generated: '2026-08-30' method: searched source: https://www.npmjs.com/package/@acronis-platform/mcp (v1.0.1, published 2026-07-22); tool set read from the published package bundle name: Acronis API MCP server_name: acronis-mcp title: Acronis API MCP description: Provides Acronis Cyber Protect Cloud platform APIs as MCP tools — tenant and user provisioning, service and quota management, backup policy configuration, resource protection, agent management, and monitoring. status: published vendor: Acronis International GmbH deployment: mode: local-stdio install: npx -y @acronis-platform/mcp package: https://www.npmjs.com/package/@acronis-platform/mcp auth: oauth verified: searched note: Acronis ships no vendor-hosted remote MCP endpoint. The package can also run its own HTTP transport (MCP_TRANSPORT=http, default path /mcp on 127.0.0.1:3000) but that is a server the OPERATOR hosts, not a URL Acronis serves, so mode stays local-stdio. transports: - stdio - streamable-http (self-hosted) authentication: model: OAuth 2.0 client credentials against the Acronis IDP token_url: ${API_BASE_URL}/api/2/idp/token env: - API_BASE_URL - OAUTH_CLIENT_ID - OAUTH_CLIENT_SECRET - OAUTH_SCOPES - OAUTH_TOKEN_URL note: In HTTP transport with client_credentials the server refuses to start without MCP_BEARER_TOKEN, because it holds a privileged upstream token shared across callers. configuration: default_api_base_url: https://mc-beta-cloud.acronis.com dynamic_tools: MCP_DYNAMIC_TOOLS=true exposes _list_api_endpoints and _enable_api_endpoints instead of registering all tools up front (MCP_MAX_TOOLS_ENABLED default 25) filters: - MCP_TOOLS_INCLUDE - MCP_TOOLS_EXCLUDE tool_count: 160 api_tool_count: 157 meta_tools: - name: _list_api_endpoints description: 'Dynamic mode: search available API endpoints.' - name: _enable_api_endpoints description: 'Dynamic mode: activate discovered endpoints as callable tools.' - name: get_acronis_skill description: Returns the Acronis API Playbook — the provider-authored operating instructions the server tells clients to read before acting. Captured verbatim at skills/acronis-api-playbook.md. apis_covered: - api: Account Management API 2 tools: 96 - api: Alert Manager 1.0 tools: 16 - api: Resource and Policy Management API v4 tools: 36 - api: Agent Management REST API 2 tools: 3 - api: Endpoint Detection and Response API 1.0 tools: 6 tools: - api: Account Management API 2 items: - name: fetch_open_idconfiguration method: GET path: /api/2/.well-known/openid-configuration description: Fetches the information about the OpenID provider's configuration. For more details, see https://openid.net/specs/openid-connect-discovery-1_0.html. - name: get_forgot_link method: GET path: /api/2/accounts/forgot_link description: 'Get forgot password link by login. *WARNING.* Endpoint is disabled.' - name: fetch_applications method: GET path: /api/2/applications description: Fetches a list of all registered applications. - name: fetch_application method: GET path: /api/2/applications/{application_id} description: Fetches the information about the application by ID. - name: turn_on_tenant_application method: POST path: /api/2/applications/{application_id}/bindings/tenants/{tenant_id} description: Turns the application on for the tenant. - name: turn_off_tenant_application method: DELETE path: /api/2/applications/{application_id}/bindings/tenants/{tenant_id} description: Turns the application off for the tenant. - name: delete_tenant_application_setting method: DELETE path: /api/2/applications/{application_id}/settings/tenants/{tenant_id}/{setting_name} description: 'Deletes own setting of the tenant''s application. The setting will be inherited from parent tenants when deleted.' - name: update_tenant_application_setting method: PUT path: /api/2/applications/{application_id}/settings/tenants/{tenant_id}/{setting_name} description: Updates a setting of the tenant's application. - name: fetch_tenant_application_setting method: GET path: /api/2/applications/{application_id}/settings/tenants/{tenant_id}/{setting_name} description: Fetches a setting of the tenant's application. - name: create_client method: POST path: /api/2/clients description: Creates a new client. - name: fetch_clients_batch method: GET path: /api/2/clients description: Fetches a batch of clients. - name: delete_client method: DELETE path: /api/2/clients/{client_id} description: Deletes a client by ID. - name: update_client method: PUT path: /api/2/clients/{client_id} description: Updates a client by ID. - name: fetch_client method: GET path: /api/2/clients/{client_id} description: Fetches a client by ID. - name: request_tokens method: POST path: /api/2/idp/token description: 'Requests an access token, an ID token and, optionally, a refresh token. To additionally request a refresh token, refer to [OpenID Connect Core 1.0 Section 11](https://openid.net/specs/openid-connect-core-1_0.html#rfc.se' - name: