generated: '2026-07-19'
method: derived
source: openapi/huntress-rest-openapi.json
standards:
  - id: oauth2
    conforms: true
    evidence: >-
      Remote MCP server publishes RFC 8414 OAuth Authorization Server metadata
      and RFC 9728 OAuth Protected Resource metadata (authorization_code +
      client_credentials, PKCE S256).
  - id: http-basic-auth
    conforms: true
    evidence: REST API securityDefinitions declares a `basic` scheme (API key + secret).
  - id: cursor-pagination
    conforms: true
    evidence: List endpoints use limit + page_token with a Pagination object (next_page_token/next_page_url).
  - id: webhooks
    conforms: true
    evidence: Publishes an OpenAPI 3.1 webhooks document (openapi/huntress-webhooks-openapi.json) with 11 event types.
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors are plain JSON message strings, not application/problem+json.
  - id: rfc9116-security-txt
    conforms: true
    evidence: /.well-known/security.txt present with Contact + Policy.
  - id: soc2
    conforms: true
    evidence: SOC 2 Type 2 report available via trust.huntress.com (SafeBase trust center).
  - id: gdpr
    conforms: true
    evidence: GDPR + CCPA + Data Processing Agreement documented at trust.huntress.com.
  - id: cmmc
    conforms: true
    evidence: CMMC Phase II baseline configuration guidance published at trust.huntress.com.