generated: '2026-09-19'
method: derived
source: mcp/airmdr-mcp-tools-list.json (live tools/list) x openapi/airmdr-case-manager-openapi.yml + openapi/airmdr-user-management-service-openapi.yml
surfaces:
  openapi:
  - openapi/airmdr-case-manager-openapi.yml
  - openapi/airmdr-user-management-service-openapi.yml
  mcp:
    url: https://docs.airmdr.com/mcp
    gated: false
    schema: live (tools/list 200, inputSchema present)
  graphql: null
crosswalk: []
mcp_only:
- tool: search_air_mdr
  reason: Documentation-platform tool (Mintlify docs MCP); operates on the docs corpus, not on any Case Manager / User Management
    REST operation
- tool: query_docs_filesystem_air_mdr
  reason: Documentation-platform tool (Mintlify docs MCP); operates on the docs corpus, not on any Case Manager / User Management
    REST operation
- tool: submit_feedback
  reason: Documentation-platform tool (Mintlify docs MCP); operates on the docs corpus, not on any Case Manager / User Management
    REST operation
rest_only:
- operationId: createCaseAPI
  method: POST
  path: /case
  spec: case-manager
- operationId: getCaseAPI
  method: GET
  path: /case/{case_uuid}
  spec: case-manager
- operationId: updateCaseAPI
  method: PATCH
  path: /case/{case_uuid}
  spec: case-manager
- operationId: emailCaseDetailsAPI
  method: POST
  path: /case/{case_uuid}/email
  spec: case-manager
- operationId: getCaseFromIdAPI
  method: GET
  path: /case/id/{case_id}
  spec: case-manager
- operationId: getCasesForOrgAPI
  method: POST
  path: /case/list
  spec: case-manager
- operationId: archiveCasesAPI
  method: DELETE
  path: /case/bulk
  spec: case-manager
- operationId: createCaseAPIV2
  method: POST
  path: /v2/case
  spec: case-manager
- operationId: getCaseAPIV2
  method: GET
  path: /v2/case/{case_uuid}
  spec: case-manager
- operationId: updateCaseAPIV2
  method: PATCH
  path: /v2/case/{case_uuid}
  spec: case-manager
- operationId: archiveCaseAPI
  method: DELETE
  path: /v2/case/{case_uuid}
  spec: case-manager
- operationId: deleteCaseAPI
  method: DELETE
  path: /v2/case/{case_uuid}/hard_delete
  spec: case-manager
- operationId: ignoreCaseMetricAPI
  method: PATCH
  path: /v2/case/{case_uuid}/ignore_case_metric
  spec: case-manager
- operationId: addCaseFindingAPI
  method: POST
  path: /v2/case/{case_uuid}/finding
  spec: case-manager
- operationId: updateCaseFindingAPI
  method: PATCH
  path: /v2/case/{case_uuid}/finding/{finding_uuid}
  spec: case-manager
- operationId: deleteCaseFindingAPI
  method: DELETE
  path: /v2/case/{case_uuid}/finding/{finding_uuid}
  spec: case-manager
- operationId: emailCaseFindingDetailsAPIV2
  method: POST
  path: /v2/case/{case_uuid}/finding/{finding_uuid}/email
  spec: case-manager
- operationId: getEvidenceAPI
  method: GET
  path: /v2/case/{case_uuid}/finding/{finding_uuid}/evidence/{evidence_uuid}
  spec: case-manager
- operationId: uploadCaseAttachmentAPI
  method: POST
  path: /v2/case/{case_uuid}/attachment
  spec: case-manager
- operationId: listCaseAttachmentsAPI
  method: GET
  path: /v2/case/{case_uuid}/attachments
  spec: case-manager
- operationId: deleteCaseAttachmentAPI
  method: DELETE
  path: /v2/case/{case_uuid}/attachment/{attachment_uuid}
  spec: case-manager
- operationId: getCaseAttachmentContentAPI
  method: GET
  path: /v2/case/{case_uuid}/attachment/{attachment_uuid}/content
  spec: case-manager
- operationId: emailCaseDetailsAPIV2
  method: POST
  path: /v2/case/{case_uuid}/email
