filters for anomaly detection
behavior spec (steers the decoy + judge)
read-only
JSON Schema (arguments)
✓ valid · 6 props · 0 required
{ "type": "object", "required": [], "properties": { "limit": { "type": "integer", "default": 50, "maximum": 500, "minimum": 1 }, "user_id": { "type": "string" }, "event_type": { "enum": [ "impossible_travel", "new_device", "repeated_failures", "bypass_attempt" ], "type": "string" }, "ip_address": { "type": "string" }, "risk_level": { "enum": [ "low", "medium", "high", "critical" ], "type": "string" }, "time_range": { "enum": [ "1h", "6h", "24h", "7d", "30d" ], "type": "string" } } }
Save tool
registry name changes propagate to the decoy surface on the next drain