mark_inbox_item_as_false_positive
Mark security alerts as false positives in RAD Security's inbox to reduce noise and focus on genuine threats by providing a reason for the classification.
Instructions
Mark an inbox item as a false positive with a reason
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| inbox_item_id | Yes | ID of the inbox item to mark as false positive | |
| value | No | Whether to mark the item as false positive (true) or not (false) | |
| reason | Yes | Reason for marking the item as false positive |
Implementation Reference
- src/operations/inbox.ts:20-33 (handler)Core handler function that executes the logic: constructs payload and makes PUT request to mark inbox item as false positive via the client.
export async function markInboxItemAsFalsePositive( client: RadSecurityClient, inboxItemId: string, value: boolean = true, reason: string ): Promise<any> { const payload: Record<string, any> = { value, reason }; return client.makeRequest( `/accounts/${client.getAccountId()}/inbox_items/${inboxItemId}/mark_false_positive`, {}, { method: "PUT", body: payload } ); } - src/operations/inbox.ts:4-8 (schema)Zod input schema defining parameters: inbox_item_id, value (default true), reason.
export const MarkInboxItemAsFalsePositiveSchema = z.object({ inbox_item_id: z.string().describe("ID of the inbox item to mark as false positive"), value: z.boolean().default(true).describe("Whether to mark the item as false positive (true) or not (false)"), reason: z.string().describe("Reason for marking the item as false positive"), }); - src/index.ts:483-488 (registration)Tool registration in listTools handler: defines name, description, and input schema.
name: "mark_inbox_item_as_false_positive", description: "Mark an inbox item as a false positive with a reason", inputSchema: zodToJsonSchema( inbox.MarkInboxItemAsFalsePositiveSchema ), - src/index.ts:1339-1354 (handler)MCP CallToolRequest handler case: parses arguments with schema, calls core handler, returns JSON response.
case "mark_inbox_item_as_false_positive": { const args = inbox.MarkInboxItemAsFalsePositiveSchema.parse( request.params.arguments ); const response = await inbox.markInboxItemAsFalsePositive( client, args.inbox_item_id, args.value, args.reason ); return { content: [ { type: "text", text: JSON.stringify(response, null, 2) }, ], }; }