naftiko: 1.0.0-alpha2
info:
  label: InsightVM API — Policy
  description: 'InsightVM API — Policy. 26 operations. Lead operation: Policies For Asset. Self-contained Naftiko capability covering one business surface.'
  tags:
  - Rapid7
  - Policy
  created: '2026-05-20'
  modified: '2026-05-20'
binds:
- namespace: env
  keys:
    RAPID7_API_KEY: RAPID7_API_KEY
capability:
  consumes:
  - type: http
    namespace: insightvm-console-swagger-policy
    baseUri: https://localhost:3780
    description: InsightVM API — Policy business capability. Self-contained, no shared references.
    resources:
    - name: api-3-assets-assetid-policies
      path: /api/3/assets/{assetId}/policies
      operations:
      - name: getpoliciesforasset
        method: GET
        description: Policies For Asset
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
        - name: applicableOnly
          in: query
          type: boolean
          description: An optional boolean parameter indicating the policies retrieved should only include those with a policy compliance status of either a PASS of FAIL result. Default value is `false`, which will also inc
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-assets-assetid-policies-policyid-children
      path: /api/3/assets/{assetId}/policies/{policyId}/children
      operations:
      - name: getassetpolicychildren
        method: GET
        description: Policy Rules or Groups Directly Under Policy For Asset
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
    - name: api-3-assets-assetid-policies-policyid-groups-groupid-childr
      path: /api/3/assets/{assetId}/policies/{policyId}/groups/{groupId}/children
      operations:
      - name: getassetpolicygroupchildren
        method: GET
        description: Policy Rules or Groups Directly Under Policy Group For Asset
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: groupId
          in: path
          type: integer
          description: The identifier of the policy group.
          required: true
    - name: api-3-assets-assetid-policies-policyid-groups-groupid-rules
      path: /api/3/assets/{assetId}/policies/{policyId}/groups/{groupId}/rules
      operations:
      - name: getpolicygroupruleswithassetassessment
        method: GET
        description: Policy Rules Under Policy Group For Asset
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: groupId
          in: path
          type: integer
          description: The identifier of the policy group.
          required: true
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-assets-assetid-policies-policyid-rules
      path: /api/3/assets/{assetId}/policies/{policyId}/rules
      operations:
      - name: getassetpolicyrulessummary
        method: GET
        description: Policy Rules For Asset
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies
      path: /api/3/policies
      operations:
      - name: getpolicies
        method: GET
        description: Policies
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: filter
          in: query
          type: string
          description: Filters the retrieved policies with those whose titles that match the parameter.
        - name: scannedOnly
          in: query
          type: boolean
          description: Flag indicating the policies retrieved should only include those with Pass or Fail compliance results. The list of scanned policies is based on the user's list of accessible assets.
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-id-children
      path: /api/3/policies/{id}/children
      operations:
      - name: getpolicychildren
        method: GET
        description: Policy Rules or Groups Directly Under Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: The identifier of the policy
          required: true
    - name: api-3-policies-policyid
      path: /api/3/policies/{policyId}
      operations:
      - name: getpolicy
        method: GET
        description: Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
    - name: api-3-policies-policyid-assets
      path: /api/3/policies/{policyId}/assets
      operations:
      - name: getpolicyassetresults
        method: GET
        description: Policy Asset Results
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: applicableOnly
          in: query
          type: boolean
          description: An optional boolean parameter indicating the assets retrieved should only include those with rule results of either PASS or FAIL. Default value is `false`, which will also include assets with a compli
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-policyid-assets-assetid
      path: /api/3/policies/{policyId}/assets/{assetId}
      operations:
      - name: getpolicyassetresult
        method: GET
        description: Policy Asset Result
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
    - name: api-3-policies-policyid-groups
      path: /api/3/policies/{policyId}/groups
      operations:
      - name: getpolicygroups
        method: GET
        description: Policy Groups
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-policyid-groups-groupid
      path: /api/3/policies/{policyId}/groups/{groupId}
      operations:
      - name: getpolicygroup
        method: GET
        description: Policy Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: groupId
          in: path
          type: integer
          description: The identifier of the policy group.
          required: true
    - name: api-3-policies-policyid-groups-groupid-assets
      path: /api/3/policies/{policyId}/groups/{groupId}/assets
      operations:
      - name: getpolicygroupassetresults
        method: GET
        description: Assets Compliance For Policy Rules Under Policy Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: groupId
          in: path
          type: integer
          description: The identifier of the policy group.
          required: true
        - name: applicableOnly
          in: query
          type: boolean
          description: An optional boolean parameter indicating the assets retrieved should only include those with rule results of either PASS or FAIL. Default value is `false`, which will also include assets with a compli
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-policyid-groups-groupid-assets-assetid
      path: /api/3/policies/{policyId}/groups/{groupId}/assets/{assetId}
      operations:
      - name: getpolicygroupassetresult
        method: GET
        description: Asset Compliance For Policy Rules Under Policy Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: groupId
          in: path
          type: integer
          description: The identifier of the policy group.
          required: true
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
    - name: api-3-policies-policyid-groups-groupid-children
      path: /api/3/policies/{policyId}/groups/{groupId}/children
      operations:
      - name: getpolicygroupchildren
        method: GET
        description: Policy Rules or Groups Directly Under Policy Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: groupId
          in: path
          type: integer
          description: The identifier of the policy group.
          required: true
    - name: api-3-policies-policyid-groups-groupid-rules
      path: /api/3/policies/{policyId}/groups/{groupId}/rules
      operations:
      - name: getdescendantpolicyrules
        method: GET
        description: Policy Rules Under Policy Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: groupId
          in: path
          type: integer
          description: The identifier of the policy group.
          required: true
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-policyid-rules
      path: /api/3/policies/{policyId}/rules
      operations:
      - name: getpolicyrules
        method: GET
        description: Policy Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-policyid-rules-disabled
      path: /api/3/policies/{policyId}/rules/disabled
      operations:
      - name: getdisabledpolicyrules
        method: GET
        description: Disabled Policy Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-policyid-rules-ruleid
      path: /api/3/policies/{policyId}/rules/{ruleId}
      operations:
      - name: getpolicyrule
        method: GET
        description: Policy Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: ruleId
          in: path
          type: integer
          description: The identifier of the policy rule.
          required: true
    - name: api-3-policies-policyid-rules-ruleid-assets
      path: /api/3/policies/{policyId}/rules/{ruleId}/assets
      operations:
      - name: getpolicyruleassetresults
        method: GET
        description: Assets Compliance For Policy Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: ruleId
          in: path
          type: integer
          description: The identifier of the policy rule.
          required: true
        - name: applicableOnly
          in: query
          type: boolean
          description: An optional boolean parameter indicating the assets retrieved should only include those with rule results of either PASS or FAIL. Default value is `false`, which will also include assets with a compli
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-policyid-rules-ruleid-assets-assetid
      path: /api/3/policies/{policyId}/rules/{ruleId}/assets/{assetId}
      operations:
      - name: getpolicyruleassetresult
        method: GET
        description: Asset Compliance For Policy Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: ruleId
          in: path
          type: integer
          description: The identifier of the policy rule.
          required: true
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
    - name: api-3-policies-policyid-rules-ruleid-assets-assetid-proof
      path: /api/3/policies/{policyId}/rules/{ruleId}/assets/{assetId}/proof
      operations:
      - name: getpolicyruleassetresultproof
        method: GET
        description: Policy Rule Proof For Asset
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: ruleId
          in: path
          type: integer
          description: The identifier of the policy rule.
          required: true
        - name: assetId
          in: path
          type: integer
          description: The identifier of the asset.
          required: true
    - name: api-3-policies-policyid-rules-ruleid-controls
      path: /api/3/policies/{policyId}/rules/{ruleId}/controls
      operations:
      - name: getpolicyrulecontrols
        method: GET
        description: Policy Rule Controls
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: ruleId
          in: path
          type: integer
          description: The identifier of the policy rule.
          required: true
        - name: page
          in: query
          type: integer
          description: The index of the page (zero-based) to retrieve.
        - name: size
          in: query
          type: integer
          description: The number of records per page to retrieve.
