CISO Assistant MCP Server
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@CISO Assistant MCP Serverlist my open risk assessments"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
CISO Assistant - A2A | AG-UI | MCP
Version: 1.0.1
Overview
CISO Assistant is a production-grade Python API client, Model Context Protocol (MCP) server, and A2A agent for CISO Assistant, intuitem's open-source GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting.
It provides 100% coverage of the CISO Assistant REST API — every one of the
~1,565 operations in the drf-spectacular schema is exposed as both a typed
client method and an action-routed MCP tool. The client, MCP tools, and a
machine-readable coverage manifest are all generated from the vendored OpenAPI
spec (ciso_assistant_api/specs/ciso_assistant.json) by
scripts/generate_from_openapi.py, and a coverage test asserts the three sets
stay in lock-step.
Key Features
100% Action-Routed MCP Tools — one consolidated tool per domain (e.g.
ciso_assistant_compliance,ciso_assistant_risk_management,ciso_assistant_incidents) takes anactionplus aparams_jsonpayload and routes to the underlying API method. 19 domain tools (mirroring the published documentation categories) cover every endpoint without flooding the IDE tool list.Full CISO Assistant surface — Analytics & Metrology, Assets, Authentication & Users, Compliance, EBIOS-RM, Evidence & Attachments, Frameworks & Libraries, Governance, Incidents, Integrations, Privacy, Quantitative Risk (CRQ), Resilience, Risk Management, Security Exceptions & Findings, Settings, Tasks & Timeline, and Third-Party Risk Management.
Knox token auth — a pre-minted Knox token or a username/password pair exchanged for a token at
POST /api/iam/login/, plus OIDC delegation (RFC 8693) viaagent-utilities.Resilient — honours
429Retry-After, retries transient5xx, and transparently follows DRFnextpagination links.
Related MCP server: compliance-mcp
MCP
Using as an MCP Server
The MCP Server runs in stdio (local) or streamable-http (networked) mode.
Each domain is a tool gated by a {TAG}TOOL environment variable (default True),
so you can scope the surface (e.g. set CHATTOOL=False to drop the chat domain).
Environment Variables
Package environment variables
Variable | Example | Description |
| — | Backend host URL, e.g. https://ciso.arpa or http://localhost:8000 |
| — | 1) Pre-minted Knox token (My Profile > Settings, or |
| — | 2) Credentials exchanged for a token at POST /api/iam/login/ |
| — | |
|
| ─── HTTP behaviour ──────────────────────────────────────────────────── |
|
| ─── MCP transport / auth (agent-utilities) ──────────────────────────── |
|
| |
|
| |
|
| analytics-metrology tools |
|
| assets tools |
|
| auth-users tools |
|
| chat tools |
|
| compliance tools |
|
| crq tools |
|
| custom-api tools |
|
| ebios-rm tools |
|
| evidence tools |
|
| frameworks-libraries tools |
|
| governance tools |
|
| incidents tools |
|
| integrations tools |
|
| privacy tools |
|
| resilience tools |
|
| risk-management tools |
|
| security-findings tools |
|
| settings tools |
|
| tasks-timeline tools |
|
| third-party tools |
Inherited agent-utilities variables (apply to every connector)
Variable | Example | Description |
|
| Bind host (HTTP transports) |
|
| Bind port (HTTP transports) |
|
| Tool surface: |
| — | Comma-separated tool allow-list |
| — | Comma-separated tool deny-list |
| — | Comma-separated tag allow-list |
| — | Comma-separated tag deny-list |
|
| Authorization mode: |
|
| Embedded Eunomia policy file |
| — | Remote Eunomia authorization server URL |
|
| Enable OpenTelemetry export |
| — | OTLP collector endpoint |
| — | Outbound MCP auth ( |
| — | OIDC client id (service-account auth) |
| — | OIDC client secret (service-account auth) |
|
| Verbose logging |
|
| Unbuffered stdout (recommended in containers) |
|
| URL of the MCP server the agent connects to |
|
| LLM provider for the agent |
|
| Model id for the agent |
|
| Serve the AG-UI web interface |
28 package + 21 inherited variable(s). Auto-generated from .env.example + the shared agent-utilities set — do not edit.
Variable | Description |
| Backend host URL, e.g. |
| Pre-minted Knox token. |
| Credentials exchanged for a token at |
| Verify TLS (default |
| Toggle a domain tool, e.g. |
The server also reads the standard MCP-transport, telemetry, governance, and agent-CLI variables:
Variable | Description | Default |
|
|
|
| Bind host (HTTP transports) |
|
| Bind port (HTTP transports) |
|
| Tool surface: |
|
| Comma-separated tool allow/deny list | — |
| Comma-separated tag allow/deny list | — |
| Verbose logging |
|
| Unbuffered stdout (recommended in containers) |
|
| Enable OpenTelemetry export |
|
| OTLP collector endpoint | — |
| OTLP auth keys | — |
| OTLP protocol (e.g. | — |
| Authorization mode: |
|
| Embedded policy file |
|
| Remote Eunomia server URL | — |
| (Agent only) URL of the MCP server the agent connects to |
|
| (Agent only) LLM provider (e.g. |
|
| (Agent only) Model id (e.g. |
|
| (Agent only) Serve the AG-UI web interface |
|
Run in stdio mode (default):
export CISO_ASSISTANT_URL="https://ciso.arpa"
export CISO_ASSISTANT_TOKEN="your_token"
ciso-assistant-mcp --transport "stdio"Run in HTTP mode:
export CISO_ASSISTANT_URL="https://ciso.arpa"
export CISO_ASSISTANT_TOKEN="your_token"
ciso-assistant-mcp --transport "streamable-http" --host "0.0.0.0" --port "8000"Available MCP Tools
Auto-generated — do not edit (synced by the mcp-readme-table pre-commit hook).
