RunReveal

53 tools found.

• List agent resources

  Tool name: agent_resources_list

  List built-in reference documents available to load with AgentResourcesLoad.

• Agent resources load

  Tool name: agent_resources_load

  Load a built-in reference document by uri.

• Create agent skills

  Tool name: agent_skills_create

  Create a new agent skill in this workspace.

• List agent skills

  Tool name: agent_skills_list

  List the agent skills available in this workspace.

• Agent skills load

  Tool name: agent_skills_load

  Load a single agent skill by name.

• Update agent skills

  Tool name: agent_skills_update

  Apply a partial edit to an existing agent skill.

• Create agents

  Tool name: agents_create

  Create a scheduled AI agent that runs a prompt on a cron schedule.

• Delete agents

  Tool name: agents_delete

  Delete a scheduled AI agent by id, including its auto-created role and access policies.

• Get agents

  Tool name: agents_get

  Get a scheduled AI agent's full configuration by id.

• List agents

  Tool name: agents_list

  List the workspace's scheduled AI agents.

• Agents silence

  Tool name: agents_silence

  Temporarily mute a scheduled AI agent's notifications by id until a given timestamp, without disabling or deleting it.

• Update agents

  Tool name: agents_update

  Update an existing scheduled AI agent by id (displayName and prompt required).

• Create dashboard graph

  Tool name: dashboard_graph_create

  Create a dashboard graph (a saved visualization) from a query.

• Delete dashboard graph

  Tool name: dashboard_graph_delete

  DeleteDashboardGraph handles deleting a dashboard graph using RPC framework

• Get dashboard graph

  Tool name: dashboard_graph_get

  Get a dashboard graph by id or name.

• List dashboard graph

  Tool name: dashboard_graph_list

  List the workspace's dashboard graphs (saved visualizations).

• Update dashboard graph

  Tool name: dashboard_graph_update

  Update a dashboard graph by id.

• Dashboard graph usage

  Tool name: dashboard_graph_usage

  GetDashboardGraphUsage handles getting usage information for a specific graph using RPC framework

• Create dashboard layout

  Tool name: dashboard_layout_create

  Create a dashboard layout that arranges graphs into panels.

• Delete dashboard layout

  Tool name: dashboard_layout_delete

  Delete a dashboard layout and its panels by id.

• Get dashboard layout

  Tool name: dashboard_layout_get

  Get a dashboard layout by id or name, with its graphs fully hydrated.

• List dashboard layout

  Tool name: dashboard_layout_list

  List the workspace's dashboard layouts.

• Update dashboard layout

  Tool name: dashboard_layout_update

  Update a dashboard layout by id.

• Delete detection

  Tool name: detection_delete

  Delete a detection rule.

• Update detection

  Tool name: detection_update

  Update an existing SCHEDULED SQL detection rule.

• Create detections

  Tool name: detections_create

  Create a SCHEDULED SQL detection that runs on a cron schedule (batch query).

• Get detections

  Tool name: detections_get

  Get a custom (non-managed) detection by name.

• List detections

  Tool name: detections_list

  List all detections in the workspace.

• Get table schema

  Tool name: get_table_schema

  Get the schema and indexes for a specific table.

• Create investigation

  Tool name: investigation_create

  Create a new investigation to track and analyze a security incident.

• Get investigation

  Tool name: investigation_get

  Get a single investigation by ID or name.

• List investigation

  Tool name: investigation_list

  List investigations with optional filtering.

• Investigations by alert

  Tool name: investigations_by_alert

  Look up investigations linked to a specific alert ID.

• List tables

  Tool name: list_tables

  List the ClickHouse tables and views available to query in this workspace.

• Managed detection bulk clone

  Tool name: managed_detection_bulk_clone

  Clone multiple managed detections from the library into independent, editable detections in one request.

• Managed detection clone

  Tool name: managed_detection_clone

  Clone a managed detection into an independent, editable detection.

• Get managed detection

  Tool name: managed_detection_get

  Get a managed detection config by ID.

• List managed detection

  Tool name: managed_detection_list

  List all available managed detections from the detection library.

• Managed detection subscription get

  Tool name: managed_detection_subscription_get

  Get a managed detection subscription by ID.

• Managed detection subscription list

  Tool name: managed_detection_subscription_list

  List managed detection subscriptions for the workspace.

• Managed detection subscription update

  Tool name: managed_detection_subscription_update

  Update a managed detection subscription's tunable settings: notification channels, notification template, parameters, enabled status, and auto-triage config.

• Managed detection unsubscribe

  Tool name: managed_detection_unsubscribe

  Delete (unsubscribe from) a managed detection subscription.

• List notification

  Tool name: notification_list

  List all notification configs that have been configured for this workspace.

• Notification send

  Tool name: notification_send

  Send a notification to a notification channel.

• Run query

  Tool name: run_query

  Execute ClickHouse SQL queries against log data.

• Create sigma

  Tool name: sigma_create

  Create a REAL-TIME Sigma detection from a YAML rule definition.

• Update sigma

  Tool name: sigma_update

  Update an existing REAL-TIME Sigma detection with a new YAML rule definition.

• List source

  Tool name: source_list

  List the workspace's configured log sources.

• Create template

  Tool name: template_create

  Creates a new notification template in the workspace.

• Delete template

  Tool name: template_delete

  Deletes a notification template from the workspace by name.

• List template

  Tool name: template_list

  Lists the workspace's notification templates along with the built-in default templates.

• List template partials

  Tool name: template_partials_list

  Lists the built-in template partials available for use in notification templates.

• Update template

  Tool name: template_update

  Updates an existing notification template in the workspace.