        - name: sort
          in: query
          type: array
          description: 'The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.'
    - name: api-3-policies-policyid-rules-ruleid-rationale
      path: /api/3/policies/{policyId}/rules/{ruleId}/rationale
      operations:
      - name: getpolicyrulerationale
        method: GET
        description: Policy Rule Rationale
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: ruleId
          in: path
          type: integer
          description: The identifier of the policy rule.
          required: true
    - name: api-3-policies-policyid-rules-ruleid-remediation
      path: /api/3/policies/{policyId}/rules/{ruleId}/remediation
      operations:
      - name: getpolicyruleremediation
        method: GET
        description: Policy Rule Remediation
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: policyId
          in: path
          type: integer
          description: The identifier of the policy
          required: true
        - name: ruleId
          in: path
          type: integer
          description: The identifier of the policy rule.
          required: true
    - name: api-3-policy-summary
      path: /api/3/policy/summary
      operations:
      - name: getpolicysummary
        method: GET
        description: Policy Compliance Summaries
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters: []
  exposes:
  - type: rest
    namespace: insightvm-console-swagger-policy-rest
    port: 8080
    description: REST adapter for InsightVM API — Policy. One resource per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/api/3/assets/{assetId}/policies
      name: api-3-assets-assetid-policies
      description: REST surface for api-3-assets-assetid-policies.
      operations:
      - method: GET
        name: getpoliciesforasset
        description: Policies For Asset
        call: insightvm-console-swagger-policy.getpoliciesforasset
        with:
          assetId: rest.assetId
          applicableOnly: rest.applicableOnly
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/assets/{assetId}/policies/{policyId}/children
      name: api-3-assets-assetid-policies-policyid-children
      description: REST surface for api-3-assets-assetid-policies-policyid-children.
      operations:
      - method: GET
        name: getassetpolicychildren
        description: Policy Rules or Groups Directly Under Policy For Asset
        call: insightvm-console-swagger-policy.getassetpolicychildren
        with:
          assetId: rest.assetId
          policyId: rest.policyId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/assets/{assetId}/policies/{policyId}/groups/{groupId}/children
      name: api-3-assets-assetid-policies-policyid-groups-groupid-childr
      description: REST surface for api-3-assets-assetid-policies-policyid-groups-groupid-childr.
      operations:
      - method: GET
        name: getassetpolicygroupchildren
        description: Policy Rules or Groups Directly Under Policy Group For Asset
        call: insightvm-console-swagger-policy.getassetpolicygroupchildren
        with:
          assetId: rest.assetId
          policyId: rest.policyId
          groupId: rest.groupId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/assets/{assetId}/policies/{policyId}/groups/{groupId}/rules
      name: api-3-assets-assetid-policies-policyid-groups-groupid-rules
      description: REST surface for api-3-assets-assetid-policies-policyid-groups-groupid-rules.
      operations:
      - method: GET
        name: getpolicygroupruleswithassetassessment
        description: Policy Rules Under Policy Group For Asset
        call: insightvm-console-swagger-policy.getpolicygroupruleswithassetassessment
        with:
          assetId: rest.assetId
          policyId: rest.policyId
          groupId: rest.groupId
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/assets/{assetId}/policies/{policyId}/rules
      name: api-3-assets-assetid-policies-policyid-rules
      description: REST surface for api-3-assets-assetid-policies-policyid-rules.
      operations:
      - method: GET
        name: getassetpolicyrulessummary
        description: Policy Rules For Asset
        call: insightvm-console-swagger-policy.getassetpolicyrulessummary
        with:
          assetId: rest.assetId
          policyId: rest.policyId
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies
      name: api-3-policies
      description: REST surface for api-3-policies.
      operations:
      - method: GET
        name: getpolicies
        description: Policies
        call: insightvm-console-swagger-policy.getpolicies
        with:
          filter: rest.filter
          scannedOnly: rest.scannedOnly
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{id}/children
      name: api-3-policies-id-children
      description: REST surface for api-3-policies-id-children.
      operations:
      - method: GET
        name: getpolicychildren
        description: Policy Rules or Groups Directly Under Policy
        call: insightvm-console-swagger-policy.getpolicychildren
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}
      name: api-3-policies-policyid
      description: REST surface for api-3-policies-policyid.
      operations:
      - method: GET
        name: getpolicy
        description: Policy
        call: insightvm-console-swagger-policy.getpolicy
        with:
          policyId: rest.policyId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/assets
      name: api-3-policies-policyid-assets
      description: REST surface for api-3-policies-policyid-assets.
      operations:
      - method: GET
        name: getpolicyassetresults
        description: Policy Asset Results
        call: insightvm-console-swagger-policy.getpolicyassetresults
        with:
          policyId: rest.policyId
          applicableOnly: rest.applicableOnly
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/assets/{assetId}
      name: api-3-policies-policyid-assets-assetid
      description: REST surface for api-3-policies-policyid-assets-assetid.
      operations:
      - method: GET
        name: getpolicyassetresult
        description: Policy Asset Result
        call: insightvm-console-swagger-policy.getpolicyassetresult
        with:
          policyId: rest.policyId
          assetId: rest.assetId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/groups
      name: api-3-policies-policyid-groups
      description: REST surface for api-3-policies-policyid-groups.
      operations:
      - method: GET
        name: getpolicygroups
        description: Policy Groups
        call: insightvm-console-swagger-policy.getpolicygroups
        with:
          policyId: rest.policyId
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/groups/{groupId}
      name: api-3-policies-policyid-groups-groupid
      description: REST surface for api-3-policies-policyid-groups-groupid.
      operations:
      - method: GET
        name: getpolicygroup
        description: Policy Group
        call: insightvm-console-swagger-policy.getpolicygroup
        with:
          policyId: rest.policyId
          groupId: rest.groupId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/groups/{groupId}/assets
      name: api-3-policies-policyid-groups-groupid-assets
      description: REST surface for api-3-policies-policyid-groups-groupid-assets.
      operations:
      - method: GET
        name: getpolicygroupassetresults
        description: Assets Compliance For Policy Rules Under Policy Group
        call: insightvm-console-swagger-policy.getpolicygroupassetresults
        with:
          policyId: rest.policyId
          groupId: rest.groupId
          applicableOnly: rest.applicableOnly
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/groups/{groupId}/assets/{assetId}
      name: api-3-policies-policyid-groups-groupid-assets-assetid
      description: REST surface for api-3-policies-policyid-groups-groupid-assets-assetid.
      operations:
      - method: GET
        name: getpolicygroupassetresult
        description: Asset Compliance For Policy Rules Under Policy Group
        call: insightvm-console-swagger-policy.getpolicygroupassetresult
        with:
          policyId: rest.policyId
          groupId: rest.groupId
          assetId: rest.assetId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/groups/{groupId}/children
      name: api-3-policies-policyid-groups-groupid-children
      description: REST surface for api-3-policies-policyid-groups-groupid-children.
      operations:
      - method: GET
        name: getpolicygroupchildren
        description: Policy Rules or Groups Directly Under Policy Group
        call: insightvm-console-swagger-policy.getpolicygroupchildren
        with:
          policyId: rest.policyId
          groupId: rest.groupId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/groups/{groupId}/rules
      name: api-3-policies-policyid-groups-groupid-rules
      description: REST surface for api-3-policies-policyid-groups-groupid-rules.
      operations:
      - method: GET
        name: getdescendantpolicyrules
        description: Policy Rules Under Policy Group
        call: insightvm-console-swagger-policy.getdescendantpolicyrules
        with:
          policyId: rest.policyId
          groupId: rest.groupId
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules
      name: api-3-policies-policyid-rules
      description: REST surface for api-3-policies-policyid-rules.
      operations:
      - method: GET
        name: getpolicyrules
        description: Policy Rules
        call: insightvm-console-swagger-policy.getpolicyrules
        with:
          policyId: rest.policyId
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules/disabled
      name: api-3-policies-policyid-rules-disabled
      description: REST surface for api-3-policies-policyid-rules-disabled.