revoke_token method: POST path: /api/2/idp/revoke_token description: 'Revokes an access token and, if any, a refresh token in accordance with [RFC7009](https://datatracker.ietf.org/doc/html/rfc7009). Confidential clients must either follow Basic authentication scheme or provide credential' - name: introspect_token method: POST path: /api/2/idp/introspect_token description: Introspect an access token in accordance with [RFC7662](https://datatracker.ietf.org/doc/html/rfc7662). - name: request_one_time_token method: POST path: /api/2/idp/ott description: 'Available in cloud version only and this method can be accessed only by OAuth 2.0 / OpenID Connect client. Requests a one-time token for authentication on behalf of the specified user. Either user external ID or Acronis' - name: log_in_with_one_time_token method: POST path: /api/2/idp/ott/login description: 'Authenticates to the platform using one-time token and provides the IdP session cookie. Available in cloud version only.' - name: logout method: GET path: /api/2/idp/logout description: Performs a logout from the platform. - name: post_idp_device_authorization method: POST path: /api/2/idp/device_authorization description: Registers device codes and issues device and user codes. - name: device_authorization_approval method: GET path: /api/2/idp/device_authorization/approval description: Returns information about existing device authorization by the user code. - name: device_authorization_approval method: POST path: /api/2/idp/device_authorization/approval description: 'Approves existing device code. In case of setting tenant_uuid parameter in the request body or in the scope the current user and target tenant should satisfy next requirements: user should be a partner_admin, user should' - name: fetch_one_time_token_login_page method: GET path: /api/2/idp/external-login description: 'Fetches an HTML page that handles the login flow from external systems with one-time tokens and redirects users to the provided `targetURI`. The legacy way to provide one-time token and target URI is via the following UR' - name: fetch_infrastructures_batch method: GET path: /api/2/infra description: Fetches batch of infrastructure components. - name: register_infrastructure method: POST path: /api/2/infra description: Registers a new infrastructure component. - name: unregister_infrastructure method: DELETE path: /api/2/infra/{infra_id} description: Unregisters infrastructure component. - name: update_infrastructure method: PUT path: /api/2/infra/{infra_id} description: Updates infrastructure component. - name: fetch_infrastructure method: GET path: /api/2/infra/{infra_id} description: Fetches infrastructure component. - name: fetch_infrastructures_locations_batch method: GET path: /api/2/locations description: Fetches a batch of infrastructure locations. - name: create_infrastructures_location method: POST path: /api/2/locations description: Creates a new infrastructures location. - name: delete_infrastructures_location method: DELETE path: /api/2/locations/{location_id} description: Deletes an infrastructure location by ID. - name: update_infrastructures_location method: PUT path: /api/2/locations/{location_id} description: Updates an infrastructure location by ID. - name: fetch_infrastructures_location method: GET path: /api/2/locations/{location_id} description: Fetches an infrastructure location by ID. - name: fetch_location_infrastructures method: GET path: /api/2/locations/{location_id}/infra description: Fetches batch of infrastructure components of the provided location. - name: fetch_registration_tokens method: GET path: /api/2/registration_tokens description: '*DEPRECATED.* Use `/api/2/tenants/{tenant_id}/registration_tokens`. Fetches a list of registration tokens. ' - name: create_registration_token method: POST path: /api/2/registration_tokens description: '*DEPRECATED.* Use /api/2/tenants//registration_tokens. Creates a registration token. ' - name: delete_registration_token method: DELETE path: /api/2/registration_tokens/{token_id} description: Deletes a registration token by ID. - name: create_report method: POST path: /api/2/reports description: Creates a new usage report. - name: delete_report method: DELETE path: /api/2/reports/{report_id} description: Deletes a usage report by ID. - name: update_report method: PUT path: /api/2/reports/{report_id} description: Updates a usage report configuration. Only scheduled reports can be updated. - name: fetch_report method: GET path: /api/2/reports/{report_id} description: Fetches a usage report configuration. - name: fetch_stored_reports method: GET path: /api/2/reports/{report_id}/stored description: Fetches all stored reports related to the usage report. - name: download_stored_report method: GET path: /api/2/reports/{report_id}/stored/{stored_report_id} description: Downloads stored report data. - name: search method: GET path: /api/2/search description: 