Condensed action-routed tools (default — MCP_TOOL_MODE=condensed)
MCP Tool | Toggle Env Var | Description |
|
| Manage CISO Assistant analytics metrology operations. |
|
| Execute an arbitrary CISO Assistant REST API request directly. |
|
| Manage CISO Assistant assets operations. |
|
| Manage CISO Assistant auth users operations. |
|
| Manage CISO Assistant chat operations. |
|
| Manage CISO Assistant compliance operations. |
|
| Manage CISO Assistant crq operations. |
|
| Manage CISO Assistant ebios rm operations. |
|
| Manage CISO Assistant evidence operations. |
|
| Manage CISO Assistant frameworks libraries operations. |
|
| Manage CISO Assistant governance operations. |
|
| Manage CISO Assistant incidents operations. |
|
| Manage CISO Assistant integrations operations. |
|
| Manage CISO Assistant privacy operations. |
|
| Manage CISO Assistant resilience operations. |
|
| Manage CISO Assistant risk management operations. |
|
| Manage CISO Assistant security findings operations. |
|
| Manage CISO Assistant settings operations. |
|
| Manage CISO Assistant tasks timeline operations. |
|
| Manage CISO Assistant third party operations. |
Verbose 1:1 API-mapped tools (MCP_TOOL_MODE=verbose or both)
MCP Tool | Toggle Env Var | Description |
|
| api_accounts_saml_download_cert_retrieve |
|
| Endpoint to generate a key pair (private key + self-signed X.509 certificate). |
|
| Cascade preview: |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_actors_object_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_agg_data_retrieve |
|
| Export all analytics dashboard data as a multi-sheet XLSX file. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint for Answer CRUD. |
|
| API endpoint for Answer CRUD. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint for Answer CRUD. |
|
| API endpoint for Answer CRUD. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint for Answer CRUD. |
|
| Aggregated analytics over the filtered applied-controls queryset. |
|
| Minimal endpoint for autocomplete selects. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| Return available model types that can be linked to applied controls |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Merge N source applied controls into 1 target. See |
|
| Export filtered applied controls in ANSSI MonServiceSécurisé format |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_asset_capabilities_create |
|
| api_asset_capabilities_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_asset_capabilities_object_retrieve |
|
| api_asset_capabilities_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_asset_capabilities_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_asset_class_create |
|
| api_asset_class_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_asset_class_object_retrieve |
|
| api_asset_class_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_asset_class_tree_retrieve |
|
| api_asset_class_update |
|
| API endpoint that allows assets to be viewed or edited. |
|
| Minimal endpoint for autocomplete selects — skips graph traversal. |
|
| Perform a batch action on multiple objects. |
|
| Batch create multiple assets from a text list with parent-child relationships. |
|
| Cascade preview: |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| Populate |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that allows assets to be viewed or edited. |
|
| API endpoint that returns the build version of the application. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_campaigns_create |
|
| api_campaigns_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_campaigns_metrics_retrieve |
|
| api_campaigns_object_retrieve |
|
| api_campaigns_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_campaigns_status_retrieve |
|
| api_campaigns_update |
|
| api_chat_agent_actions_approve_create |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_chat_agent_actions_create |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_chat_agent_actions_object_retrieve |
|
| api_chat_agent_actions_reject_create |
|
| Return a single object with unauthorized related fields masked. |
|
| Perform a batch action on multiple objects. |
|
| Mark an active run as cancelled. The worker checks before each step. |
|
| Cascade preview: |
|
| api_chat_agent_runs_create |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_chat_agent_runs_object_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| Create + enqueue an AgentRun for prefilling a questionnaire. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| ViewSet for managing indexed documents. |
|
| ViewSet for managing indexed documents. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| ViewSet for managing indexed documents. |
|
| ViewSet for managing indexed documents. |
|
| Return a single object with unauthorized related fields masked. |
|
| ViewSet for managing indexed documents. |
|
| List available models from the Ollama server. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_chat_questionnaire_questions_create |
|
| Create an AppliedControl in the question's folder from a (possibly |
|
| api_chat_questionnaire_questions_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_chat_questionnaire_questions_object_retrieve |
|
| api_chat_questionnaire_questions_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| Re-run a single question's answer pipeline with a chosen |
|
| Synchronous LLM call: draft an AppliedControl that would let us |
|
| api_chat_questionnaire_questions_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| Experimental: questionnaire prefill runs. |
|
| Experimental: questionnaire prefill runs. |
|
| Stream a copy of the original xlsx with response/comment columns |
|
| Materialize QuestionnaireQuestion rows from parsed_data + column_mapping. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Persist the user's column-mapping choice for this run. |
|
| Experimental: questionnaire prefill runs. |
|
| Experimental: questionnaire prefill runs. |
|
| Return a single object with unauthorized related fields masked. |
|
| Experimental: questionnaire prefill runs. |
|
| Multipart upload entry point: file + folder + optional title. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| ViewSet for chat sessions with streaming message endpoint. |
|
| ViewSet for chat sessions with streaming message endpoint. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Send a message and get a streaming SSE response. |
|
| ViewSet for chat sessions with streaming message endpoint. |
|
| ViewSet for chat sessions with streaming message endpoint. |
|
| Return a single object with unauthorized related fields masked. |
|
| ViewSet for chat sessions with streaming message endpoint. |
|
| Upload a document to be indexed for RAG in this session's folder context. |
|
| Check chat service health: Ollama availability, index status. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_comments_create |
|
| api_comments_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_comments_object_retrieve |
|
| api_comments_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_comments_update |
|
| Mixin that computes budget aggregation over an applied controls queryset. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| api_compliance_assessments_action_plan_list |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Returns compliance analytics data grouped by framework and domain |
|
| Returns per-assignment progress data for the auditee's dashboard. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| Requirement tree with domain-tree inheritance applied as an overlay. |
|
| Get list of compliance assessments that can be compared with this one |
|
| Compare two compliance assessments that use the same framework |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Returns compliance metrics over time from HistoricalMetric snapshots. |
|
| Controls coverage analysis for this compliance assessment. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Evidence coverage analysis — direct (on RA) and indirect (via applied controls). |
|
| api_compliance_assessments_evidences_list_list |
|
| Security exceptions summary for this compliance assessment. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Returns the global score of the compliance assessment |
|
| Breakdown of compliance results by implementation group. |
|
| Returns whether the current user is an auditee for this compliance assessment. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Map data from a source audit into this one. |
|
| Preview the effect of mapping data from a source audit into this one. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Returns the quality check of every compliance assessment |
|
| Returns the quality check of a specific assessment |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Returns the list of requirement assessments for the different audit modes |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Aggregates compliance results and scores per top-level requirement group. |
|
| Returns the requirement tree enriched with applied controls and |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| api_compliance_assessments_suggestions_applied_controls_create |
|
| api_compliance_assessments_suggestions_applied_controls_retrieve |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| Word report generation (Exec) |
|
| API endpoint that allows compliance assessments to be viewed or edited. |
|