      operations:
      - method: GET
        name: getdisabledpolicyrules
        description: Disabled Policy Rules
        call: insightvm-console-swagger-policy.getdisabledpolicyrules
        with:
          policyId: rest.policyId
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules/{ruleId}
      name: api-3-policies-policyid-rules-ruleid
      description: REST surface for api-3-policies-policyid-rules-ruleid.
      operations:
      - method: GET
        name: getpolicyrule
        description: Policy Rule
        call: insightvm-console-swagger-policy.getpolicyrule
        with:
          policyId: rest.policyId
          ruleId: rest.ruleId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules/{ruleId}/assets
      name: api-3-policies-policyid-rules-ruleid-assets
      description: REST surface for api-3-policies-policyid-rules-ruleid-assets.
      operations:
      - method: GET
        name: getpolicyruleassetresults
        description: Assets Compliance For Policy Rule
        call: insightvm-console-swagger-policy.getpolicyruleassetresults
        with:
          policyId: rest.policyId
          ruleId: rest.ruleId
          applicableOnly: rest.applicableOnly
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules/{ruleId}/assets/{assetId}
      name: api-3-policies-policyid-rules-ruleid-assets-assetid
      description: REST surface for api-3-policies-policyid-rules-ruleid-assets-assetid.
      operations:
      - method: GET
        name: getpolicyruleassetresult
        description: Asset Compliance For Policy Rule
        call: insightvm-console-swagger-policy.getpolicyruleassetresult
        with:
          policyId: rest.policyId
          ruleId: rest.ruleId
          assetId: rest.assetId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules/{ruleId}/assets/{assetId}/proof
      name: api-3-policies-policyid-rules-ruleid-assets-assetid-proof
      description: REST surface for api-3-policies-policyid-rules-ruleid-assets-assetid-proof.
      operations:
      - method: GET
        name: getpolicyruleassetresultproof
        description: Policy Rule Proof For Asset
        call: insightvm-console-swagger-policy.getpolicyruleassetresultproof
        with:
          policyId: rest.policyId
          ruleId: rest.ruleId
          assetId: rest.assetId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules/{ruleId}/controls
      name: api-3-policies-policyid-rules-ruleid-controls
      description: REST surface for api-3-policies-policyid-rules-ruleid-controls.
      operations:
      - method: GET
        name: getpolicyrulecontrols
        description: Policy Rule Controls
        call: insightvm-console-swagger-policy.getpolicyrulecontrols
        with:
          policyId: rest.policyId
          ruleId: rest.ruleId
          page: rest.page
          size: rest.size
          sort: rest.sort
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules/{ruleId}/rationale
      name: api-3-policies-policyid-rules-ruleid-rationale
      description: REST surface for api-3-policies-policyid-rules-ruleid-rationale.
      operations:
      - method: GET
        name: getpolicyrulerationale
        description: Policy Rule Rationale
        call: insightvm-console-swagger-policy.getpolicyrulerationale
        with:
          policyId: rest.policyId
          ruleId: rest.ruleId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policies/{policyId}/rules/{ruleId}/remediation
      name: api-3-policies-policyid-rules-ruleid-remediation
      description: REST surface for api-3-policies-policyid-rules-ruleid-remediation.
      operations:
      - method: GET
        name: getpolicyruleremediation
        description: Policy Rule Remediation
        call: insightvm-console-swagger-policy.getpolicyruleremediation
        with:
          policyId: rest.policyId
          ruleId: rest.ruleId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/3/policy/summary
      name: api-3-policy-summary
      description: REST surface for api-3-policy-summary.
      operations:
      - method: GET
        name: getpolicysummary
        description: Policy Compliance Summaries
        call: insightvm-console-swagger-policy.getpolicysummary
        with: {}
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: insightvm-console-swagger-policy-mcp
    port: 9090
    transport: http
    description: MCP adapter for InsightVM API — Policy. One tool per consumed operation, routed inline through this capability's consumes block.
    tools:
    - name: rapid7-getpoliciesforasset
      description: Policies For Asset
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpoliciesforasset
      with:
        assetId: tools.assetId
        applicableOnly: tools.applicableOnly
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getassetpolicychildren
      description: Policy Rules or Groups Directly Under Policy For Asset
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getassetpolicychildren
      with:
        assetId: tools.assetId
        policyId: tools.policyId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getassetpolicygroupchildren
      description: Policy Rules or Groups Directly Under Policy Group For Asset
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getassetpolicygroupchildren
      with:
        assetId: tools.assetId
        policyId: tools.policyId
        groupId: tools.groupId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicygroupruleswithassetassessment
      description: Policy Rules Under Policy Group For Asset
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicygroupruleswithassetassessment
      with:
        assetId: tools.assetId
        policyId: tools.policyId
        groupId: tools.groupId
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getassetpolicyrulessummary
      description: Policy Rules For Asset
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getassetpolicyrulessummary
      with:
        assetId: tools.assetId
        policyId: tools.policyId
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicies
      description: Policies
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicies
      with:
        filter: tools.filter
        scannedOnly: tools.scannedOnly
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicychildren
      description: Policy Rules or Groups Directly Under Policy
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicychildren
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicy
      description: Policy
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicy
      with:
        policyId: tools.policyId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyassetresults
      description: Policy Asset Results
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyassetresults
      with:
        policyId: tools.policyId
        applicableOnly: tools.applicableOnly
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyassetresult
      description: Policy Asset Result
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyassetresult
      with:
        policyId: tools.policyId
        assetId: tools.assetId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicygroups
      description: Policy Groups
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicygroups
      with:
        policyId: tools.policyId
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicygroup
      description: Policy Group
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicygroup
      with:
        policyId: tools.policyId
        groupId: tools.groupId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicygroupassetresults
      description: Assets Compliance For Policy Rules Under Policy Group
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicygroupassetresults
      with:
        policyId: tools.policyId
        groupId: tools.groupId
        applicableOnly: tools.applicableOnly
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicygroupassetresult
      description: Asset Compliance For Policy Rules Under Policy Group
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicygroupassetresult
      with:
        policyId: tools.policyId
        groupId: tools.groupId
        assetId: tools.assetId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicygroupchildren
      description: Policy Rules or Groups Directly Under Policy Group
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicygroupchildren
      with:
        policyId: tools.policyId
        groupId: tools.groupId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getdescendantpolicyrules
      description: Policy Rules Under Policy Group
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getdescendantpolicyrules
      with:
        policyId: tools.policyId
        groupId: tools.groupId
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyrules
      description: Policy Rules
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyrules
      with:
        policyId: tools.policyId
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getdisabledpolicyrules
      description: Disabled Policy Rules
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getdisabledpolicyrules
      with:
        policyId: tools.policyId
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyrule
      description: Policy Rule
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyrule
      with:
        policyId: tools.policyId
        ruleId: tools.ruleId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyruleassetresults
      description: Assets Compliance For Policy Rule
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyruleassetresults
      with:
        policyId: tools.policyId
        ruleId: tools.ruleId
        applicableOnly: tools.applicableOnly
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyruleassetresult
      description: Asset Compliance For Policy Rule
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyruleassetresult
      with:
        policyId: tools.policyId
        ruleId: tools.ruleId
        assetId: tools.assetId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyruleassetresultproof
      description: Policy Rule Proof For Asset
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyruleassetresultproof
      with:
        policyId: tools.policyId
        ruleId: tools.ruleId
        assetId: tools.assetId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyrulecontrols
      description: Policy Rule Controls
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyrulecontrols
      with:
        policyId: tools.policyId
        ruleId: tools.ruleId
        page: tools.page
        size: tools.size
        sort: tools.sort
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyrulerationale
      description: Policy Rule Rationale
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyrulerationale
      with:
        policyId: tools.policyId
        ruleId: tools.ruleId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicyruleremediation
      description: Policy Rule Remediation
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicyruleremediation
      with:
        policyId: tools.policyId
        ruleId: tools.ruleId
      outputParameters:
      - type: object
        mapping: $.
    - name: rapid7-getpolicysummary
      description: Policy Compliance Summaries
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: insightvm-console-swagger-policy.getpolicysummary
      with: {}
      outputParameters:
      - type: object
        mapping: $.