generated: '2026-08-19'
method: generated
source: openapi/_original/ + conventions/cisco-ise-conventions.yml + errors/cisco-ise-problem-types.yml
note: 'Generated by API Evangelist, not published by Cisco — Cisco ships no AGENTS.md or skill files for ISE. Every operationId
  referenced was verified to exist verbatim in the harvested documents. Four of the five are deliberately read-biased: ISE
  writes change live network access policy, and there is no idempotency key to make a retry safe.'
skills:
- file: cisco-ise-alarms-and-webhooks.md
  name: Wire Cisco ISE alarms to a webhook
  description: List alarm rules, create a webhook configuration, associate alarms with it, and verify delivery — the event-driven
    integration path introduced in ISE 3.6.
  api: openapi/_original/cisco-ise-open-api-webhooks.yaml
  operations:
  - getAllAlarmRules
  - getAlarmRuleById
  - getAllWebhooks
  - createWebhook
  - getWebhookById
  - updateWebhook
  - associateAlarmRules
  - getAlarmsByWebhookId
  - getRecentWebhookDeliveriesByConfigurationId
  - setWebhookConfigStatus
  - removeWebhook
- file: cisco-ise-certificate-lifecycle.md
  name: Manage Cisco ISE system certificates
  description: Inventory system and trusted certificates, generate a CSR, bind the signed certificate back, and renew expiring
    certificates — the PKI flow that keeps 802.1X working.
  api: openapi/_original/cisco-ise-open-api-certificates.yaml
  operations:
  - getSystemCertificates
  - getSystemCertificateById
  - getTrustedCertificates
  - getTrustedCertificateById
  - generateCSR
  - getCSRs
  - getCSRById
  - exportCSR
  - bindCSR
  - renewCerts
  - importSystemCert
  - importTrustCert
  - generateSelfSignedCertificate
  - deleteSystemCertificateById
- file: cisco-ise-config-backup.md
  name: Take and verify a Cisco ISE configuration backup
  description: Register a repository, trigger a configuration backup, poll it to completion, and confirm the last-backup status
    — the safe operational flow to run before any change window.
  api: openapi/_original/cisco-ise-open-api-backuprestore.yaml
  operations:
  - getRepositories
  - createRepository
  - getRepositoryFiles
  - configBackup
  - getLastConfigBackupStatus
  - cancelBackup
  - createScheduledConfigBackup
  - getAllTaskStatus
  - getTaskStatus
- file: cisco-ise-endpoint-inventory.md
  name: Inventory and classify endpoints in Cisco ISE
  description: Read the endpoint inventory an ISE deployment holds, summarise it by device type, and look up one endpoint
    by MAC — the read-only reconnaissance flow before any policy change.
  api: openapi/_original/cisco-ise-open-api-endpoints.yaml
  operations:
  - list_1
  - get_1
  - getDeviceTypeSummary
  - createEndPointTask
- file: cisco-ise-trustsec-review.md
  name: Review Cisco ISE TrustSec segmentation
  description: Read the TrustSec posture of an ISE deployment — security groups, SGT reservations, classification and inbound
    rules, ACI integration and general settings — without changing enforcement.
  api: openapi/_original/cisco-ise-open-api-trustsec.yaml
  operations:
  - getSecurityGroups
  - getTrustsecGeneralSettings
  - getClassificationRuleList
  - getClassificationRuleById
  - getIngressFilterList
  - getIngressFilterById
  - getFiltersForSgt
  - getReservedSgtRanges
  - getACIConnections
  - getCTSHttpsServers
  - getSgtReservedRanges
  - getSgtReservedRange