| api_composer_data_retrieve |
|
| api_content_types_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| API endpoint that allows contracts to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_crq_quantitative_risk_hypotheses_create |
|
| api_crq_quantitative_risk_hypotheses_default_ref_id_retrieve |
|
| api_crq_quantitative_risk_hypotheses_destroy |
|
| Returns the Loss Exceedance Curve data from stored simulation results. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_crq_quantitative_risk_hypotheses_object_retrieve |
|
| api_crq_quantitative_risk_hypotheses_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_crq_quantitative_risk_hypotheses_risk_stage_retrieve |
|
| Triggers a Monte Carlo simulation for a specific risk hypothesis. |
|
| api_crq_quantitative_risk_hypotheses_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_crq_quantitative_risk_scenarios_create |
|
| api_crq_quantitative_risk_scenarios_default_ref_id_retrieve |
|
| api_crq_quantitative_risk_scenarios_destroy |
|
| Returns combined Loss Exceedance Curve data for the scenario: |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_crq_quantitative_risk_scenarios_object_retrieve |
|
| api_crq_quantitative_risk_scenarios_partial_update |
|
| api_crq_quantitative_risk_scenarios_priority_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_crq_quantitative_risk_scenarios_status_retrieve |
|
| api_crq_quantitative_risk_scenarios_update |
|
| Mixin that computes budget aggregation over an applied controls queryset. |
|
| Action plan for quantitative risk studies. |
|
| Returns data for ALE comparison chart showing: |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| Returns combined ALE metrics for the quantitative risk study: |
|
| Returns combined Loss Exceedance Curve data for the quantitative risk study: |
|
| api_crq_quantitative_risk_studies_create |
|
| api_crq_quantitative_risk_studies_destroy |
|
| api_crq_quantitative_risk_studies_distribution_model_retrieve |
|
| Returns executive summary data for the quantitative risk study. |
|
| Returns key metrics data for quantitative risk scenarios scoped per study. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_crq_quantitative_risk_studies_object_retrieve |
|
| api_crq_quantitative_risk_studies_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| Retriggers all simulations for the quantitative risk study. |
|
| api_crq_quantitative_risk_studies_status_retrieve |
|
| api_crq_quantitative_risk_studies_update |
|
| API endpoint that returns the CSRF token. |
|
| API endpoint that allows CWEs to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows CWEs to be viewed or edited. |
|
| API endpoint that allows CWEs to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows CWEs to be viewed or edited. |
|
| API endpoint that allows CWEs to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| Sync CWE catalog from MITRE. |
|
| API endpoint that allows CWEs to be viewed or edited. |
|
| api_data_wizard_load_file_create |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint for serving document attachment files. |
|
| API endpoint for serving document attachment files. |
|
| Serve the attachment file with correct content type. |
|
| API endpoint for serving document attachment files. |
|
| API endpoint for serving document attachment files. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint for serving document attachment files. |
|
| Approve a revision: transition from in_review to validated. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows document revisions to be viewed or edited. |
|
| API endpoint that allows document revisions to be viewed or edited. |
|
| Compute unified diff between this revision and another of the same document. |
|
| Compute unified diff between two DocumentEdit content snapshots. |
|
| Return the edit history for this revision. |
|
| Return the content snapshot of a specific edit. |
|
| Check who is currently editing. |
|
| Export revision content as a PDF document. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows document revisions to be viewed or edited. |
|
| API endpoint that allows document revisions to be viewed or edited. |
|
| Publish a validated revision: deprecate previous, generate PDF. |
|
| Request changes on an in-review revision. |
|
| Return a single object with unauthorized related fields masked. |
|
| Mark the current user as editing this revision. |
|
| API endpoint that allows document revisions to be viewed or edited. |
|
| Release the editing lock. |
|
| Transition from draft or change_requested to in_review. |
|
| Force-acquire the editing lock, overriding the current editor. |
|
| API endpoint that allows document revisions to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_ebios_rm_attack_paths_create |
|
| api_ebios_rm_attack_paths_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_attack_paths_object_retrieve |
|
| api_ebios_rm_attack_paths_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_attack_paths_update |
|
| api_ebios_rm_elementary_actions_attack_stage_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_ebios_rm_elementary_actions_create |
|
| api_ebios_rm_elementary_actions_destroy |
|
| api_ebios_rm_elementary_actions_icon_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_elementary_actions_object_retrieve |
|
| api_ebios_rm_elementary_actions_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_elementary_actions_update |
|
| Perform a batch action on multiple objects. |
|
| Batch create multiple feared events from a text list. |
|
| Cascade preview: |
|
| api_ebios_rm_feared_events_create |
|
| api_ebios_rm_feared_events_destroy |
|
| api_ebios_rm_feared_events_gravity_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_feared_events_object_retrieve |
|
| api_ebios_rm_feared_events_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_feared_events_risk_matrix_retrieve |
|
| api_ebios_rm_feared_events_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_ebios_rm_kill_chains_create |
|
| api_ebios_rm_kill_chains_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_kill_chains_logic_operator_retrieve |
|
| api_ebios_rm_kill_chains_object_retrieve |
|
| api_ebios_rm_kill_chains_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_kill_chains_update |
|
| Perform a batch action on multiple objects. |
|
| api_ebios_rm_operating_modes_build_graph_retrieve |
|
| Cascade preview: |
|
| api_ebios_rm_operating_modes_create |
|
| api_ebios_rm_operating_modes_default_ref_id_retrieve |
|
| api_ebios_rm_operating_modes_destroy |
|
| api_ebios_rm_operating_modes_likelihood_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_operating_modes_object_retrieve |
|
| api_ebios_rm_operating_modes_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_operating_modes_save_graph_create |
|
| api_ebios_rm_operating_modes_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_ebios_rm_operational_scenarios_create |
|
| api_ebios_rm_operational_scenarios_destroy |
|
| api_ebios_rm_operational_scenarios_likelihood_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_operational_scenarios_object_retrieve |
|
| api_ebios_rm_operational_scenarios_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_operational_scenarios_risk_matrix_retrieve |
|
| api_ebios_rm_operational_scenarios_update |
|
| api_ebios_rm_ro_to_activity_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_ebios_rm_ro_to_create |
|
| api_ebios_rm_ro_to_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_ro_to_motivation_retrieve |
|
| api_ebios_rm_ro_to_object_retrieve |
|
| api_ebios_rm_ro_to_partial_update |
|
| api_ebios_rm_ro_to_pertinence_retrieve |
|
| api_ebios_rm_ro_to_resources_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_ro_to_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_ebios_rm_stakeholders_category_retrieve |
|
| api_ebios_rm_stakeholders_chart_data_retrieve |
|
| api_ebios_rm_stakeholders_create |
|
| api_ebios_rm_stakeholders_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_stakeholders_object_retrieve |
|
| api_ebios_rm_stakeholders_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_stakeholders_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_ebios_rm_strategic_scenarios_create |
|
| api_ebios_rm_strategic_scenarios_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_ebios_rm_strategic_scenarios_object_retrieve |
|
| api_ebios_rm_strategic_scenarios_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_ebios_rm_strategic_scenarios_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| Export EBIOS RM study data to Excel with multiple sheets. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| Endpoint to prepare comprehensive report data for an EBIOS RM study. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| API endpoint that allows ebios rm studies to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Batch create multiple entities from a text list. |
|
| Cascade preview: |
|
| API endpoint that allows entities to be viewed or edited. |
|
| API endpoint that allows entities to be viewed or edited. |
|
| API endpoint that allows entities to be viewed or edited. |
|
| Convert Django's ProtectedError into a 409 Conflict with the list of |
|
| API endpoint that allows entities to be viewed or edited. |
|
| API endpoint that allows entities to be viewed or edited. |
|
| API endpoint that allows entities to be viewed or edited. |
|
| Validate DORA ROI requirements and return linting results. |
|
| API endpoint that allows entities to be viewed or edited. |
|
| Export the TPRM ecosystem as a multi-sheet Excel file with three sheets |
|
| API endpoint that allows entities to be viewed or edited. |
|
| Generate DORA Register of Information (ROI) as a zip file containing CSV data. |
|
| Generate graph data for entities, showing: |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows entities to be viewed or edited. |
|
| API endpoint that allows entities to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows entities to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows entity assessments to be viewed or edited. |
|
| API endpoint that allows entity assessments to be viewed or edited. |
|
| API endpoint that allows entity assessments to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows entity assessments to be viewed or edited. |
|
| API endpoint that allows entity assessments to be viewed or edited. |
|
| API endpoint that allows entity assessments to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows entity assessments to be viewed or edited. |
|
| API endpoint that allows entity assessments to be viewed or edited. |
|
| API endpoint that allows evidence revisions to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows evidence revisions to be viewed or edited. |
|
| API endpoint that allows evidence revisions to be viewed or edited. |
|
| API endpoint that allows evidence revisions to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows evidence revisions to be viewed or edited. |
|
| API endpoint that allows evidence revisions to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows evidence revisions to be viewed or edited. |
|
| api_evidence_revisions_upload_create |
|
| API endpoint that allows evidences to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Bulk-upload evidences from a multipart payload. |
|
| Cascade preview: |
|
| API endpoint that allows evidences to be viewed or edited. |
|
| API endpoint that allows evidences to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows evidences to be viewed or edited. |
|
| API endpoint that allows evidences to be viewed or edited. |
|
| API endpoint that allows evidences to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows evidences to be viewed or edited. |
|
| API endpoint that allows evidences to be viewed or edited. |
|
| api_evidences_upload_create |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows labels to be viewed or edited. |
|
| API endpoint that allows labels to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows labels to be viewed or edited. |
|
| API endpoint that allows labels to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows labels to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_findings_assessments_category_retrieve |
|
| api_findings_assessments_create |
|
| api_findings_assessments_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_findings_assessments_md_retrieve |
|
| api_findings_assessments_metrics_retrieve |
|
| api_findings_assessments_object_retrieve |
|
| api_findings_assessments_partial_update |
|
| api_findings_assessments_pdf_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_findings_assessments_status_retrieve |
|
| Returns FindingsAssessment data structured for sunburst visualization: |
|
| api_findings_assessments_update |
|
| api_findings_assessments_xlsx_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_findings_create |
|
| api_findings_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_findings_object_retrieve |
|
| api_findings_owner_retrieve |
|
| api_findings_partial_update |
|
| api_findings_priority_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| Returns findings data structured for Sankey diagram: |
|
| api_findings_severity_retrieve |
|
| api_findings_status_retrieve |
|
| api_findings_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows folders to be viewed or edited. |
|
| API endpoint that allows folders to be viewed or edited. |
|
| Export the domain as a zip file containing a JSON dump of all objects and their relationships |
|
| Return the list of folders, perimeters, frameworks and risk matrices |
|
| API endpoint that allows folders to be viewed or edited. |
|
| Handle file upload and initiate import process. |
|
| API endpoint that allows folders to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows folders to be viewed or edited. |
|
| API endpoint that allows folders to be viewed or edited. |
|
| Return the tree of domains and perimeters. |
|
| API endpoint that allows folders to be viewed or edited. |
|
| Returns the quality check of assessments grouped by folder. |
|
| Returns the quality check of assessments for a specific folder. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows folders to be viewed or edited. |
|
| api_folders_users_list |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| Discard editing_draft without affecting relational data. |
|
| Deep-clone a framework with all requirement nodes, questions, and choices. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| Export a framework as a library-compatible YAML file. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| Publish editing_draft → relational DB, snapshot history, bump version. |
|
| Preview the impact of publishing the current draft. |
|
| Cross-assessment report for one framework. |
|
| Return a single object with unauthorized related fields masked. |
|
| Update editing_draft with the current WIP from the frontend. |
|
| Serve an image attachment belonging to this framework. |
|
| Serialize the framework tree into editing_draft to begin editing. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| Upload an image to this framework (for splash screen markdown in draft mode). |
|
| API endpoint that allows frameworks to be viewed or edited. |
|
| API endpoint that returns the expensive audit metrics (progress avg + audits stats). |
|
| API endpoint that returns combined assessment counts per status |
|
| API endpoint that returns the counters |
|
| API endpoint that returns governance activity calendar data |
|
| API endpoint that returns the counters |
|
| api_health_retrieve |
|
| api_iam_auth_tokens_create |
|
| api_iam_auth_tokens_destroy |
|
| Get all personal access tokens for the user. |
|
| An endpoint for changing password. |
|
| api_iam_current_user_retrieve |
|
| api_iam_login_create |
|
| api_iam_logout_create |
|
| Log the user out of all sessions |
|
| API Endpoint for reset password confirm |
|
| api_iam_password_reset_create |
|
| An endpoint for revoking all other user sessions (except the current one). |
|
| API Endpoint for getting the session token from an access token |
|
| An endpoint for setting a password as an administrator. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Return a single object with unauthorized related fields masked. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint for creating, viewing, updating, and deleting Integration Configurations. |
|
| API endpoint for creating, viewing, updating, and deleting Integration Configurations. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint for creating, viewing, updating, and deleting Integration Configurations. |
|
| API endpoint for creating, viewing, updating, and deleting Integration Configurations. |
|
| API endpoint for creating, viewing, updating, and deleting Integration Configurations. |
|
| Return a single object with unauthorized related fields masked. |
|
| Generic endpoint for interactive integration commands. |
|
| Custom action to test the connection for a saved integration configuration. |
|
| API endpoint for creating, viewing, updating, and deleting Integration Configurations. |
|
| An API endpoint to list all available (and active) Integration Providers. |
|
| An API endpoint to delete a SyncMapping. |
|
| An endpoint to test connection credentials without saving them. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_journey_steps_create |
|
| api_journey_steps_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_journey_steps_object_retrieve |
|
| api_journey_steps_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_journey_steps_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_journeys_create |
|
| api_journeys_dashboard_retrieve |
|
| api_journeys_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_journeys_object_retrieve |
|
| api_journeys_partial_update |
|
| api_journeys_rename_create |
|
| Return a single object with unauthorized related fields masked. |
|
| api_journeys_update |
|
| api_journeys_upgrade_create |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows library labels to be viewed or edited. |
|
| API endpoint that allows library labels to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows library labels to be viewed or edited. |
|
| API endpoint that allows library labels to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows library labels to be viewed or edited. |
|
| api_loaded_libraries_available_updates_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_loaded_libraries_content_retrieve |
|
| api_loaded_libraries_create |
|
| api_loaded_libraries_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_loaded_libraries_object_retrieve |
|
| api_loaded_libraries_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_loaded_libraries_tree_retrieve |
|
| api_loaded_libraries_update |
|
| api_loaded_libraries_update_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows managed documents to be viewed or edited. |