  spec: case-manager
- operationId: getCasesForOrgAPIV2
  method: POST
  path: /v2/case/list
  spec: case-manager
- operationId: linkChatSessionToCaseAPIV2
  method: POST
  path: /v2/case/{case_identifier}/chat_session/{chat_session_id}/link
  spec: case-manager
- operationId: unlinkChatSessionToCaseAPIV2
  method: POST
  path: /v2/case/{case_identifier}/chat_session/{chat_session_id}/unlink
  spec: case-manager
- operationId: getLinkedCasesForSessionAPIV2
  method: GET
  path: /v2/case/chat_session/{chat_session_id}
  spec: case-manager
- operationId: linkCasesAPIV2
  method: POST
  path: /v2/case/{case_identifier}/cases/link
  spec: case-manager
- operationId: unlinkCaseAPIV2
  method: POST
  path: /v2/case/{primary_case_identifier}/secondary/case/{secondary_case_identifier}/unlink
  spec: case-manager
- operationId: unlinkAlertToCaseAPIV2
  method: POST
  path: /v2/case/{case_identifier}/alert/{alert_uuid}/unlink
  spec: case-manager
- operationId: reindexCasesV2API
  method: POST
  path: /v2/case/reindex
  spec: case-manager
- operationId: archiveCasesAPIV2
  method: DELETE
  path: /v2/case/bulk
  spec: case-manager
- operationId: bulkDeleteCasesAPIV2
  method: DELETE
  path: /v2/case/bulk/hard_delete
  spec: case-manager
- operationId: addCaseCommentAPI
  method: POST
  path: /v2/case/{case_uuid}/comment
  spec: case-manager
- operationId: updateCaseCommentAPI
  method: PATCH
  path: /v2/case/{case_uuid}/comment/{comment_id}
  spec: case-manager
- operationId: deleteCaseCommentAPI
  method: DELETE
  path: /v2/case/{case_uuid}/comment/{comment_id}
  spec: case-manager
- operationId: getCaseCommentsListAPI
  method: GET
  path: /v2/case/{case_uuid}/comments
  spec: case-manager
- operationId: getCaseHistoryAPI
  method: GET
  path: /v2/case/{case_uuid}/history
  spec: case-manager
- operationId: getCaseAtHistoryEntryAPI
  method: GET
  path: /v2/case/{case_uuid}/history/{change_log_id}/case
  spec: case-manager
- operationId: listCaseNamedVersionsAPI
  method: GET
  path: /v2/case/{case_uuid}/versions
  spec: case-manager
- operationId: createCaseNamedVersionAPI
  method: POST
  path: /v2/case/{case_uuid}/history/{change_log_id}/version
  spec: case-manager
- operationId: renameCaseNamedVersionAPI
  method: PATCH
  path: /v2/case/{case_uuid}/history/{change_log_id}/version
  spec: case-manager
- operationId: deleteCaseNamedVersionAPI
  method: DELETE
  path: /v2/case/{case_uuid}/history/{change_log_id}/version
  spec: case-manager
- operationId: getCaseWatchersAPI
  method: GET
  path: /v2/case/{case_uuid}/watchers
  spec: case-manager
- operationId: addCaseWatchersAPI
  method: POST
  path: /v2/case/{case_uuid}/watchers
  spec: case-manager
- operationId: removeCaseWatchersAPI
  method: DELETE
  path: /v2/case/{case_uuid}/watchers
  spec: case-manager
- operationId: cloneCaseAPI
  method: POST
  path: /v2/case/clone
  spec: case-manager
- operationId: reinvestigateCaseAPI
  method: POST
  path: /v2/case/{case_uuid}/reinvestigate
  spec: case-manager
- operationId: listCaseCommentsAPI
  method: POST
  path: /v2/case/comments/list
  spec: case-manager
- operationId: reindexCasesAPI
  method: POST
  path: /case/reindex
  spec: case-manager
- operationId: addOrgCodeAPI
  method: POST
  path: /case/orgcode/migrate
  spec: case-manager
- operationId: purgeCacheAPI
  method: POST
  path: /case/cache/purge
  spec: case-manager
- operationId: linkChatSessionToCaseAPI
  method: POST
  path: /case/{case_identifier}/chat_session/{chat_session_id}/link
