MCP Tools Reference

{
  "offset": 0,
  "limit": 25,
  "statuses": ["PENDING_REVIEW"],
  "scoreLevels": ["CRITICAL", "HIGH"],
  "sortBy": "score",
  "sortOrder": "desc"
}

{
  "issues": [
    {
      "id": "issue_abc123",
      "title": "SQL Injection in user lookup",
      "score": 9.2,
      "status": "PENDING_REVIEW",
      "repository": { "id": "repo_123", "name": "backend-api" },
      "vulnerabilityClass": "SQL Injection",
      "createdAt": "2025-10-16T12:34:56Z"
    }
  ],
  "counts": {
    "total": 42,
    "byStatus": { "PENDING_REVIEW": 12, "REVIEWING": 8 }
  },
  "effectiveFilters": { "statuses": ["PENDING_REVIEW"] }
}

{
  "issueIds": ["issue_123", "issue_456"],
  "reason": "Confirmed duplicate"
}

{
  "ok": true
}

{
  "issueIds": ["issue_123"]
}

{
  "ok": true
}

{
  "issueIds": ["issue_789"],
  "reason": "Input is sanitized by middleware"
}

{
  "ok": true
}

{
  "issueIds": ["issue_101", "issue_102"]
}

{
  "ok": true
}

{
  "issueIds": ["issue_123"],
  "issueStatus": "RESOLVED",
  "reason": "Fixed in PR #456"
}

{
  "ok": true,
  "updatedCount": 1
}

{
  "issueId": "issue_123",
  "severity": 8.5,
  "reason": "Upgraded after confirming public exposure"
}

{
  "ok": true
}

{
  "issueId": "issue_123",
  "context": "This endpoint is exposed to unauthenticated users and handles file uploads. Please check whether the path traversal is reachable from the public route."
}

{
  "investigationId": "inv_abc123",
  "status": "created"
}

{
  "issueIds": ["issue_123", "issue_456", "issue_789"],
  "context": "These issues were found in our payment processing service which is PCI-scoped. Please prioritize exploitability assessment."
}

{
  "created": 2,
  "skipped": 1,
  "unauthorized": 0
}

{
  "issueId": "issue_123"
}

{
  "id": "inv_abc123",
  "status": "COMPLETED",
  "startedAt": "2026-03-15T10:00:00Z",
  "completedAt": "2026-03-15T10:02:30Z",
  "resultValidated": "CONFIRMED",
  "resultSecurityAssessment": "The SQL injection is exploitable via the search parameter...",
  "error": null,
  "createdAt": "2026-03-15T09:59:00Z"
}

{
  "issueId": "issue_123"
}

{
  "ok": true
}

{
  "issueId": "issue_123",
  "notes": "Confirmed reachable via the public /upload endpoint. Assigned to the platform team for remediation in the Q3 sprint."
}

{
  "ok": true
}

{
  "issueId": "issue_123"
}

{
  "issueId": "issue_123",
  "fileName": "acme-billing-api-sql-injection-in-invoice-search-issue_12.md",
  "markdown": "# [High] SQL injection in invoice search\n\nRepository: acme/billing-api\n\n..."
}

{
  "limit": 10,
  "repositoryIds": ["repo_123"],
  "scanTypes": ["FullScan"]
}

{
  "cursor": {
    "createdAt": "2025-10-15T08:00:00Z",
    "id": "scan_xyz"
  },
  "limit": 10
}

{
  "scans": [
    {
      "scanId": "scan_abc123",
      "repositoryId": "repo_123",
      "repositoryName": "backend-api",
      "status": "Finished",
      "codeScanType": "FullScan",
      "createdAt": "2025-10-16T12:00:00Z",
      "scanFinishedAt": "2025-10-16T12:08:00Z",
      "issueCounts": {
        "PENDING_REVIEW": 3,
        "RESOLVED": 12,
        "newOpen": 2
      }
    }
  ],
  "nextCursor": { "createdAt": "2025-10-15T08:00:00Z", "id": "scan_xyz" },
  "hasMore": true,
  "isFirstPage": true
}

{
  "scanId": "scan_abc123"
}

{
  "scanId": "scan_abc123",
  "repositoryId": "repo_123",
  "repositoryName": "backend-api",
  "status": "Finished",
  "codeScanType": "FullScan",
  "scanTargetBranch": "main",
  "finished": true,
  "createdAt": "2025-10-16T12:00:00Z",
  "scanFinishedAt": "2025-10-16T12:08:00Z",
  "issueCounts": {
    "PENDING_REVIEW": 3,
    "REVIEWING": 1,
    "RESOLVED": 12,
    "newOpen": 2,
    "open": 5
  },
  "scanType": "code"
}

{
  "scanId": "scan_abc123",
  "force": false
}

{
  "outcome": "scans_created",
  "message": "Created 1 new scan(s)",
  "scanCount": 1
}

{
  "limit": 50,
  "sortBy": "issues",
  "sortDirection": "desc",
  "getCounts": true
}

