update_threat
Update existing threats in your threat model with new attributes like source, action, and severity. Supports single or batch updates to keep threat data accurate.
Instructions
Update an existing threat. Supports batch operations via the 'items' parameter.
This tool updates one or more existing threats in the threat model. IMPORTANT: Each text field must be 200 characters or fewer to comply with the Threat Composer schema. For single item: provide id and fields to update directly. For batch: provide a list of threat dicts in the 'items' parameter (each must include 'id').
Args: ctx: MCP context for logging and error handling id: ID of the threat to update (required for single item mode) threat_source: New source of the threat, max 200 chars prerequisites: New prerequisites for the threat, max 200 chars threat_action: New action performed by the threat, max 200 chars threat_impact: New impact of the threat, max 200 chars category: New STRIDE category of the threat severity: New severity of the threat likelihood: New likelihood of the threat status: New status of the threat affected_components: New list of component IDs affected by the threat affected_assets: New list of asset IDs affected by the threat tags: New list of tags for the threat items: Optional list of threat dicts for batch update
Returns: A confirmation message
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | ||
| tags | No | ||
| items | No | ||
| status | No | ||
| category | No | ||
| severity | No | ||
| likelihood | No | ||
| prerequisites | No | ||
| threat_action | No | ||
| threat_impact | No | ||
| threat_source | No | ||
| affected_assets | No | ||
| affected_components | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |