adv_mark_false_positive
Mark security findings as false positives to reduce alert noise and improve vulnerability management accuracy in the Adversary MCP Server.
Instructions
Mark a finding as a false positive
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| finding_uuid | Yes | UUID of the finding to mark as false positive | |
| reason | No | Reason for marking as false positive | |
| marked_by | No | Who marked it as false positive | user |
| adversary_file_path | No | Path to .adversary.json file | .adversary.json |
Implementation Reference
- The primary handler function for the 'adv_mark_false_positive' tool. Validates input arguments, initializes the FalsePositiveJsonRepository and FalsePositiveService, calls the service to mark the finding, and returns a JSON response indicating success.
async def _handle_mark_false_positive( self, name: str, arguments: dict ) -> list[types.TextContent]: """Handle mark false positive requests.""" try: # Comprehensive input validation validated_args = self._input_validator.validate_mcp_arguments( arguments, tool_name="adv_mark_false_positive" ) finding_uuid = validated_args.get("finding_uuid", "") reason = validated_args.get("reason", "") marked_by = validated_args.get("marked_by", "user") adversary_file_path = validated_args.get( "adversary_file_path", ".adversary.json" ) if not finding_uuid: raise CleanAdversaryToolError("finding_uuid parameter is required") # Initialize false positive repository and service fp_repository = FalsePositiveJsonRepository(adversary_file_path) fp_service = FalsePositiveService(fp_repository) # Mark as false positive success = await fp_service.mark_as_false_positive( uuid=finding_uuid, reason=reason, marked_by=marked_by ) result = { "success": success, "finding_uuid": finding_uuid, "message": ( f"Finding {finding_uuid} marked as false positive" if success else f"Failed to mark finding {finding_uuid} as false positive" ), } return [types.TextContent(type="text", text=json.dumps(result, indent=2))] except Exception as e: logger.error(f"Mark false positive failed: {e}") raise CleanAdversaryToolError(f"Mark false positive failed: {str(e)}") - The input schema definition for the 'adv_mark_false_positive' tool, specifying required finding_uuid and optional reason, marked_by, adversary_file_path parameters.
Tool( name="adv_mark_false_positive", description="Mark a finding as a false positive", inputSchema={ "type": "object", "properties": { "finding_uuid": { "type": "string", "description": "UUID of the finding to mark as false positive", }, "reason": { "type": "string", "description": "Reason for marking as false positive", "default": "", }, "marked_by": { "type": "string", "description": "Who marked it as false positive", "default": "user", }, "adversary_file_path": { "type": "string", "description": "Path to .adversary.json file", "default": ".adversary.json", }, }, "required": ["finding_uuid"], }, ), - src/adversary_mcp_server/application/mcp_server.py:132-133 (registration)Registration of the tool in the central dispatcher function within _register_tools method, routing calls to the handler.
elif name == "adv_mark_false_positive": return await self._handle_mark_false_positive(name, arguments) - The FalsePositiveService.mark_as_false_positive method, which contains the core business logic for creating FalsePositiveInfo and persisting it via the repository.
async def mark_as_false_positive( self, uuid: str, reason: str = "", marked_by: str = "user", ) -> bool: """ Mark a security finding as a false positive. Args: uuid: UUID of the finding to mark reason: Reason for marking as false positive marked_by: Who marked it as false positive Returns: True if marked successfully, False otherwise """ try: # Validate inputs if not uuid.strip(): raise ValueError("UUID cannot be empty") # Create false positive info fp_info = FalsePositiveInfo.create_false_positive( uuid=uuid, reason=reason, marked_by=marked_by, ) # Save to repository success = await self.repository.save_false_positive_info(fp_info) if success: self.logger.info( f"Marked finding {uuid} as false positive (reason: '{reason}', marked_by: {marked_by})" ) else: self.logger.error(f"Failed to mark finding {uuid} as false positive") return success except Exception as e: self.logger.error(f"Error marking finding {uuid} as false positive: {e}") return False