|
| Create a new draft revision cloned from the current revision. |
|
| API endpoint that allows managed documents to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows managed documents to be viewed or edited. |
|
| API endpoint that allows managed documents to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| List available document templates. Accepts optional ?lang= query parameter. |
|
| API endpoint that allows managed documents to be viewed or edited. |
|
| Upload an image file and attach it to this document. |
|
| api_mapping_libraries_list |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_metrology_builtin_metric_samples_create |
|
| api_metrology_builtin_metric_samples_destroy |
|
| api_metrology_builtin_metric_samples_for_object_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_metrology_builtin_metric_samples_object_retrieve |
|
| api_metrology_builtin_metric_samples_partial_update |
|
| api_metrology_builtin_metric_samples_refresh_create |
|
| Return a single object with unauthorized related fields masked. |
|
| api_metrology_builtin_metric_samples_supported_models_retrieve |
|
| api_metrology_builtin_metric_samples_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_metrology_custom_metric_samples_create |
|
| api_metrology_custom_metric_samples_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_metrology_custom_metric_samples_object_retrieve |
|
| api_metrology_custom_metric_samples_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_metrology_custom_metric_samples_update |
|
| api_metrology_dashboard_widgets_aggregation_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_metrology_dashboard_widgets_chart_type_retrieve |
|
| api_metrology_dashboard_widgets_create |
|
| api_metrology_dashboard_widgets_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_metrology_dashboard_widgets_object_retrieve |
|
| api_metrology_dashboard_widgets_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_metrology_dashboard_widgets_time_range_retrieve |
|
| api_metrology_dashboard_widgets_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_metrology_dashboards_create |
|
| api_metrology_dashboards_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_metrology_dashboards_object_retrieve |
|
| api_metrology_dashboards_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_metrology_dashboards_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_metrology_metric_definitions_category_retrieve |
|
| api_metrology_metric_definitions_create |
|
| api_metrology_metric_definitions_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_metrology_metric_definitions_object_retrieve |
|
| api_metrology_metric_definitions_partial_update |
|
| api_metrology_metric_definitions_provider_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_metrology_metric_definitions_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_metrology_metric_instances_collection_frequency_retrieve |
|
| api_metrology_metric_instances_create |
|
| api_metrology_metric_instances_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_metrology_metric_instances_object_retrieve |
|
| api_metrology_metric_instances_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_metrology_metric_instances_status_retrieve |
|
| api_metrology_metric_instances_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_organisation_issues_category_retrieve |
|
| api_organisation_issues_create |
|
| api_organisation_issues_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_organisation_issues_object_retrieve |
|
| api_organisation_issues_origin_retrieve |
|
| api_organisation_issues_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_organisation_issues_status_retrieve |
|
| api_organisation_issues_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_organisation_objectives_create |
|
| api_organisation_objectives_destroy |
|
| api_organisation_objectives_duplicate_create |
|
| api_organisation_objectives_health_retrieve |
|
| api_organisation_objectives_is_active_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_organisation_objectives_object_retrieve |
|
| api_organisation_objectives_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_organisation_objectives_status_retrieve |
|
| api_organisation_objectives_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows perimeters to be viewed or edited. |
|
| API endpoint that allows perimeters to be viewed or edited. |
|
| API endpoint that allows perimeters to be viewed or edited. |
|
| API endpoint that allows perimeters to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows perimeters to be viewed or edited. |
|
| API endpoint that allows perimeters to be viewed or edited. |
|
| API endpoint that allows perimeters to be viewed or edited. |
|
| Returns the quality check of the perimeters |
|
| Returns the quality check of the perimeter |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows perimeters to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_pmbok_accreditations_category_retrieve |
|
| api_pmbok_accreditations_create |
|
| api_pmbok_accreditations_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_pmbok_accreditations_object_retrieve |
|
| api_pmbok_accreditations_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_pmbok_accreditations_status_retrieve |
|
| api_pmbok_accreditations_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_pmbok_generic_collections_create |
|
| api_pmbok_generic_collections_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_pmbok_generic_collections_object_retrieve |
|
| api_pmbok_generic_collections_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_pmbok_generic_collections_status_retrieve |
|
| api_pmbok_generic_collections_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_pmbok_projects_create |
|
| api_pmbok_projects_currencies_retrieve |
|
| api_pmbok_projects_destroy |
|
| api_pmbok_projects_kind_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_pmbok_projects_object_retrieve |
|
| api_pmbok_projects_partial_update |
|
| api_pmbok_projects_priority_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_pmbok_projects_update |
|
| Cascade preview: |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_pmbok_responsibility_assignments_object_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_pmbok_responsibility_matrices_create |
|
| api_pmbok_responsibility_matrices_cycle_cell_create |
|
| api_pmbok_responsibility_matrices_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_pmbok_responsibility_matrices_object_retrieve |
|
| api_pmbok_responsibility_matrices_partial_update |
|
| api_pmbok_responsibility_matrices_preset_retrieve |
|
| api_pmbok_responsibility_matrices_reorder_activities_create |
|
| api_pmbok_responsibility_matrices_reorder_actors_create |
|
| Return a single object with unauthorized related fields masked. |
|
| api_pmbok_responsibility_matrices_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_pmbok_responsibility_matrix_activities_create |
|
| api_pmbok_responsibility_matrix_activities_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_pmbok_responsibility_matrix_activities_object_retrieve |
|
| api_pmbok_responsibility_matrix_activities_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_pmbok_responsibility_matrix_activities_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_pmbok_responsibility_matrix_actors_create |
|
| api_pmbok_responsibility_matrix_actors_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_pmbok_responsibility_matrix_actors_object_retrieve |
|
| api_pmbok_responsibility_matrix_actors_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_pmbok_responsibility_matrix_actors_update |
|
| Cascade preview: |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_pmbok_responsibility_roles_object_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_pmbok_responsibility_roles_taxonomy_retrieve |
|
| Aggregated analytics over the filtered applied-controls queryset. |
|
| Minimal endpoint for autocomplete selects. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| Return available model types that can be linked to applied controls |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Merge N source applied controls into 1 target. See |
|
| Export filtered applied controls in ANSSI MonServiceSécurisé format |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| API endpoint that allows applied controls to be viewed or edited. |
|
| api_presets_apply_create |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_presets_create |
|
| api_presets_create_blank_create |
|
| api_presets_destroy |
|
| api_presets_discard_draft_create |
|
| api_presets_duplicate_create |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_presets_object_retrieve |
|
| api_presets_partial_update |
|
| api_presets_publish_draft_create |
|
| api_presets_publish_draft_preview_create |
|
| Return a single object with unauthorized related fields masked. |
|
| api_presets_save_draft_partial_update |
|
| api_presets_start_editing_create |
|
| api_presets_update |
|
| Perform a batch action on multiple objects. |
|
| API endpoint that allows data breaches to be viewed or edited. |
|
| Cascade preview: |
|
| API endpoint that allows data breaches to be viewed or edited. |
|
| API endpoint that allows data breaches to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows data breaches to be viewed or edited. |
|
