List all objects of a CMDB resource type.

Covers any GET on /api/v2/cmdb/{resource_path}. Returns the full FortiOS JSON response including results array and metadata.

Get a single CMDB configuration object by its primary key.

Covers any GET on /api/v2/cmdb/{resource}/{key}.

Create a new CMDB configuration object (POST).

Covers any POST on /api/v2/cmdb/{resource_path}.

Update/replace a CMDB configuration object (PUT).

Covers any PUT on /api/v2/cmdb/{resource_path}/{key}.

Delete a CMDB configuration object.

Covers any DELETE on /api/v2/cmdb/{resource_path}/{key}.

Retrieve real-time operational data from any monitor endpoint.

Covers any GET on /api/v2/monitor/{monitor_path}.

Trigger a monitor action (POST) on any monitor endpoint.

Covers any POST on /api/v2/monitor/{monitor_path}.

Retrieve log entries from disk, memory, FortiAnalyzer, or FortiCloud.

Covers any GET on /api/v2/log/{log_path}.

Call any FortiOS Service API endpoint.

Covers all GET/POST on /api/v2/service/{service_path}.

Get the FortiOS system status (firmware version, hostname, serial number, uptime, HA state, etc.).

Get real-time resource usage: CPU, memory, disk, sessions.

Get performance statistics (CPU usage per core, memory, network throughput).

Get High Availability (HA) cluster status.

List available firmware versions for upgrade.

Get the current system time and timezone.

Get FortiOS global settings (hostname, admin timeout, language, etc.).

Update FortiOS global settings (partial update — only specified fields change).

List all network interfaces (physical, VLAN, loopback, aggregate, tunnel).

Get the configuration of a specific interface.

Create a new network interface.

Update an existing network interface (only specified fields are changed).

Delete a network interface.

Get DNS server configuration (primary, secondary, search domains).

Update DNS configuration.

Get NTP synchronization configuration.

Update NTP configuration.

List all administrator accounts.

Get a specific administrator account configuration.

Create a new administrator account.

Delete an administrator account.

List all DHCP server instances.

Get a specific DHCP server configuration.

Create a new DHCP server.

Get SNMP system info (contact, location, description, trap thresholds).

List SNMP v1/v2c communities.

List SNMPv3 users.

Get FortiGuard service registration and update status.

Get the FortiGuard auto-update schedule.

List local (device) certificates.

List trusted CA certificates.

List all configured VDOMs.

Get the primary Syslog server configuration.

List IPv4 firewall policies with optional filters.

Returns policy ID, name, source/destination interfaces and zones, source/destination addresses, services, action, and status.

Get a specific IPv4 firewall policy by its ID.

Create a new IPv4 firewall policy.

Update fields of an existing IPv4 firewall policy.

Delete an IPv4 firewall policy.

Move a firewall policy (change its order in the policy table).

List all IPv6 firewall policies.

List all IPv4 firewall address objects.

Get a specific IPv4 firewall address object.

Create a new IPv4 firewall address object.

Update an IPv4 firewall address object.

Delete an IPv4 firewall address object.

List all IPv4 firewall address groups.

Get a specific IPv4 address group and its members.

Create a new IPv4 address group.

Delete an IPv4 address group.

List all custom firewall service objects.

Get a specific custom firewall service object.

Create a new custom service object.

List all firewall service groups.

List all Virtual IP (DNAT) objects.

Get a specific Virtual IP (DNAT) object.

Create a new Virtual IP (DNAT/port-forward) object.

Delete a Virtual IP object.

List all VIP groups.

List all IP pool (source NAT) objects.

Create a new IP pool (source NAT pool) object.

List all one-time schedules.

List all recurring schedules.

List all central SNAT (outgoing NAT) rules.

List all SSL/SSH deep inspection profiles.

List all traffic shaping policies.

List active firewall sessions with optional filters.

Close a specific active firewall session.

Get hit counts, bytes, and packet statistics per firewall policy.

Get resolved IPs for all dynamic/FQDN firewall address objects.

List active banned/exempt IPs in the firewall.

List all IPsec VPN Phase 1 (IKE gateway) interfaces.

Get a specific IPsec Phase 1 interface configuration.

Create a new IPsec VPN Phase 1 interface (IKEv1/IKEv2 gateway).

Update an existing IPsec Phase 1 interface.

Delete an IPsec Phase 1 tunnel interface.

List all IPsec VPN Phase 2 (SA / child SA) selectors.

Get a specific IPsec Phase 2 selector configuration.

Create a new IPsec VPN Phase 2 selector.

Delete an IPsec Phase 2 selector.

Get SSL VPN global settings (port, certificates, idle timeout, etc.).

Update SSL VPN global settings.

List all SSL VPN portals.

Get a specific SSL VPN portal configuration.

Create a new SSL VPN portal.

Delete an SSL VPN portal.

List SSL VPN host check software (endpoint compliance) rules.

List all VPN CA certificates.

List all VPN local (device) certificates.

List all remote (peer) VPN certificates.

List OCSP server configurations for certificate revocation checking.

Get status of all IPsec VPN tunnels (up/down, bytes transferred, SAs).