RAD Security

Instructions

Implementation Reference

• src/operations/findings.ts:96-110 (handler)

  Core handler function that executes the tool logic by making a PUT request to update the status of a unified finding group.

  export async function updateFindingGroupStatus(
    client: RadSecurityClient,
    id: string,
    status: string
  ): Promise<void> {
    const data = { status };
    await client.makeRequest(
      `/accounts/${client.getAccountId()}/unified_findings/groups/${id}/status`,
      {},
      {
        method: "PUT",
        body: data,
      }
    );
  }

• src/operations/findings.ts:24-27 (schema)

  Zod input schema defining the tool parameters: finding ID and new status.

  export const updateFindingStatusSchema = z.object({
    id: z.string().describe("Finding ID to update"),
    status: z.enum(statuses).describe("New status for the finding"),
  });

• src/index.ts:432-436 (registration)

  Tool registration in the ListToolsRequest handler, specifying name, description, and input schema.

      name: "update_security_finding_status",
      description: "Update the status of a security finding",
      inputSchema: zodToJsonSchema(findings.updateFindingStatusSchema),
    },
  ]

• src/index.ts:1265-1288 (registration)

  Tool handler dispatch in the CallToolRequest switch statement, which validates input and invokes the core handler.

  case "update_security_finding_status": {
    const args = findings.updateFindingStatusSchema.parse(
      request.params.arguments
    );
    await findings.updateFindingGroupStatus(
      client,
      args.id,
      args.status
    );
    return {
      content: [
        {
          type: "text",
          text: JSON.stringify(
            {
              success: true,
              message: `Finding ${args.id} status updated to ${args.status}`,
            },
            null,
            2
          ),
        },
      ],
    };

• src/operations/findings.ts:5-5 (helper)

  Const array defining valid status values used in schema and API calls.

  export const statuses = ["open", "closed", "ignored"] as const;