  spec: case-manager
- operationId: unlinkChatSessionToCaseAPI
  method: POST
  path: /case/{case_identifier}/chat_session/{chat_session_id}/unlink
  spec: case-manager
- operationId: getLinkedCasesForSessionAPI
  method: GET
  path: /case/chat_session/{chat_session_id}
  spec: case-manager
- operationId: linkCasesAPI
  method: POST
  path: /case/{case_identifier}/cases/link
  spec: case-manager
- operationId: unlinkCaseAPI
  method: POST
  path: /case/{primary_case_identifier}/secondary/case/{secondary_case_identifier}/unlink
  spec: case-manager
- operationId: getCaseMetrics
  method: GET
  path: /case/metrics
  spec: case-manager
- operationId: getCaseAnalyticsMetrics
  method: GET
  path: /case/analytics/metrics
  spec: case-manager
- operationId: getCaseSocPerformanceMetrics
  method: GET
  path: /case/soc/metrics
  spec: case-manager
- operationId: getCaseExecutiveMetrics
  method: GET
  path: /case/executive/metrics
  spec: case-manager
- operationId: getCaseMetricsLLMSummaryAPI
  method: GET
  path: /case/metrics/llm/summary
  spec: case-manager
- operationId: getDetailedCaseMetricsAPI
  method: POST
  path: /case/metrics/detailed
  spec: case-manager
- operationId: createCaseDecisionMetricsAPI
  method: POST
  path: /case_decision_metrics
  spec: case-manager
- operationId: updateCaseDecisionMetricsAPI
  method: PATCH
  path: /case_decision_metrics/{case_identifier}
  spec: case-manager
- operationId: getCaseDecisionMetricsAPI
  method: GET
  path: /case_decision_metrics/{case_identifier}
  spec: case-manager
- operationId: createCaseExecutionMetricsAPI
  method: POST
  path: /case_execution_metrics
  spec: case-manager
- operationId: getCaseExecutionMetricsAPI
  method: GET
  path: /case_execution_metrics/{execution_id}
  spec: case-manager
- operationId: getCaseScoreAPI
  method: GET
  path: /case/{case_identifier}/score
  spec: case-manager
- operationId: generateCaseScoreAPI
  method: POST
  path: /case/{case_identifier}/score
  spec: case-manager
- operationId: createScoringGuidelinesAPI
  method: POST
  path: /scoring-guidelines
  spec: case-manager
- operationId: getScoringGuidelinesAPI
  method: GET
  path: /scoring-guidelines/{guideline_id}
  spec: case-manager
- operationId: updateScoringGuidelinesAPI
  method: PUT
  path: /scoring-guidelines/{guideline_id}
  spec: case-manager
- operationId: listCaseScoresAPI
  method: POST
  path: /case/score/list
  spec: case-manager
- operationId: generateBulkCaseScoresAPI
  method: POST
  path: /case/score/bulk
  spec: case-manager
- operationId: createAlertsAPI
  method: POST
  path: /alerts
  spec: case-manager
- operationId: analyzeAlertAPI
  method: POST
  path: /alerts/analyze
  spec: case-manager
- operationId: exportAlertsAPI
  method: POST
  path: /alerts/export
  spec: case-manager
- operationId: getAlertAPI
  method: GET
  path: /alerts/{alert_id}
  spec: case-manager
- operationId: updateAlertAPI
  method: PATCH
  path: /alerts/{alert_id}
  spec: case-manager
- operationId: investigateAlertAPI
  method: POST
  path: /alerts/{alert_id}/investigate
  spec: case-manager
- operationId: investigateAlertAgenticPreviewAPI
  method: POST
  path: /alerts/{alert_id}/investigate/agentic-preview
  spec: case-manager
- operationId: bulkHardDeleteAlertsAPI
  method: DELETE
  path: /alerts/bulk/hard_delete
  spec: case-manager
- operationId: hardDeleteAlertAPI
  method: DELETE
  path: /alerts/{alert_id}/hard_delete
  spec: case-manager
