delete_suppression_rule
Delete a suppression rule to prevent new detections from being suppressed by it. Existing suppressed detections are not unsuppressed; they retain the deleted rule ID.
Instructions
Delete a suppression rule. WRITE OPERATION — requires confirm: true. NOTE: deleting a rule does NOT un-suppress detections it previously matched; they remain in the suppressed state with the deleted rule_id attached.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| customer | No | StepSecurity customer/tenant identifier. Optional — falls back to STEP_SECURITY_CUSTOMER env var. | |
| ruleId | Yes | Rule id to delete | |
| confirm | Yes | Set to true to actually execute the write. Any other value (including omitted) returns an error — this is a safety check so the LLM cannot write without explicit user approval. |