'Searches for tenants and users. Tenants are searched by `name`, `custom_id`, `first_name`, `last_name` and `email` from contact info. Users are searched by `login`, `email`, `first_name` and `last_name`. Search is cas' - name: fetch_tenants_batch method: GET path: /api/2/tenants description: 'Available in cloud version only. Fetches details about multiple tenants specified by their UUIDs or about child tenants of a specific tenant specified by its UUID.' - name: create_tenant method: POST path: /api/2/tenants description: Creates a new tenant. - name: fetch_tenants_applications_batch method: GET path: /api/2/tenants/applications description: Fetches a batch of applications' UUIDs for the provided list of tenants. - name: fetch_tenant_offering_items_batch method: GET path: /api/2/tenants/offering_items description: Fetches a batch of the offering items with their states and associated quotas. - name: fetch_tenants_usages_batch method: GET path: /api/2/tenants/usages description: Fetches a batch of usages of the tenant. - name: update_tenants_usages method: PUT path: /api/2/tenants/usages description: 'Updates the values of the usages specified in `usage_type` or associated with the offering items specified in `offering_item`. Depending on the combination of provided fields, the usage may be reported either per tenant' - name: delete_tenant method: DELETE path: /api/2/tenants/{tenant_id} description: Deletes a tenant by ID. - name: update_tenant method: PUT path: /api/2/tenants/{tenant_id} description: Updates a tenant by ID. - name: fetch_tenant method: GET path: /api/2/tenants/{tenant_id} description: Fetches a tenant by ID. - name: fetch_tenant_offering_items method: GET path: /api/2/tenants/{tenant_id}/offering_items description: Fetches a list offering items with state and associated quotas. - name: set_tenant_offering_items method: PUT path: /api/2/tenants/{tenant_id}/offering_items description: Sets the states and quotas of the offering items for specified applications of the tenant. - name: fetch_offering_items_available_for_tenant_child method: GET path: /api/2/tenants/{tenant_id}/offering_items/available_for_child description: Fetches available offering items for a hypothetical child tenant with provided parameters. - name: fetch_tenant_offering_items_prices method: GET path: /api/2/tenants/{tenant_id}/offering_items/pricing description: Fetches a list of prices of the offering items for the tenant. - name: update_tenant_offering_items_prices method: PUT path: /api/2/tenants/{tenant_id}/offering_items/pricing description: Updates the prices of the offering items for the tenant. - name: perform_tenant_edition_switch_check method: GET path: /api/2/tenants/{tenant_id}/edition description: Performs edition switching check for the tenant. - name: switch_tenant_edition method: PUT path: /api/2/tenants/{tenant_id}/edition description: Switches the edition for the tenant. - name: fetch_registration_tokens method: GET path: /api/2/tenants/{tenant_id}/registration_tokens description: Fetches registration tokens. - name: create_registration_token method: POST path: /api/2/tenants/{tenant_id}/registration_tokens description: Creates registration token for the tenant. - name: fetch_available_tenant_applications method: GET path: /api/2/tenants/{tenant_id}/applications description: Fetches a list of applications available to the tenant. - name: fetch_tenant_users method: GET path: /api/2/tenants/{tenant_id}/users description: Fetches a list of UUIDs of the tenant's users. - name: fetch_tenant_children method: GET path: /api/2/tenants/{tenant_id}/children description: Fetches a list of UUIDs of the tenant's children. - name: fetch_tenant_reports method: GET path: /api/2/tenants/{tenant_id}/reports description: Fetches a list of reports' UUIDs available to the tenant. - name: fetch_tenant_infrastructure_locations method: GET path: /api/2/tenants/{tenant_id}/locations description: Fetches a list of infrastructure locations owned by the tenant. - name: fetch_tenant_usages method: GET path: /api/2/tenants/{tenant_id}/usages description: Fetches a list of common usage metrics of the tenant. - name: fetch_tenant_pricing_settings method: GET path: /api/2/tenants/{tenant_id}/pricing description: Fetches pricing settings of the tenant. - name: update_tenant_pricing_settings method: PUT path: /api/2/tenants/{tenant_id}/pricing description: Updates pricing settings of the tenant. - name: disable_custom_branding method: DELETE path: /api/2/tenants/{tenant_id}/brand description: Disables custom branding for the tenant. - name: fetch_custom_branding_options method: GET path: /api/2/tenants/{tenant_id}/brand description: Fetches branding options of the tenant. - name: enable_custom_branding method: POST path: /api/2/tenants/{tenant_id}/brand description: 'Enables custom branding options for the tenant. This operation cannot be performed on customer and unit tenants.' - name: modify_custom_branding method: PUT path: /api/2/tenants/{tenant_id}/brand description: Modifies custom branding options. - name: fetch_tenant_brand_logo method: GET path: /api/2/tenants/{tenant_id}/brand/logo description: Fetches tenant's brand logo. - name: upload_tenant_brand_logo method: POST path: /api/2/tenants/{tenant_id}/brand/logo description: Uploads a new tenant's brand logo. - name: manage_tenant_mfastatus method: PUT path: /api/2/tenants/{tenant_id}/mfa/status description: 'Toggles MFA status for the tenant. This operation cannot be performed on folder and unit tenants.' - name: fetch_tenant_mfastatus method: GET path: /api/2/tenants/{tenant_id}/mfa/status description: Provides MFA status for tenant and progress of TOTP enablement by users. - name: update_tenant_default_idp_id method: PUT path: /api/2/tenants/{tenant_id}/default_idp description: Updates Tenant default_idp_id. - name: restore_deleted_tenant method: POST path: /api/2/tenants/{tenant_id}/restore description: Restores previously soft deleted tenant. - name: resolve_tenant_ids method: POST path: /api/2/tenants:resolve_ids description: Resolves tenant identifiers between their numeric ID and UUID forms. - name: fetch_users_batch method: GET path: /api/2/users description: 'Fetches a batch of users. Available in cloud version only.' - name: create_user method: POST path: /api/2/users description: 'Creates a new user. If the user is created in a customer tenant and below - a personal tenant will be created and attached to it.' - name: check_login_name_availability method: GET path: /api/2/users/check_login description: Checks whether the login name (username) is available or already taken. - name: check_password method: POST path: /api/2/users/check_password description: Checks whether a password was previously exposed in data breaches. - name: fetch_current_user_info method: GET path: /api/2/users/me description: Fetches information about the currently authenticated user. - name: delete_user method: DELETE path: /api/2/users/{user_id} description: Deletes a user by ID. - name: update_user method: PUT path: /api/2/users/{user_id} description: Updates a user by ID. - name: fetch_user method: GET path: /api/2/users/{user_id} description: Fetches a user by ID. - name: fetch_user_access_policies method: GET path: /api/2/users/{user_id}/access_policies description: Fetches a list of user's access policies. - name: update_user_access_policies method: PUT path: /api/2/users/{user_id}/access_policies description: Rewrites user's access policies. - name: manage_user_mfastatus method: PUT path: /api/2/users/{user_id}/mfa/status description: Manages MFA status for the user. - name: set_user_password method: POST path: /api/2/users/{user_id}/password description: 'This method can be accessed only by OAuth 2.0 / OpenID Connect client. Sets user''s password.' - name: send_activation_email method: POST path: /api/2/users/{user_id}/send-activation-email description: Sends an activation email to the user. - name: restore_deleted_user method: POST path: /api/2/users/{user_id}/restore description: Restores previously soft-deleted user. - api: Alert Manager 1.0 items: - name: create_an_alert method: POST path: /api/alert_manager/v1/alerts description: Creates and activates an alert. - name: fetch_all_alerts method: GET path: /api/alert_manager/v1/alerts description: Fetches all alerts by optional filtering parameters. - name: dismiss_the_alerts_by_filter method: DELETE path: /api/alert_manager/v1/alerts description: 'Dismisses the alerts by optional filtering parameters. Alerts will be dismissed even if they have the `orphaned` flag. Note that if no filter is provided all alerts within the tenant scope will be dismissed. ' - name: fetch_an_alert_by_id method: GET path: /api/alert_manager/v1/alerts/{id} description: Fetches the information about the alert by ID. - name: dismiss_an_alert_by_id method: DELETE path: /api/alert_manager/v1/alerts/{id} description: Dismisses an alert by ID. - name: fetch_categories method: GET path: /api/alert_manager/v1/categories description: Fetches a list of enabled categories. - name: fetch_alert_counters method: GET path: /api/alert_manager/v1/count description: Fetches the alert counters that may be grouped by optional parameters. - name: fetch_alerts_grouped_by_scope method: GET path: /api/alert_manager/v1/status description: Returns the last of the most critical alerts grouped by selected scope. - name: fetch_all_alert_types method: GET path: /api/alert_manager/v1/types description: Fetches all registered alert types. - name: register_new_alert_type method: POST path: /api/alert_manager/v1/types description: Registers a new alert type. - name: fetch_an_alert_type_by_id method: GET path: /api/alert_manager/v1/types/{id} description: Fetch registered alert type by ID. - name: unregister_an_alert_type_by_id method: DELETE path: /api/alert_manager/v1/types/{id} description: Unregisters the alert type. All alerts of this type will be disabled. - name: fetch_partner_s_customer_alerts_count method: GET path: /api/alert_manager/v1/customer_alerts_count description: 'Fetches count of alerts per customer. This API uses extended barrier mode by default. Response does not include customers with no alerts. ' - name: fetch_alerts_grouped_per_customer method: GET path: /api/alert_manager/v1/customer_alerts description: 'Fetches alerts of the specified customers. This API uses extended barrier mode by default. ' - name: get_count_of_active_alerts_and_last_modification_time method: GET path: /api/alert_manager/v1/stats description: 'Returns count of active alerts and last modification time. ' - name: mark_alert_as_false_positive method: PATCH path: /api/alert_manager/v1/alerts/{id}/false_positive description: Marks or unmarks alert as false positive. - api: Resource and Policy Management API v4 items: - name: fetch_a_list_of_policies method: GET path: /api/policy_management/v4/policies description: '' - name: create_a_policy method: POST path: /api/policy_management/v4/policies description: Creates a policy. - name: delete_policies method: DELETE path: /api/policy_management/v4/policies description: '' - name: modify_policies_favorite_order_and_properties method: PATCH path: /api/policy_management/v4/policies/favorite description: '' - name: fetch_a_policy method: GET path: /api/policy_management/v4/policies/{policy_id} description: '' - name: delete_a_policy method: DELETE path: /api/policy_management/v4/policies/{policy_id} description: '' - name: update_a_policy method: PATCH path: /api/policy_management/v4/policies/{policy_id} description: Updates a policy. - name: create_a_protection_policy_draft method: POST path: /api/policy_management/v4/drafts description: Starts a draft for building a new protection policy (via `new`) or editing an existing one (via `edit`). Returns a `Draft` that serves as a mutable workspace; persist it with `PUT /drafts/{draft_id}/state`. - name: fetch_a_protection_policy_draft method: GET path: /api/policy_management/v4/drafts/{draft_id} description: Returns the current state of the draft — its composite policy, resource context, state, and any validation issues. - name: cancel_a_protection_policy_draft method: DELETE path: /api/policy_management/v4/drafts/{draft_id} description: Discards the draft and all uncommitted changes. No policy is created or modified. - name: commit_or_cancel_a_protection_policy_draft method: PUT path: /api/policy_management/v4/drafts/{draft_id}/state description: Finalizes the draft — `done` commits it (creating or updating the policy), `cancelled` discards it. Supports save-as-template/temporary and moving context to a newly created policy. - name: set_a_protection_policy_draft_s_name method: PUT path: /api/policy_management/v4/drafts/{draft_id}/name description: Sets the display name of the draft's root policy; clears the default-name hint once an explicit name is set. - name: set_a_draft_s_resource_context method: PUT path: /api/policy_management/v4/drafts/{draft_id}/context description: Replaces the resource selection the draft applies to. Because context can affect any policy in the composite, the full updated draft is returned. - name: enable_or_disable_policies_in_a_draft method: PUT path: /api/policy_management/v4/drafts/{draft_id}/enabled_policies description: Bulk-toggles the `enabled` flag of individual policies within the draft composite, by ID. - name: set_a_draft_s_disabled_applications_context method: PUT path: /api/policy_management/v4/drafts/{draft_id}/disabled_applications_context description: Lists applications (by ID) to disable on commit to resolve application conflicts, instead of blocking the commit. - name: add_or_update_a_policy_in_a_draft method: POST path: /api/policy_management/v4/drafts/{draft_id}/policies description: Adds or updates a policy within the draft composite. Because the change may affect linked (downstream) policies, the full updated draft is returned. - name: remove_a_policy_from_a_draft method: DELETE path: /api/policy_management/v4/drafts/{draft_id}/policies/{policy_id} description: Removes the specified policy from the draft composite; linked downstream policies may be affected, so the full draft is returned. - name: enable_or_disable_a_policy_in_a_draft method: PUT path: /api/policy_management/v4/drafts/{draft_id}/policies/{policy_id}/enabled description: Sets the `enabled` flag of a single policy within the draft composite. - name: set_a_draft_policy_s_name method: PUT path: /api/policy_management/v4/drafts/{draft_id}/policies/{policy_id}/name description: Changes the name of the specified policy within the draft composite. - name: set_a_draft_policy_s_type method: PUT path: /api/policy_management/v4/drafts/{draft_id}/policies/{policy_id}/type description: Changes the type of the specified policy within the draft