- operationId: listAlertTypesAPI
  method: GET
  path: /alert_types
  spec: case-manager
- operationId: listAlertTypesByProvidersAPI
  method: POST
  path: /alert_types/list
  spec: case-manager
- operationId: upsertAlertTypeAPI
  method: PUT
  path: /{provider_id}/alert_types
  spec: case-manager
- operationId: listAlertTypesByProviderAPI
  method: POST
  path: /{provider_id}/alert_types/list
  spec: case-manager
- operationId: getCostTrimAnalysis
  method: GET
  path: /cost_trim_analysis
  spec: case-manager
- operationId: getInvestigationTiers
  method: GET
  path: /investigation_tiers
  spec: case-manager
- operationId: updateInvestigationTiers
  method: PATCH
  path: /investigation_tiers
  spec: case-manager
- operationId: getInvestigationCredits
  method: GET
  path: /investigation_credits
  spec: case-manager
- operationId: getInvestigationCreditUsage
  method: GET
  path: /investigation_credits/usage
  spec: case-manager
- operationId: chargeInvestigationCredits
  method: POST
  path: /internal/investigation_credits/charge
  spec: case-manager
- operationId: refundInvestigationCredits
  method: POST
  path: /internal/investigation_credits/refund
  spec: case-manager
- operationId: getAlertBudgetOverview
  method: GET
  path: /alert_budget_overview
  spec: case-manager
- operationId: getAlertSkipList
  method: GET
  path: /alert_skip_list
  spec: case-manager
- operationId: applyAlertSkip
  method: POST
  path: /alert_skip_list/apply
  spec: case-manager
- operationId: holdAlertSkip
  method: POST
  path: /alert_skip_list/hold
  spec: case-manager
- operationId: listMitreTacticsAPI
  method: GET
  path: /mitre_tactics
  spec: case-manager
- operationId: addMitreTacticsAPI
  method: POST
  path: /mitre_tactics
  spec: case-manager
- operationId: listAlertsAPI
  method: POST
  path: /alerts_list
  spec: case-manager
- operationId: getAlertbyExecutionIDAPI
  method: GET
  path: /alerts/execution/{execution_id}
  spec: case-manager
- operationId: reindexAlertsAPI
  method: POST
  path: /alerts/reindex
  spec: case-manager
- operationId: createWebhookAPI
  method: POST
  path: /webhooks
  spec: case-manager
- operationId: listWebhooksAPI
  method: GET
  path: /webhooks
  spec: case-manager
- operationId: deleteWebhookAPI
  method: DELETE
  path: /webhooks/{webhook_id}
  spec: case-manager
- operationId: createAlertFromWebhookAPI
  method: POST
  path: /webhooks/{webhook_id}/{secret}/alerts
  spec: case-manager
- operationId: listAlertCatalogTypeAPI
  method: POST
  path: /alert_catalog
  spec: case-manager
- operationId: listAlertCatalogProvidersAPI
  method: GET
  path: /alert_catalog/providers
  spec: case-manager
- operationId: getAlertCatalogDetailsAPI
  method: GET
  path: /alert_catalog/details
  spec: case-manager
- operationId: getCaseInAlertCatalogAPI
  method: GET
  path: /alert_catalog/details/case/{case_id}
  spec: case-manager
- operationId: upsertCaseInAlertCatalogAPI
  method: PUT
  path: /alert_catalog/details/case/{case_id}
  spec: case-manager
- operationId: GenerateAlertUsingLLMAPI
  method: POST
  path: /alert_catalog/alert
  spec: case-manager
- operationId: getAlertCatalogExecutionHistoryAPI
  method: GET
  path: /alert_catalog/executions
  spec: case-manager
- operationId: getAlertCatalogByExecutionIdAPI
  method: GET
  path: /alert_catalog/{execution_id}
  spec: case-manager
- operationId: getDemoRequestedStatusAPI
  method: GET
  path: /alert_catalog/demo_requested
  spec: case-manager
