Fallback tool to reach any of the 337 Cymulate REST endpoints not covered by first-class tools. Use when a first-class tool does not exist for the endpoint you need.

Ping the Cymulate API to verify auth and connectivity. Returns rate-limit info from the last response.

Return the last HTTP request/response for debugging. Useful when a call failed and you want to see the wire.

Launch a Breach & Attack Simulation assessment on the selected module. Requires template_id for most modules; module-specific fields may go in options.

Stop a running BAS assessment on the selected module.

Get current status of the BAS module (running/idle/last-run info).

Get the latest executive report results for the selected BAS module.

Get the latest technical report for the selected BAS module.

List historical assessment IDs for the selected BAS module. Prefer this over the module-specific /ids endpoint.

Get executive report for a specific assessment by ID.

Get technical (detailed) report for a specific assessment. Use for SIEM/detection engineering.

List templates available for the selected BAS module.

Get details for a specific template of the selected BAS module.

List available Immediate Threats templates (the IOC-of-the-day feed).

Get assessments that have IOCs (indicators of compromise) available.

Get detection results (SIEM matches) for a specific Immediate Threats assessment.

Upload a custom Immediate Threat with your own IOCs. Body should follow the Cymulate custom-threat schema.

Get list of IDs from the latest Immediate Threats assessments (recent runs).

Trigger a new Attack Surface Management assessment (external recon).

Get list of ASM assessment IDs from history.

Get all findings for the latest ASM assessment.

Get all findings for a specific ASM assessment.

Get detailed technical output from the latest ASM assessment.

List Purple Team / Advanced Scenarios templates available.

Get details of a specific Advanced Scenarios template.

Create a new Advanced Scenarios (Purple Team) assessment.

Launch a previously-created Advanced Scenarios assessment.

List all Advanced Scenarios assessments.

Get results for a specific Advanced Scenarios assessment.

Get findings from a specific Advanced Scenarios assessment.

Get Advanced Scenarios / Purple Team dashboard data.

Search findings across the platform with filters (severity, module, MITRE tag, date range, etc). Filters go in the request body.

Get available filter options for the Findings page.

Get detailed information about a specific finding.

List integrations available to auto-remediate a specific finding.

Auto-remediate a finding to the selected integration(s).

Auto-remediate multiple findings in a single call.

List available Full Kill-Chain Scenarios templates (single-APT).

Get details of a specific Full Kill-Chain Scenarios template.

List available Full Kill-Chain Campaign templates (multi-APT).

Get detection results for a specific FKC Scenarios payload.

List all launched Exposure Validation assessments.

Create a new launched Exposure Validation assessment.

Get a specific launched Exposure Validation assessment.

Delete a specific launched EV assessment.

Get the launched-assessment configurations available.

Get filters available for launched EV assessments.

List all scheduled Exposure Validation assessments.

Schedule a new Exposure Validation assessment.

Get a specific scheduled EV assessment.

Update a scheduled EV assessment.

Delete a scheduled EV assessment.

Get scheduled-assessment configurations available.

List all Exposure Validation templates.

Create a new EV template.

Get a specific EV template.

Update an existing EV template.

Delete an EV template.

List all EV smart templates.

Create a new EV smart template.

Get a specific EV smart template.

List all available EV scenario actions (building blocks for scenarios).

Create a new Exposure Validation scenario.

Get a specific EV scenario.

Update an existing EV scenario.

Delete an EV scenario.

List all Exposure Validation threats in the catalog.

Get available filter options for the EV threats catalog.

Get a specific EV threat.

List existing scheduled auto-runs for EV threats.

Create a scheduled auto-run for EV threats.

List Exposure Validation resources (assets, payloads, etc).

Get a specific EV resource.

Get filters available for EV resources.

Create a new EV resource.

List all EV input configurations.

Create an input configuration.

Get a specific EV input configuration.

Update an EV input configuration.

Delete an EV input configuration.

List all EV template groups.

Get a specific EV template group.

Get pre-requirement checks for a scheduled-assessment task.

Re-run post-assessment pre-requirement checks for a launched assessment.

List CVEs from Exposure Analytics with optional filters.

Get details for a specific CVE from Exposure Analytics.

Export CVEs (typically CSV or JSON download).

Get details for a specific exposure.

Export exposures from Exposure Analytics.

List Remediation Plan tasks from Exposure Analytics.

Get filter options for Remediation Plan tasks.

Export Remediation Plan tasks.

Returns drawer-level task detail (status history, severity, CVEs, mitigation type) for a single remediation task.

Traverses the exposures associated with the task rule filter — returns all exposures linked to a remediation task.

Returns actionable mitigations derived from the task rule filter — Sigma/KQL/XQL/policy suggestions Cymulate ships for the task.

Create a validation template in Exposure Analytics.

List all Cymulate environments.

Create a new Cymulate environment.

Get a specific Cymulate environment.

Delete a Cymulate environment.