{
  "items": [
    {
      "id": "repo_123",
      "projectId": "proj_456",
      "name": "backend-api",
      "defaultScanTargetBranch": "main",
      "tags": [{ "id": "tag_1", "name": "production", "priority": 1 }],
      "issueCounts": {
        "newOpen": 5,
        "open": 12,
        "patched": 30,
        "archived": 2,
        "falsePositive": 3,
        "patchable": 4,
        "closed": 8,
        "silenced": 1
      },
      "vcs": {
        "vcsType": "github",
        "url": "https://github.com/acme/backend-api",
        "linkActive": true
      }
    }
  ],
  "nextCursor": "eyJuYW1lIjoiYmFja2VuZC1hcGkifQ",
  "hasMore": true,
  "totalCount": 87
}

{
  "repositoryId": "repo_123",
  "query": "password",
  "pathPrefix": "src/auth",
  "limit": 5
}

{
  "provider": "github",
  "repositoryId": "repo_123",
  "query": "password",
  "ref": null,
  "pathPrefix": "src/auth",
  "hasNextPage": true,
  "totalMatches": 12,
  "items": [
    {
      "path": "src/auth/login.ts",
      "line": 42,
      "preview": "const hashedPassword = await bcrypt.hash(password, 10);",
      "url": "https://github.com/acme/backend/blob/main/src/auth/login.ts#L42"
    }
  ]
}

{
  "repositoryId": "repo_123",
  "path": "src/auth/login.ts",
  "startLine": 40,
  "endLine": 50
}

{
  "provider": "github",
  "repositoryId": "repo_123",
  "path": "src/auth/login.ts",
  "ref": "main",
  "startLine": 40,
  "endLine": 50,
  "totalLines": 120,
  "content": "...",
  "byteLength": 450,
  "truncatedByLineRange": true,
  "truncatedByByteLimit": false,
  "url": "https://github.com/acme/backend/blob/main/src/auth/login.ts"
}

{
  "repositoryId": "repo_123",
  "path": "src/auth"
}

{
  "provider": "github",
  "repositoryId": "repo_123",
  "ref": "main",
  "path": "src/auth",
  "hasMore": false,
  "nextCursor": null,
  "items": [
    { "path": "src/auth/login.ts", "name": "login.ts", "type": "file", "size": 2048 },
    { "path": "src/auth/middleware", "name": "middleware", "type": "dir", "size": null }
  ]
}

{
  "limit": 25
}

{
  "cursor": "eyJjcmVhdGVkQXQiOiIyMDI1LTA5LTAxVDAwOjAwOjAwLjAwMFoiLCJpZCI6InJ1bGVfeHl6Nzg5In0=",
  "limit": 25
}

{
  "items": [
    {
      "id": "rule_xyz789",
      "name": "Detect unsafe eval",
      "source": "USER",
      "rule": "Detect any use of eval() on user input",
      "globPattern": "**/*.js",
      "sourceTypes": ["FILE_HANDLER"],
      "repositoryIds": ["repo_123"],
      "scope": "repositories",
      "tags": [{ "id": "tag_1", "name": "critical-rules" }],
      "createdAt": "2025-09-01T00:00:00.000Z",
      "updatedAt": "2025-10-10T12:00:00.000Z"
    }
  ],
  "totalCount": 30,
  "hasMore": true,
  "nextCursor": "eyJjcmVhdGVkQXQiOiIyMDI1LTA5LTAxVDAwOjAwOjAwLjAwMFoiLCJpZCI6InJ1bGVfeHl6Nzg5In0="
}

{
  "ruleId": "rule_xyz789"
}

{
  "id": "rule_xyz789",
  "name": "Detect unsafe eval",
  "rule": "Detect any use of eval() on user input",
  "globPattern": "**/*.js",
  "sourceTypes": ["FILE_HANDLER"],
  "repositories": [
    { "id": "repo_123", "name": "backend-api" }
  ],
  "tags": [{ "id": "tag_1", "name": "critical-rules" }],
  "createdAt": "2025-09-01T00:00:00Z",
  "updatedAt": "2025-10-10T12:00:00Z"
}

{
  "name": "Detect unsafe eval",
  "rule": "Detect any use of eval() on user input",
  "globPattern": "**/*.{js,ts}",
  "sourceTypes": ["HTTP_HANDLER", "FILE_HANDLER"],
  "repositoryIds": ["repo_123"],
  "tagIds": ["tag_1"]
}

{
  "id": "rule_xyz789",
  "name": "Detect unsafe eval",
  "rule": "Detect any use of eval() on user input",
  "globPattern": "**/*.{js,ts}",
  "sourceTypes": ["HTTP_HANDLER", "FILE_HANDLER"],
  "repositoryIds": ["repo_123"],
  "tags": [{ "id": "tag_1", "name": "critical-rules" }],
  "createdAt": "2025-10-16T14:00:00Z",
  "updatedAt": "2025-10-16T14:00:00Z"
}

{
  "ruleId": "rule_xyz789",
  "name": "Detect unsafe eval (updated)",
  "globPattern": "**/*.{js,ts,jsx,tsx}"
}

{
  "id": "rule_xyz789",
  "name": "Detect unsafe eval (updated)",
  "rule": "Detect any use of eval() on user input",
  "globPattern": "**/*.{js,ts,jsx,tsx}",
  "sourceTypes": ["HTTP_HANDLER", "FILE_HANDLER"],
  "repositoryIds": ["repo_123"],
  "tags": [{ "id": "tag_1", "name": "critical-rules" }],
  "createdAt": "2025-10-16T14:00:00Z",
  "updatedAt": "2025-10-16T15:30:00Z"
}

{
  "ruleId": "rule_xyz789"
}

{
  "success": true
}