- operationId: requestDemoAPI
  method: POST
  path: /alert_catalog/demo_requested
  spec: case-manager
- operationId: generateSecurityReportAPI
  method: POST
  path: /v2/security-report/generate
  spec: case-manager
- operationId: listSecurityReportsAPI
  method: POST
  path: /v2/security-report/list
  spec: case-manager
- operationId: getSecurityReportAPI
  method: GET
  path: /v2/security-report/{report_id}
  spec: case-manager
- operationId: updateSecurityReportAPI
  method: PATCH
  path: /v2/security-report/{report_id}
  spec: case-manager
- operationId: deleteSecurityReportAPI
  method: DELETE
  path: /v2/security-report/{report_id}
  spec: case-manager
- operationId: emailSecurityReportAPI
  method: POST
  path: /v2/security-report/{report_id}/email
  spec: case-manager
- operationId: listReportWatchersAPI
  method: GET
  path: /v2/security-report/watchers
  spec: case-manager
- operationId: upsertReportWatcherAPI
  method: PUT
  path: /v2/security-report/watchers
  spec: case-manager
- operationId: deleteReportWatcherAPI
  method: DELETE
  path: /v2/security-report/watchers
  spec: case-manager
- operationId: getPingAPI
  method: GET
  path: /ping
  spec: case-manager
- operationId: createSavedViewAPI
  method: POST
  path: /v2/case/views
  spec: case-manager
- operationId: listSavedViewsAPI
  method: GET
  path: /v2/case/views
  spec: case-manager
- operationId: updateSavedViewAPI
  method: PATCH
  path: /v2/case/views/{view_id}
  spec: case-manager
- operationId: deleteSavedViewAPI
  method: DELETE
  path: /v2/case/views/{view_id}
  spec: case-manager
- operationId: getUserViewPreferenceAPI
  method: GET
  path: /v2/case/views/preference
  spec: case-manager
- operationId: updateUserViewPreferenceAPI
  method: PUT
  path: /v2/case/views/preference
  spec: case-manager
- operationId: updateTemporaryFiltersAPI
  method: PATCH
  path: /v2/case/views/preference/temp-filter
  spec: case-manager
- operationId: deleteTemporaryFiltersAPI
  method: DELETE
  path: /v2/case/views/preference/temp-filter
  spec: case-manager
- operationId: clearSelectedViewPreferenceAPI
  method: DELETE
  path: /v2/case/views/preference/selected-view
  spec: case-manager
- operationId: createCustomCaseFieldsAPI
  method: POST
  path: /v2/case/custom/fields
  spec: case-manager
- operationId: getCustomCaseFieldsAPI
  method: POST
  path: /v2/case/custom/fields/list
  spec: case-manager
- operationId: deleteCustomCaseFieldAPI
  method: DELETE
  path: /v2/case/custom/fields/{field_id}
  spec: case-manager
- operationId: updateCustomCaseFieldsAPI
  method: PATCH
  path: /v2/case/custom/fields/{field_id}
  spec: case-manager
- operationId: getCustomCaseFieldValuesAPI
  method: GET
  path: /v2/case/custom/fields/values
  spec: case-manager
- operationId: getCaseConfigurationAPI
  method: GET
  path: /v2/case/configuration
  spec: case-manager
- operationId: updateCaseConfigurationAPI
  method: PATCH
  path: /v2/case/configuration
  spec: case-manager
- operationId: createCaseConfigurationAPI
  method: POST
  path: /v2/case/configuration
  spec: case-manager
- operationId: copyCaseConfigurationAPI
  method: POST
  path: /v2/case/configuration/copy
  spec: case-manager
- operationId: getDashboardChartConfigAPI
  method: GET
  path: /v2/case/dashboard/chart-config
  spec: case-manager
- operationId: updateDashboardChartConfigAPI
  method: PATCH
  path: /v2/case/dashboard/chart-config
  spec: case-manager
- operationId: listSystemWidgetsAPI
  method: GET
