get_mitigations_by_threat
Retrieve security mitigations for a specific threat by providing its threat ID, enabling threat response planning and risk management.
Instructions
Get mitigations for a specific threat
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| threat_id | Yes |
Implementation Reference
- src/devici_mcp_server/server.py:187-192 (handler)MCP tool handler function decorated with @mcp.tool(). It creates an API client using create_client_from_env, calls client.get_mitigations_by_threat(threat_id), and returns the stringified result.@mcp.tool() async def get_mitigations_by_threat(threat_id: str) -> str: """Get mitigations for a specific threat""" async with create_client_from_env() as client: result = await client.get_mitigations_by_threat(threat_id) return str(result)
- API client helper method that makes an authenticated HTTP GET request to the /mitigations/threat/{threat_id} endpoint to retrieve mitigations associated with the given threat ID.async def get_mitigations_by_threat(self, threat_id: str) -> Dict[str, Any]: """Get all mitigations for specific threat.""" return await self._make_request("GET", f"/mitigations/threat/{threat_id}")
- Shared helper method in API client for making authenticated HTTP requests to the Devici API, handling authentication if needed and error raising.async def _make_request( self, method: str, endpoint: str, params: Optional[Dict[str, Any]] = None, json_data: Optional[Dict[str, Any]] = None ) -> Dict[str, Any]: """Make authenticated request to Devici API.""" if not self.access_token: await self.authenticate() try: response = await self.client.request( method=method, url=endpoint, params=params, json=json_data ) response.raise_for_status() return response.json() except httpx.HTTPError as e: logger.error(f"API request failed: {method} {endpoint} - {e}") raise
- Factory function to create the DeviciAPIClient instance from environment variables, used by all tool handlers.def create_client_from_env() -> DeviciAPIClient: """Create API client from environment variables.""" config = DeviciConfig( api_base_url=os.getenv("DEVICI_API_BASE_URL", "https://api.devici.com/api/v1"), client_id=os.getenv("DEVICI_CLIENT_ID", ""), client_secret=os.getenv("DEVICI_CLIENT_SECRET", ""), debug=os.getenv("DEBUG", "false").lower() == "true" ) if not config.client_id or not config.client_secret: raise ValueError("DEVICI_CLIENT_ID and DEVICI_CLIENT_SECRET must be set") return DeviciAPIClient(config)