| API endpoint that allows data breaches to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows data breaches to be viewed or edited. |
|
| API endpoint that allows data breaches to be viewed or edited. |
|
| API endpoint that allows data breaches to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows data contractors to be viewed or edited. |
|
| API endpoint that allows data contractors to be viewed or edited. |
|
| API endpoint that allows data contractors to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows data contractors to be viewed or edited. |
|
| API endpoint that allows data contractors to be viewed or edited. |
|
| API endpoint that allows data contractors to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows data contractors to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows data recipients to be viewed or edited. |
|
| API endpoint that allows data recipients to be viewed or edited. |
|
| API endpoint that allows data recipients to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows data recipients to be viewed or edited. |
|
| API endpoint that allows data recipients to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows data recipients to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows data subjects to be viewed or edited. |
|
| API endpoint that allows data subjects to be viewed or edited. |
|
| API endpoint that allows data subjects to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows data subjects to be viewed or edited. |
|
| API endpoint that allows data subjects to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows data subjects to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows data transfers to be viewed or edited. |
|
| API endpoint that allows data transfers to be viewed or edited. |
|
| API endpoint that allows data transfers to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows data transfers to be viewed or edited. |
|
| API endpoint that allows data transfers to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows data transfers to be viewed or edited. |
|
| API endpoint that allows data transfers to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Batch create multiple personal data entries for a processing. |
|
| Cascade preview: |
|
| API endpoint that allows personal data to be viewed or edited. |
|
| API endpoint that allows personal data to be viewed or edited. |
|
| API endpoint that allows personal data to be viewed or edited. |
|
| API endpoint that allows personal data to be viewed or edited. |
|
| API endpoint that allows personal data to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows personal data to be viewed or edited. |
|
| API endpoint that allows personal data to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows personal data to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_privacy_processing_natures_create |
|
| api_privacy_processing_natures_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_privacy_processing_natures_object_retrieve |
|
| api_privacy_processing_natures_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_privacy_processing_natures_update |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Return a single object with unauthorized related fields masked. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| API endpoint that allows purposes to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows purposes to be viewed or edited. |
|
| API endpoint that allows purposes to be viewed or edited. |
|
| API endpoint that allows purposes to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows purposes to be viewed or edited. |
|
| API endpoint that allows purposes to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows purposes to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows right requests to be viewed or edited. |
|
| API endpoint that allows right requests to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows right requests to be viewed or edited. |
|
| API endpoint that allows right requests to be viewed or edited. |
|
| API endpoint that allows right requests to be viewed or edited. |
|
| API endpoint that allows right requests to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows right requests to be viewed or edited. |
|
| API endpoint that allows right requests to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint for QuestionChoice CRUD. |
|
| API endpoint for QuestionChoice CRUD. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint for QuestionChoice CRUD. |
|
| API endpoint for QuestionChoice CRUD. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint for QuestionChoice CRUD. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint for Question CRUD. |
|
| API endpoint for Question CRUD. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint for Question CRUD. |
|
| API endpoint for Question CRUD. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint for Question CRUD. |
|
| api_quick_start_create |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| API endpoint that allows reference controls to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows representatives to be viewed or edited. |
|
| API endpoint that allows representatives to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows representatives to be viewed or edited. |
|
| API endpoint that allows representatives to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows representatives to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| api_requirement_assessments_suggestions_applied_controls_create |
|
| api_requirement_assessments_suggestions_applied_controls_retrieve |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| API endpoint that allows requirement assessments to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows requirement assignments to be viewed or edited. |
|
| API endpoint that allows requirement assignments to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows requirement assignments to be viewed or edited. |
|
| API endpoint that allows requirement assignments to be viewed or edited. |
|
| Returns the scoped requirements list for this assignment. |
|
| Return a single object with unauthorized related fields masked. |
|
| Transition assignment to a new status. |
|
| API endpoint that allows requirement assignments to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_requirement_mapping_sets_create |
|
| api_requirement_mapping_sets_destroy |
|
| api_requirement_mapping_sets_graph_data_retrieve |
|
| api_requirement_mapping_sets_graph_data_retrieve_2 |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_requirement_mapping_sets_object_retrieve |
|
| api_requirement_mapping_sets_partial_update |
|
| api_requirement_mapping_sets_provider_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_requirement_mapping_sets_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows requirements to be viewed or edited. |
|
| API endpoint that allows requirements to be viewed or edited. |
|
| API endpoint that allows requirements to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows requirements to be viewed or edited. |
|
| API endpoint that allows requirements to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| Serve an image attachment belonging to this requirement node. |
|
| API endpoint that allows requirements to be viewed or edited. |
|
| Upload an image file and attach it to this requirement node. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_resilience_asset_assessments_create |
|
| Returns graph data for visualizing asset dependencies. |
|
| api_resilience_asset_assessments_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_resilience_asset_assessments_metrics_retrieve |
|
| api_resilience_asset_assessments_object_retrieve |
|
| api_resilience_asset_assessments_partial_update |
|
| api_resilience_asset_assessments_quali_impact_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_resilience_asset_assessments_risk_matrix_retrieve |
|
| api_resilience_asset_assessments_update |
|
| Perform a batch action on multiple objects. |
|
| api_resilience_business_impact_analysis_build_table_retrieve |
|
| Cascade preview: |
|
| api_resilience_business_impact_analysis_create |
|
| api_resilience_business_impact_analysis_destroy |
|
| api_resilience_business_impact_analysis_export_csv_retrieve |
|
| api_resilience_business_impact_analysis_export_xlsx_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_resilience_business_impact_analysis_metrics_retrieve |
|
| api_resilience_business_impact_analysis_object_retrieve |
|
| api_resilience_business_impact_analysis_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_resilience_business_impact_analysis_status_retrieve |
|
| api_resilience_business_impact_analysis_update |
|
| api_resilience_business_impact_analysis_xlsx_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_resilience_dora_incident_reports_classification_criterion_retrieve |
|
| api_resilience_dora_incident_reports_create |
|
| api_resilience_dora_incident_reports_destroy |
|
| api_resilience_dora_incident_reports_export_json_retrieve |
|
| api_resilience_dora_incident_reports_incident_classification_retrieve |
|
| api_resilience_dora_incident_reports_incident_discovery_retrieve |
|
| api_resilience_dora_incident_reports_incident_submission_retrieve |
|
| api_resilience_dora_incident_reports_info_duration_service_downtime_actual_or_estimate_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_resilience_dora_incident_reports_main_entity_retrieve |
|