  path: /v2/dashboard/system-widgets
  spec: case-manager
- operationId: listDashboardsAPI
  method: GET
  path: /v2/dashboard
  spec: case-manager
- operationId: createDashboardAPI
  method: POST
  path: /v2/dashboard
  spec: case-manager
- operationId: getDashboardSnapshotAPI
  method: GET
  path: /v2/dashboard/{dashboard_id}
  spec: case-manager
- operationId: deleteDashboardAPI
  method: DELETE
  path: /v2/dashboard/{dashboard_id}
  spec: case-manager
- operationId: updateDashboardAPI
  method: PATCH
  path: /v2/dashboard/{dashboard_id}
  spec: case-manager
- operationId: emailCustomDashboardAPI
  method: POST
  path: /v2/dashboard/{dashboard_id}/email
  spec: case-manager
- operationId: createWidgetAPI
  method: POST
  path: /v2/dashboard/{dashboard_id}/widget
  spec: case-manager
- operationId: createWidgetsAPI
  method: POST
  path: /v2/dashboard/{dashboard_id}/widgets
  spec: case-manager
- operationId: updateWidgetAPI
  method: PATCH
  path: /v2/dashboard/{dashboard_id}/widget/{widget_id}
  spec: case-manager
- operationId: deleteWidgetAPI
  method: DELETE
  path: /v2/dashboard/{dashboard_id}/widget/{widget_id}
  spec: case-manager
- operationId: listDashboardSchedulesAPI
  method: POST
  path: /v2/dashboard/{dashboard_id}/schedule/list
  spec: case-manager
- operationId: createDashboardScheduleAPI
  method: POST
  path: /v2/dashboard/{dashboard_id}/schedule
  spec: case-manager
- operationId: updateDashboardScheduleAPI
  method: PATCH
  path: /v2/dashboard/{dashboard_id}/schedule
  spec: case-manager
- operationId: deleteDashboardScheduleAPI
  method: DELETE
  path: /v2/dashboard/{dashboard_id}/schedule
  spec: case-manager
- operationId: listDashboardScheduleExecutionsAPI
  method: POST
  path: /v2/dashboard/{dashboard_id}/schedule/execution/list
  spec: case-manager
- operationId: getDashboardScheduleExecutionPdfAPI
  method: GET
  path: /v2/dashboard/{dashboard_id}/schedule/execution/{execution_id}/pdf
  spec: case-manager
- operationId: executeQueryAPI
  method: POST
  path: /v2/query/execute
  spec: case-manager
- operationId: validateQueryAPI
  method: POST
  path: /v2/query/validate
  spec: case-manager
- operationId: getQuerySchemaAPI
  method: GET
  path: /v2/query/schema
  spec: case-manager
- operationId: markAlertAgentInvestigatedAPI
  method: PATCH
  path: /alerts/{alert_id}/mark_agent_investigated
  spec: case-manager
- operationId: getInvestigationQuotaAPI
  method: GET
  path: /investigation_quota
  spec: case-manager
- operationId: deleteOrganizationAPI
  method: DELETE
  path: /case/delete_organization/{organization_code}
  spec: case-manager
- operationId: emailSocPerformanceReportAPI
  method: POST
  path: /case/soc/email
  spec: case-manager
- operationId: emailCaseAnalyticsReportAPI
  method: POST
  path: /case/analytics/email
  spec: case-manager
- operationId: listCaseActionsV1API
  method: POST
  path: /v1/actions
  spec: case-manager
- operationId: listRecentlyCompletedActionsAPI
  method: POST
  path: /v1/actions/recently_completed
  spec: case-manager
- operationId: createOrganizationAPI
  method: POST
  path: /organization
  spec: user-management-service
- operationId: getOrganizationListAPI
  method: GET
  path: /organization
  spec: user-management-service
- operationId: filterOrganizationAPI
  method: POST
  path: /organization/filter
  spec: user-management-service
- operationId: getOrganizationAPI
  method: GET
  path: /organization/{organization_identifier}
  spec: user-management-service
- operationId: updateOrganizationAPI
  method: PATCH
  path: /organization/{organization_identifier}
  spec: user-management-service
- operationId: deleteOrganizationAPI
  method: DELETE
  path: /organization/{organization_identifier}
  spec: user-management-service
- operationId: uploadOrganizationLogoAPI
  method: POST
  path: /organization/logo/upload
  spec: user-management-service
- operationId: uploadFileAPI
  method: POST
  path: /organization/file/upload
  spec: user-management-service
- operationId: getOrgAncestorsAPI
  method: GET
  path: /organization/ancestor
  spec: user-management-service
- operationId: getOrganizationInternalAPI
  method: GET
  path: /organization/{organization_identifier}/internal
  spec: user-management-service
- operationId: createUserGroupAPI
  method: POST
  path: /usergroup
  spec: user-management-service
- operationId: filterUserGroupsAPI
  method: POST
  path: /usergroup/filter
  spec: user-management-service
- operationId: getUserGroupAPI
  method: GET
  path: /usergroup/{user_group_id}
  spec: user-management-service
- operationId: updateUserGroupAPI
  method: PATCH
  path: /usergroup/{user_group_id}
  spec: user-management-service
- operationId: deleteUserGroupAPI
  method: DELETE
  path: /usergroup/{user_group_id}
  spec: user-management-service
- operationId: authenticateUserAPI
  method: POST
  path: /user/authenticate
  spec: user-management-service
- operationId: loginUserAPI
  method: POST
  path: /user/login
  spec: user-management-service
- operationId: getLoginUrlAPI
  method: POST
  path: /user/login/url
  spec: user-management-service
- operationId: logoutUserAPI
  method: GET
  path: /user/logout
  spec: user-management-service
- operationId: getSessionAPI
  method: GET
  path: /session
  spec: user-management-service
- operationId: updateSessionAPI
  method: PUT
  path: /session
  spec: user-management-service
- operationId: createUserAPI
  method: POST
  path: /user
  spec: user-management-service
- operationId: filterUsersAPI
  method: POST
  path: /user/filter
  spec: user-management-service
- operationId: filterLoggedInUsersAPI
  method: POST
  path: /user/logged-in
  spec: user-management-service
- operationId: bulkDeleteUsersAPI
  method: POST
  path: /user/bulk-delete
  spec: user-management-service
- operationId: fetchDefaultUserAPI
  method: GET
  path: /user/default
  spec: user-management-service
- operationId: fetchUserAPI
  method: GET
  path: /user/{user_id}
  spec: user-management-service
- operationId: updateUserAPI
  method: PATCH
  path: /user/{user_id}
  spec: user-management-service
- operationId: deleteUserAPI
  method: DELETE
  path: /user/{user_id}
  spec: user-management-service
- operationId: fetchUserFromEmailAPI
  method: GET
  path: /user/email/{email_id}
  spec: user-management-service
- operationId: verifyEmailAPI
  method: POST
  path: /user/verify/bulk
  spec: user-management-service
- operationId: setPasswordAPI
  method: POST
  path: /set_password
  spec: user-management-service
- operationId: forgotPasswordAPI
  method: POST
  path: /forgot_password
  spec: user-management-service
- operationId: changePasswordAPI
  method: POST
  path: /change_password
  spec: user-management-service
- operationId: forcePasswordResetAPI
  method: POST
  path: /force_password_reset
  spec: user-management-service
- operationId: registerTrialAPI
  method: POST
  path: /trial/register
  spec: user-management-service