composite; may re-link dependent policies, so the full draft is returned. - name: set_a_draft_policy_s_comment method: PUT path: /api/policy_management/v4/drafts/{draft_id}/policies/{policy_id}/comment description: Sets the free-text comment of the specified policy within the draft composite. - name: update_a_draft_policy_s_settings method: PUT path: /api/policy_management/v4/drafts/{draft_id}/policies/{policy_id}/settings description: Applies a partial patch to the policy's settings (replace/add semantics; array fields may use `ArrayPatch`). - name: apply_a_policy method: POST path: /api/policy_management/v4/applications description: Creates a policy application that applies a protection policy to the specified resource. - name: fetch_a_list_of_policy_applications method: GET path: /api/policy_management/v4/applications description: Fetches a list of policy applications depending on provided filtering parameters. - name: remove_policy_applications method: DELETE path: /api/policy_management/v4/applications description: Removes a protection policy application on specific context. For multiple applications case, any critical, error or warning issues will be reported per application in the `issues` field of the response with code `200`. - name: fetch_applications_issue_statistics method: GET path: /api/policy_management/v4/applications/issues/statistics description: Fetches statistics for each issue occurred with applications. - name: execute_a_protection_policy method: PUT path: /api/policy_management/v4/applications/run description: Executes a protection policy on all resources that are subject to this policy application. - name: fetch_application_statuses_by_policy method: GET path: /api/policy_management/v4/policy_statuses description: 'Fetches a list of applications grouped by provided policy. Policies constituting the same `CompositePolicy` are considered as single logical item for filtering, sorting and paging. ' - name: fetch_a_list_of_all_resources method: GET path: /api/resource_management/v4/resources description: '' - name: delete_resources method: DELETE path: /api/resource_management/v4/resources description: '' - name: create_a_resource method: POST path: /api/resource_management/v4/resources description: '' - name: post_multiple_resources_in_one_request_from_a_single_agent method: POST path: /api/resource_management/v4/resources/batch description: '' - name: fetch_a_count_of_all_resources_that_match_filter_parameters method: GET path: /api/resource_management/v4/resources/count description: '' - name: fetch_a_resource_by_id method: GET path: /api/resource_management/v4/resources/{resource_internal_or_external_id} description: '' - name: fetch_a_list_of_resource_s_attributes method: GET path: /api/resource_management/v4/resources/{resource_internal_or_external_id}/attributes description: Fetches a list of resource's attributes from all namespaces. - name: fetch_the_protection_status_of_resources method: GET path: /api/resource_management/v4/resource_statuses description: '' - api: Agent Management REST API 2 items: - name: fetch_agents method: GET path: /api/agent_manager/v2/agents description: 'Fetches all registered agents seen from specified tenant. Result includes all agents registered in this tenant and in all its child tenants that don''t block parent access using visibility barrier. ' - name: delete_agents method: DELETE path: /api/agent_manager/v2/agents description: Cancels registration of the agents with Platform and deletes their service accounts. - name: fetch_agent method: GET path: /api/agent_manager/v2/agents/{agent_id} description: Fetches the specific agent. - api: Endpoint Detection and Response API 1.0 items: - name: fetch_incidents method: GET path: /api/mdr/v1/incidents description: 'Returns a list of incidents. The endpoint is is designed for use by MDR vendors to retrieve incidents for their customers and store them on their backend for future use. It is not intended for building UIs or for direct' - name: bulk_update_investigation_state method: POST path: /api/mdr/v1/incidents/investigation_state description: Post update for an investigation state accompanied with comment or post a new comment for multiple incidents by MDR vendor. - name: fetch_incident method: GET path: /api/mdr/v1/incidents/{incident_id} description: Returns incident detailed info. - name: update_investigation_state method: POST path: /api/mdr/v1/incidents/{incident_id}/investigation_state description: Post update for an investigation state accompanied with comment or post a new comment for an incident by MDR vendor. - name: initiate_response_action method: POST path: /api/mdr/v1/incidents/{incident_id}/response_action description: Perform a response action listed in Get IncidentDetails reply. - name: fetch_response_action_status method: GET path: /api/mdr/v1/incidents/{incident_id}/response_action description: Get Detailed status of initiated action.