| api_resilience_dora_incident_reports_object_retrieve |
|
| api_resilience_dora_incident_reports_partial_update |
|
| api_resilience_dora_incident_reports_report_currency_retrieve |
|
| api_resilience_dora_incident_reports_reporting_authority_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_resilience_dora_incident_reports_root_cause_additional_retrieve |
|
| api_resilience_dora_incident_reports_root_cause_detailed_retrieve |
|
| api_resilience_dora_incident_reports_root_cause_hl_retrieve |
|
| api_resilience_dora_incident_reports_threat_techniques_retrieve |
|
| api_resilience_dora_incident_reports_update |
|
| api_resilience_dora_incident_reports_validate_report_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_resilience_escalation_thresholds_create |
|
| api_resilience_escalation_thresholds_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_resilience_escalation_thresholds_object_retrieve |
|
| api_resilience_escalation_thresholds_partial_update |
|
| api_resilience_escalation_thresholds_quali_impact_retrieve |
|
| api_resilience_escalation_thresholds_quant_unit_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_resilience_escalation_thresholds_risk_matrix_retrieve |
|
| api_resilience_escalation_thresholds_update |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| API endpoint that allows risk acceptance to be viewed or edited. |
|
| Mixin that computes budget aggregation over an applied controls queryset. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| api_risk_assessments_action_plan_list |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| Convert a qualitative risk assessment to a quantitative risk study. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| Returns the quality check of the risk assessments |
|
| Returns the quality check of the risk_assessment |
|
| Return a single object with unauthorized related fields masked. |
|
| Analytics data for a single risk assessment. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| Returns risk metrics over time from BuiltinMetricSample snapshots. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| Synchronize an existing risk assessment with its linked EBIOS RM study. |
|
| Preview what a sync from EBIOS RM would produce. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| API endpoint that allows risk assessments to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| Create a new unpublished RiskMatrix with an editing_draft for the visual editor. |
|
| Clone an existing matrix into a new unpublished RiskMatrix with editing_draft. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| Discard editing_draft without affecting json_definition. |
|
| Export a matrix as a library-compatible YAML file. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| Import a library YAML file and create a new draft matrix from it. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| Publish editing_draft → json_definition, snapshot history, bump version. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| Update editing_draft with current WIP. Metadata stays draft-scoped until publish. |
|
| Copy json_definition into editing_draft to begin editing. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| API endpoint that allows risk matrices to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| API endpoint that allows risk scenarios to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows role assignments to be viewed or edited. |
|
| API endpoint that allows role assignments to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows role assignments to be viewed or edited. |
|
| API endpoint that allows role assignments to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows role assignments to be viewed or edited. |
|
| Universal fuzzy search across all searchable models. |
|
| API endpoint that allows security advisories to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows security advisories to be viewed or edited. |
|
| API endpoint that allows security advisories to be viewed or edited. |
|
| Enrich this advisory with data from its source (NVD or EUVD). |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows security advisories to be viewed or edited. |
|
| API endpoint that allows security advisories to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows security advisories to be viewed or edited. |
|
| Sync EUVD exploited vulnerabilities synchronously. |
|
| Sync KEV feed synchronously. Scheduled async via Huey periodic tasks. |
|
| API endpoint that allows security advisories to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| API endpoint that allows security exceptions to be viewed or edited. |
|
| GET endpoint that returns paginated metadata for all attachments. |
|
| POST endpoint that streams multiple attachments in a custom binary format. |
|
| POST endpoint that accepts multiple attachments in custom binary format. |
|
| api_serdes_dump_db_retrieve |
|
| POST endpoint for atomic database + attachments restore. |
|
| api_serdes_load_backup_create |
|
| api_settings_feature_flags_partial_update |
|
| api_settings_feature_flags_retrieve |
|
| api_settings_feature_flags_update |
|
| Return a {dashboard_uuid: dashboard_name} map of dashboards |
|
| Returns the configured default language. Falls back to English if unset or invalid. |
|
| api_settings_general_default_language_retrieve_2 |
|
| api_settings_general_ebios_radar_parameters_retrieve |
|
| api_settings_general_force_language_create |
|
| api_settings_general_interface_settings_retrieve |
|
| api_settings_general_notifications_settings_retrieve |
|
| api_settings_general_object_retrieve |
|
| api_settings_general_partial_update |
|
| api_settings_general_retrieve |
|
| api_settings_general_security_objective_scale_retrieve |
|
| Partial update of the default_custom_analytics_dashboard key. |
|
| api_settings_general_update |
|
| api_settings_global_create |
|
| api_settings_global_destroy |
|
| api_settings_global_list |
|
| api_settings_global_partial_update |
|
| api_settings_global_retrieve |
|
| api_settings_global_update |
|
| api_settings_sec_intel_feeds_partial_update |
|
| api_settings_sec_intel_feeds_retrieve |
|
| api_settings_sec_intel_feeds_update |
|
| Cascade preview: |
|
| API endpoint that returns the CSRF token. |
|
| api_settings_sso_object_retrieve |
|
| api_settings_sso_partial_update |
|
| api_settings_sso_provider_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_settings_sso_update |
|
| api_settings_vulnerability_sla_partial_update |
|
| api_settings_vulnerability_sla_retrieve |
|
| api_settings_vulnerability_sla_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows solutions to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_stored_libraries_content_retrieve |
|
| api_stored_libraries_create |
|
| api_stored_libraries_destroy |
|
| api_stored_libraries_import_create |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_stored_libraries_locale_retrieve |
|
| api_stored_libraries_object_retrieve |
|
| api_stored_libraries_object_type_retrieve |
|
| api_stored_libraries_partial_update |
|
| api_stored_libraries_provider_retrieve |
|
| Return a single object with unauthorized related fields masked. |
|
| api_stored_libraries_tree_retrieve |
|
| api_stored_libraries_unload_create |
|
| api_stored_libraries_update |
|
| api_stored_libraries_upload_create |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_task_nodes_create |
|
| api_task_nodes_destroy |
|
| api_task_nodes_evidences_list |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_task_nodes_object_retrieve |
|
| api_task_nodes_partial_update |
|
| api_task_nodes_remove_evidence_create |
|
| Return a single object with unauthorized related fields masked. |
|
| api_task_nodes_status_retrieve |
|
| api_task_nodes_update |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Perform a batch action on multiple objects. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Cascade preview: |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Export task templates with a summary sheet and individual sheets for each template's task nodes. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Return a single object with unauthorized related fields masked. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Generic export mixin for CSV/XLSX exports. |
|
| Get recurrent task templates grouped by folder for yearly review. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_teams_create |
|
| api_teams_destroy |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_teams_object_retrieve |
|
| api_teams_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_teams_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_terminologies_create |
|
| api_terminologies_destroy |
|
| api_terminologies_field_path_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_terminologies_object_retrieve |
|
| api_terminologies_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_terminologies_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows threats to be viewed or edited. |
|
| API endpoint that allows threats to be viewed or edited. |
|
| API endpoint that allows threats to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows threats to be viewed or edited. |
|
| API endpoint that allows threats to be viewed or edited. |
|
| API endpoint that allows threats to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows threats to be viewed or edited. |
|
| API endpoint that allows threats to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| api_timeline_entries_create |
|
| api_timeline_entries_destroy |
|
| api_timeline_entries_entry_type_retrieve |
|
| Override the list method to inject optimized data into the serializer context. |
|
| api_timeline_entries_object_retrieve |
|
| api_timeline_entries_partial_update |
|
| Return a single object with unauthorized related fields masked. |
|
| api_timeline_entries_update |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows user groups to be viewed or edited |
|
| API endpoint that allows user groups to be viewed or edited |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows user groups to be viewed or edited |
|
| API endpoint that allows user groups to be viewed or edited |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows user groups to be viewed or edited |
|
| api_user_preferences_partial_update |
|
| api_user_preferences_retrieve |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows users to be viewed or edited |
|
| API endpoint that allows users to be viewed or edited |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows users to be viewed or edited |
|
| API endpoint that allows users to be viewed or edited |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows users to be viewed or edited |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows validation flows to be viewed or edited. |
|
| API endpoint that allows validation flows to be viewed or edited. |
|
| API endpoint that allows validation flows to be viewed or edited. |
|
| Return available model types that can be linked to validation flows |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows validation flows to be viewed or edited. |
|
| API endpoint that allows validation flows to be viewed or edited. |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint that allows validation flows to be viewed or edited. |
|
| API endpoint that allows validation flows to be viewed or edited. |
|
| API endpoint that allows vulnerabilities to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint that allows vulnerabilities to be viewed or edited. |
|
| API endpoint that allows vulnerabilities to be viewed or edited. |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint that allows vulnerabilities to be viewed or edited. |
|
| API endpoint that allows vulnerabilities to be viewed or edited. |
|
| Recalculate due_date for all vulnerabilities based on current SLA policy. |
|
| Return a single object with unauthorized related fields masked. |
|
| Returns vulnerability data structured for Sankey diagram: |
|
| API endpoint that allows vulnerabilities to be viewed or edited. |
|
| API endpoint that allows vulnerabilities to be viewed or edited. |
|
| Returns vulnerability data structured for treemap visualization: |
|
| API endpoint that allows vulnerabilities to be viewed or edited. |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| Admin-managed audit-log forwarding destinations (kind=AUDIT_SINK). Folder/IAM |
|
| Admin-managed audit-log forwarding destinations (kind=AUDIT_SINK). Folder/IAM |
|
| Override the list method to inject optimized data into the serializer context. |
|
| Admin-managed audit-log forwarding destinations (kind=AUDIT_SINK). Folder/IAM |
|
| Admin-managed audit-log forwarding destinations (kind=AUDIT_SINK). Folder/IAM |
|
| Re-emit historical audit events to this sink. Body: {since, until?} (ISO |
|
| Return a single object with unauthorized related fields masked. |
|
| Admin-managed audit-log forwarding destinations (kind=AUDIT_SINK). Folder/IAM |
|
| Perform a batch action on multiple objects. |
|
| Cascade preview: |
|
| API endpoint to create, list, retrieve, update, and delete |
|
| API endpoint to create, list, retrieve, update, and delete |
|
| Override the list method to inject optimized data into the serializer context. |
|
| API endpoint to create, list, retrieve, update, and delete |
|
| API endpoint to create, list, retrieve, update, and delete |
|
| Return a single object with unauthorized related fields masked. |
|
| API endpoint to create, list, retrieve, update, and delete |
|
| Returns a list of all registered event type strings. |
|
| GET endpoint that returns paginated metadata for all attachments. |
|
| POST endpoint that streams multiple attachments in a custom binary format. |
|
| POST endpoint that accepts multiple attachments in custom binary format. |
|
| serdes_dump_db_retrieve |
|
| POST endpoint for atomic database + attachments restore. |
|
| serdes_load_backup_create |
20 action-routed tool(s) (default) · 1565 verbose 1:1 tool(s). Each is enabled unless its <DOMAIN>TOOL toggle is set false; MCP_TOOL_MODE selects the surface (condensed default · verbose 1:1 · both). Auto-generated — do not edit.
A2A Agent
Run A2A Server
export CISO_ASSISTANT_URL="https://ciso.arpa"
export CISO_ASSISTANT_TOKEN="your_token"
ciso-assistant-agent --provider openai --model-id gpt-4o --api-key sk-...Docker
Build
docker build -t ciso-assistant-api .Run MCP Server
docker run -d \
--name ciso-assistant-api \
-p 8000:8000 \
-e TRANSPORT=http \
-e CISO_ASSISTANT_URL="https://ciso.arpa" \
-e CISO_ASSISTANT_TOKEN="your_token" \
knucklessg1/ciso-assistant-api:mcpThe
:mcptag is the slim MCP-server image (built fromdocker/Dockerfile --target mcp, installingciso-assistant-api[mcp]). The default:latesttag is the full agent image (--target agent,ciso-assistant-api[agent]) which also bundles the Pydantic AI agent and the epistemic-graph engine — use it when you runciso-assistant-agent(the agent), not just the MCP server. See Container images.
Deploy with Docker Compose
services:
ciso-assistant-api:
image: knucklessg1/ciso-assistant-api:mcp
environment:
- HOST=0.0.0.0
- PORT=8000
- TRANSPORT=http
- CISO_ASSISTANT_URL=https://ciso.arpa
- CISO_ASSISTANT_TOKEN=your_token
ports:
- 8000:8000Configure mcp.json for AI Integration (e.g. Claude Desktop)
Install the slim
[mcp]extra. The example below installsciso-assistant-api[mcp]— the MCP-server extra that pulls only the FastMCP / FastAPI tooling (agent-utilities[mcp]). It deliberately excludes the heavy agent runtime (the epistemic-graph engine,pydantic-ai,dspy,llama-index,tree-sitter), souvx/container installs are dramatically smaller and faster. Use the full[agent]extra only when you need the integrated Pydantic AI agent (see Installation).
{
"mcpServers": {
"ciso_assistant": {
"command": "uv",
"args": [
"run",
"--with",
"ciso-assistant-api[mcp]",
"ciso-assistant-mcp"
],
"env": {
"CISO_ASSISTANT_URL": "https://ciso.arpa",
"CISO_ASSISTANT_TOKEN": "your_token"
}
}
}
}Install Python Package
Pick the extra that matches what you want to run:
Extra | Installs | Use when |
| Slim MCP server only ( | You only run the MCP server (smallest install / image) |
| Full agent runtime ( | You run the integrated agent |
| Everything ( | Development / both surfaces |
# MCP server only (recommended for tool hosting — slim deps)
uv pip install "ciso-assistant-api[mcp]"
# Full agent runtime (Pydantic AI + epistemic-graph engine)
uv pip install "ciso-assistant-api[agent]"
# Everything (development)
uv pip install "ciso-assistant-api[all]" # or: python -m pip install "ciso-assistant-api[all]"Container images (:mcp vs :agent)
One multi-stage docker/Dockerfile builds two right-sized images, selected by --target:
Image tag | Build target | Contents | Entrypoint |
|
|
|
|
|
|
|
|
docker build --target mcp -t knucklessg1/ciso-assistant-api:mcp docker/ # slim MCP server
docker build --target agent -t knucklessg1/ciso-assistant-api:latest docker/ # full agentdocker/mcp.compose.yml runs the slim :mcp server; docker/agent.compose.yml runs the
agent (:latest) with a co-located :mcp sidecar.
Knowledge-graph database (epistemic-graph)
The full agent ([agent] / :latest) embeds the epistemic-graph engine (pulled in
transitively via agent-utilities[agent]). For production — or to share one knowledge graph
across multiple agents — run epistemic-graph as its own database container and point the
agent at it instead of embedding it. Deployment recipes (single-node + Raft HA), connection
config, and the full database architecture (with diagrams) are documented in the
epistemic-graph deployment guide.
The slim [mcp] server does not require the database.
Documentation
The complete documentation is published as the official documentation site and is the source of truth for installation, usage, and deployment.
Page | Covers |
the action-routed tool surface and architecture | |
pip, source, extras, prebuilt Docker image | |
the MCP tools, the | |
run the MCP and agent servers, Compose, env config |
Repository Owners
Deploy with agent-os-genesis
This package can be provisioned for you — skill-guided — by the agent-os-genesis
universal skill (its single-package deploy mode): it picks your install method, seeds
secrets to OpenBao/Vault (or .env), trusts your enterprise CA, registers the MCP
server, and verifies it — the same machinery that stands up the whole Agent OS, narrowed
to just this package. Ask your agent to "deploy ciso-assistant-api with agent-os-genesis".
Install mode | Command |
Bare-metal, prod (PyPI) |
|
Bare-metal, dev (editable) |
|
Container, prod | deploy |
Container, dev (editable) | deploy |
Secrets are read-existing + seeded via vault_sync — you are only prompted for what's missing.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Knuckles-Team/ciso-assistant-api'
If you have feedback or need assistance with the MCP directory API, please join our Discord server