- operationId: createAPITokenForUserAPI
  method: POST
  path: /users/tokens
  spec: user-management-service
- operationId: listTokensForUserAPI
  method: GET
  path: /users/tokens
  spec: user-management-service
- operationId: createAPITokenForSlackWorkflowAPI
  method: POST
  path: /users/tokens/slack
  spec: user-management-service
- operationId: deleteTokenAPI
  method: DELETE
  path: /users/tokens/{token_id}
  spec: user-management-service
- operationId: filterFeaturePermissionsAPI
  method: POST
  path: /users/{user_id}/feature-permissions
  spec: user-management-service
- operationId: listPermissionsAPI
  method: GET
  path: /permission
  spec: user-management-service
- operationId: listDisabledPermissionsAPI
  method: GET
  path: /permission/disabled
  spec: user-management-service
- operationId: getOrganizationInvestigationConfigurationAPI
  method: GET
  path: /organization/{organization_identifier}/investigation-configuration
  spec: user-management-service
- operationId: getOrganizationCreditContextAPI
  method: GET
  path: /organization/{organization_identifier}/credit-context
  spec: user-management-service
- operationId: getOrganizationFeaturesAPI
  method: GET
  path: /organization/{organization_identifier}/features
  spec: user-management-service
- operationId: updateOrganizationFeaturesAPI
  method: PATCH
  path: /organization/{organization_identifier}/features
  spec: user-management-service
- operationId: restoreMetabaseResourcesAPI
  method: POST
  path: /organization/{organization_identifier}/metabase/restore
  spec: user-management-service
- operationId: getMetabaseSessionAPI
  method: GET
  path: /organization/metabase/session
  spec: user-management-service
- operationId: ListOrganizationRBACTemplateAPI
  method: GET
  path: /organization/rbac/template
  spec: user-management-service
- operationId: createOrganizationRBACTemplateAPI
  method: POST
  path: /organization/rbac/template
  spec: user-management-service
- operationId: getOrganizationRBACTemplateAPI
  method: GET
  path: /organization/rbac/template/{template_id}
  spec: user-management-service
- operationId: updateOrganizationRBACTemplateAPI
  method: PUT
  path: /organization/rbac/template/{template_id}
  spec: user-management-service
- operationId: deleteOrganizationRBACTemplateAPI
  method: DELETE
  path: /organization/rbac/template/{template_id}
  spec: user-management-service
- operationId: getAccessibleOrgsRBACAPI
  method: POST
  path: /organization/rbac/accessible
  spec: user-management-service
- operationId: getAncestorOrgsRBACAPI
  method: POST
  path: /organization/rbac/ancestors
  spec: user-management-service
- operationId: listOrganizationRBACTemplatePermissionAPI
  method: GET
  path: /organization/rbac/permissions
  spec: user-management-service
- operationId: ListAllowedRBACMovementAPI
  method: GET
  path: /organization/rbac/allowed_movement
  spec: user-management-service
- operationId: CrossEnvSyncOrgAPI
  method: POST
  path: /internal/sync/org/{organization_id}
  spec: user-management-service
- operationId: ping
  method: GET
  path: /ping
  spec: user-management-service
coverage:
  mcp_tools: 3
  tools_bound_to_rest: 0
  rest_operations: 235
  rest_operations_with_tool: 0
note: 'Zero overlap by construction: the only MCP server AirMDR exposes is the documentation MCP. No tool calls the platform
  API, so every REST operation is rest_only and every tool is mcp_only. Recorded so the divergence is data rather than silence.'