opencdr_case_extensions
Reads up to 20 case-owned indicators or historical provider results for a case via Fleet authority or standalone Core, without executing a lookup.
Instructions
Read 20 case-owned indicators or historical provider-results.
Uses Fleet authority directly in fleet mode; never executes a lookup.
In fleet mode this tool uses the Fleet authority directly; Core mode uses standalone Core.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"case_id": "<case_id>",
"kind": "<kind>"
},
"name": "opencdr_case_extensions"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | ||
| after | No | ||
| case_id | Yes |