openapi: 3.0.3
info:
  title: Unisys Stealth Eco Combined Isolation User Isolation API
  version: '6.0'
  description: The Unisys Stealth EcoAPI provides programmatic access to the Unisys Stealth zero trust network segmentation platform. Security teams and automation platforms can use the EcoAPI to dynamically isolate and un-isolate endpoints and users from the Stealth network in response to security events or policy enforcement actions. The API also provides access to Stealth role configurations. Authentication uses HTTP Basic credentials (username and password) against the Stealth server endpoint.
  contact:
    name: Unisys Stealth Support
    url: https://stealthsecurity.unisys.com/resources/
  x-generated-from: documentation
  x-last-validated: '2026-05-03'
servers:
- url: https://{stealthHost}:{stealthPort}
  description: Unisys Stealth EcoAPI Server
  variables:
    stealthHost:
      default: stealth-server
      description: Hostname or IP address of the Stealth EcoAPI server
    stealthPort:
      default: '8448'
      description: Port number of the Stealth EcoAPI server
security:
- basicAuth: []
tags:
- name: User Isolation
  description: Isolate and un-isolate users from the Stealth network
paths:
  /api/user/isolate:
    post:
      operationId: isolateUser
      summary: Isolate User
      description: Isolate a specific user from the Stealth zero trust network. All sessions and endpoints associated with the user will be placed under the isolation role policy, preventing the user from accessing network resources until un-isolated.
      tags:
      - User Isolation
      requestBody:
        description: User isolation request
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - user
              properties:
                user:
                  type: string
                  description: Username to isolate from the Stealth network
                roleId:
                  type: string
                  description: Optional isolation role ID to apply
      responses:
        '200':
          description: User successfully isolated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ActionResponse'
        '400':
          description: Bad request - missing or invalid parameters
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized - invalid or missing credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
  /api/user/unisolate:
    post:
      operationId: unisolateUser
      summary: Un-Isolate User
      description: Remove the isolation state from a specific user in the Stealth network. The user will be restored to their previous Stealth community memberships and role assignments, resuming normal network access under Stealth policy.
      tags:
      - User Isolation
      requestBody:
        description: User un-isolation request
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - user
              properties:
                user:
                  type: string
                  description: Username to un-isolate from the Stealth network
      responses:
        '200':
          description: User successfully un-isolated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ActionResponse'
        '400':
          description: Bad request - missing or invalid parameters
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized - invalid or missing credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
components:
  schemas:
    ActionResponse:
      type: object
      description: Response from a Stealth EcoAPI action
      properties:
        status:
          type: string
          description: Status of the action
          enum:
          - SUCCESS
          - FAILURE
          - PENDING
        message:
          type: string
          description: Human-readable message describing the result
        timestamp:
          type: string
          format: date-time
          description: Timestamp of when the action was executed
    Error:
      type: object
      description: Error response from the Stealth EcoAPI
      properties:
        code:
          type: integer
          description: HTTP status code
        message:
          type: string
          description: Error message
        details:
          type: string
          description: Additional error details
  securitySchemes:
    basicAuth:
      type: http
      scheme: basic
      description: HTTP Basic Authentication using Stealth server credentials (username and password).