list_inventory_items
Retrieve a paginated list of SentinelOne managed assets with optional filters for asset type and field selection.
Instructions
List managed assets in SentinelOne with pagination and optional filtering.
Use this tool to browse SentinelOne managed assets including computers, servers, workstations, cloud resources, and network-discovered devices.
Args: limit: Number of items to retrieve (1-1000, default: 50). skip: Number of items to skip for pagination (default: 0). surface: Optional surface filter: - "ENDPOINT": Endpoint assets (agents, workstations, servers, computers) - "CLOUD": Cloud resources (AWS, Azure, GCP) - "IDENTITY": Identity entities (AD, Entra ID) - "NETWORK_DISCOVERY": Network-discovered devices (Ranger) fetch_fields: Field filtering. Either: - Preset name: "MINIMAL", "STANDARD", or "ALL" (default: "MINIMAL") * MINIMAL: 7 core fields (id, name, category, etc.) - fastest * STANDARD: 13 fields (MINIMAL + operational context) * ALL: All available fields (~200+ fields) - slowest - List of specific field names in camelCase: Examples: ["id", "name", "category"] ["id", "resourceType", "assetStatus", "lastActiveDt"] Use fetch_fields="ALL" on a single item to discover all field names. Defaults to "MINIMAL" for optimal performance with list operations.
Returns: JSON string with paginated inventory items containing only requested fields. Field keys use camelCase format. Fields without values are excluded from the output. Includes pagination metadata.
Raises: ValueError: If parameters are invalid, or fetch_fields is invalid. InventoryAuthenticationError: If authentication fails. InventoryNetworkError: If network operation fails. InventoryAPIError: If the API returns an error. InventoryClientError: For other client-level errors.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| skip | No | ||
| limit | No | ||
| surface | No | ||
| fetch_fields | No | MINIMAL |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |