Wiz

238 tools found.

• AWS organizations overview

  Tool name: aws_organizations_overview

  Run a structured AWS cloud security assessment against a Wiz environment focused on AWS Organization concepts.

• Code to cloud attack path skill

  Tool name: code_to_cloud_attack_path_skill

  Production vulnerability tracing through deployment pipelines to source code and ownership.

• Cost spike investigation skill

  Tool name: cost_spike_investigation_skill

  Cloud cost anomaly investigation for daily, weekly, or monthly spikes.

• Dev documentation search

  Tool name: dev_documentation_search

  Searches the Wiz Integration Network (WIN) developer documentation (docs.wiz.io/dev) and returns relevant information and links.

• Devops resource auditing skill

  Tool name: devops_resource_auditing_skill

  Security posture assessment for cloud resources experiencing operational anomalies (CPU spikes, memory issues, network anomalies, cost increases).

• Discover

  Tool name: discover

  Discover available tools organized by domain.

• Execute

  Tool name: execute

  Execute a tool by name with the given parameters.

• Execute graph query

  Tool name: execute_graph_query

  Executes a Wiz Security Graph query using a structured GraphEntityQueryInput JSON object.

• Generate compliance framework skill

  Tool name: generate_compliance_framework_skill

  Onboarding of a compliance framework or cloud benchmark document (public standard or custom/internal) into Wiz as a custom framework.

• Get account team contacts

  Tool name: get_account_team_contacts

  Get Wiz account team contacts (CSM, TAM, SE) assigned to this tenant.

• Get AI security finding

  Tool name: get_ai_security_finding

  Retrieve detailed information about a single AI security finding by ID.

• Get AI security summary

  Tool name: get_ai_security_summary

  Retrieve a comprehensive AI security posture summary in a single call, covering: Visibility (AI resource counts), Risk (issue counts by severity and resource type), Threat Detection (threat counts by…

• Get attack surface finding

  Tool name: get_attack_surface_finding

  Retrieves comprehensive details about a specific attack surface finding by its unique ID.

• Get attack surface settings

  Tool name: get_attack_surface_settings

  Retrieves the full attack surface (ASM) scanner configuration for the tenant.

• Get automation rule

  Tool name: get_automation_rule

  Automation rule metadata (ID, name, description, trigger source, trigger type, filters, actions, auto remediation, enabled status, created and updated dates)

• Get champion center item

  Tool name: get_champion_center_item

  Get detailed information about a specific Champion Center journey item by ID.

• Get champion center pillar summary

  Tool name: get_champion_center_pillar_summary

  Get the Champion Center assessment currently published for ONE pillar: its health rating and the written summary of where the tenant stands and what to do next.

• Get cicd scan

  Tool name: get_cicd_scan

  Retrieves the full details of a single CI/CD scan (Wiz CLI pipeline scan) by scan ID: verdict, execution state, evaluated policies, failed policy matches with ignore reasons, finding analytics per…

• Get cicd scan policy

  Tool name: get_cicd_scan_policy

  Retrieves the full configuration of a single CI/CD scan policy by ID: type, enforcement lifecycle stages, type-specific parameters (severity thresholds, count thresholds, allow-lists, grace periods),…

• Get cloud configuration finding

  Tool name: get_cloud_configuration_finding

  Retrieve detailed information about a specific cloud configuration finding by its ID, including remediation instructions.

• Get cloud event

  Tool name: get_cloud_event

  Retrieve full details of a single cloud event by its ID, including the raw audit log record.

• Get cloud resource

  Tool name: get_cloud_resource

  Retrieve detailed information about a specific cloud resource by its Wiz ID.

• Get code owner

  Tool name: get_code_owner

  Lookup code owners and VCS user accounts from the cloud resource inventory.

• Get compliance framework

  Tool name: get_compliance_framework

  Retrieves detailed compliance breakdown for a specific security framework.

• Get compliance gaps by project

  Tool name: get_compliance_gaps_by_project

  Performs cross-framework compliance gap analysis across Wiz projects.

• Get compliance gaps by subscription

  Tool name: get_compliance_gaps_by_subscription

  Performs cross-framework compliance gap analysis across cloud subscriptions/accounts.

• Get compliance ratings

  Tool name: get_compliance_ratings

  Get compliance ratings for security frameworks with average posture scores.

• Get connector

  Tool name: get_connector

  Retrieve comprehensive details about a Wiz deployment connector including configuration, status, health issues, and cloud events integration settings.

• Get container image

  Tool name: get_container_image

  Returns provenance, build lineage, and composition for a single container-image resource by its resource ID: detected base image, container repository, OS distribution, technology, registry…

• Get container image layers

  Tool name: get_container_image_layers

  Returns the layer history for a single container-image resource by ID: each layer's build command (docker-history-style), author, creation timestamp, comment, and layer ID, plus the base/top layer…

• Get control

  Tool name: get_control

  Retrieves the full definition of ONE security control by its ID, including the query the control runs, its scope query, severity, resolution recommendation, source Cloud Configuration Rule (if any),…

• Get control compliance frameworks

  Tool name: get_control_compliance_frameworks

  Retrieves detailed compliance framework and sub-category mappings for a specific security control.

• Get cost analysis grouped

  Tool name: get_cost_analysis_grouped

  Retrieve high-level cloud cost data aggregated by services, regions, categories, and other dimensions.

• Get cost investigation

  Tool name: get_cost_investigation

  Comprehensive cost investigation tool for analyzing anomalies, changes, and trends in cloud spending.

• Get cost monitor finding

  Tool name: get_cost_monitor_finding

  Finding metadata (severity, status, detection method, exceeded amount)

• Get cost optimization opportunities

  Tool name: get_cost_optimization_opportunities

  Retrieve cost optimization opportunities from Wiz for high-level analysis and grouping.

• Get cost settings

  Tool name: get_cost_settings

  Retrieve the tenant-level Cloud Cost Settings AND the list of currencies present in ingested cost data, in a single call.

• Get data finding

  Tool name: get_data_finding

  Retrieves comprehensive details about a specific data finding by its unique ID.

• Get data scan results

  Tool name: get_data_scan_results

  Check which data resources are being scanned by Wiz DSPM

• Get ebs snapshot scanner settings

  Tool name: get_ebs_snapshot_scanner_settings

  EbsSnapshotConcurrentCopySettings — max concurrent EBS snapshot copies (global publicCloudLimit, plus per-region and per-account+region overrides).

• Get entitlement

  Tool name: get_entitlement

  Retrieves the access path, policies, and permissions between a specific principal and resource.

• Get excessive access finding

  Tool name: get_excessive_access_finding

  Retrieves the full policy content and diff for a specific excessive access finding.

• Get framework categories

  Tool name: get_framework_categories

  Retrieves the lightweight structure of a security framework with its categories and subcategories.

• Get graph entity raw data

  Tool name: get_graph_entity_raw_data

  Retrieve the raw, provider-specific native JSON data for a specific graph entity (resource) from the Security Graph using its Wiz ID.

• Get green agent analysis

  Tool name: get_green_agent_analysis

  Retrieve the green agent (AI remediation) analysis for a specific risk issue (not posture issues).

• Get host configuration finding

  Tool name: get_host_configuration_finding

  Retrieve detailed information about a specific host configuration finding (a host configuration rule assessment against a resource) by its ID, including remediation instructions from the associated…

• Get host configuration rule

  Tool name: get_host_configuration_rule

  Retrieve detailed information about a specific host configuration rule assessment by its ID, including remediation instructions from the associated rule.

• Get hosted technology

  Tool name: get_hosted_technology

  Retrieves comprehensive details about a specific hosted technology instance by its unique ID.

• Get iac finding

  Tool name: get_iac_finding

  Retrieves comprehensive details for a single IaC (Infrastructure as Code) finding using its unique ID.

• Get identity

  Tool name: get_identity

  Retrieves a specific identity (person) with their linked user accounts across multiple services.

• Get identity access finding

  Tool name: get_identity_access_finding

  Retrieves detailed information about a specific identity access finding by ID.

• Get image dockerfile

  Tool name: get_image_dockerfile

  Returns the Dockerfile recorded for a single container-image resource at build time (captured by wiz-cli / CI build scans): the file path, the full Dockerfile contents, and the commit hash / branch…

• Get integration

  Tool name: get_integration

  Integration metadata (ID, type, name, status, behavior, category)

• Get inventory finding

  Tool name: get_inventory_finding

  Retrieves comprehensive details about a specific inventory management finding by its unique ID.

• Get inventory rule

  Tool name: get_inventory_rule

  Retrieves comprehensive details about a specific inventory management rule by its unique ID.

• Get issue

  Tool name: get_issue

  Issue metadata (ID, type, status, severity, creation/resolution dates)

• Get issue assignee suggestions

  Tool name: get_issue_assignee_suggestions

  Retrieves suggested assignees for a specific issue from the Wiz platform.

• Get issue evidence records

  Tool name: get_issue_evidence_records

  Evidence entity details (ID, type, name)

• Get issue remediation options

  Tool name: get_issue_remediation_options

  Retrieves available automated remediation options for a specific issue.

• Get issue remediation strategies

  Tool name: get_issue_remediation_strategies

  Issue identification (ID, type, status, severity)

• Get issue resolution evidence

  Tool name: get_issue_resolution_evidence

  Issue status and resolution details (reason, notes)

• Get issue security graph

  Tool name: get_issue_security_graph

  Graph entities and their relationships

• Get kubernetes cost

  Tool name: get_kubernetes_cost

  Retrieve Kubernetes cost trends over time as a time-series of data points.

• Get license

  Tool name: get_license

  Retrieve detailed information about license usage within the Wiz platform.

• Get monitored metric

  Tool name: get_monitored_metric

  Get detailed information about a single monitored metric by its exact ID.

• Get network connections

  Tool name: get_network_connections

  The source (from) and destination (to) resources, including cloud provider, region, Kubernetes context, and destination technology

• Get network exposure

  Tool name: get_network_exposure

  Retrieves detailed network exposure information for a specific entity, including full entity properties (cloud platform, region, status, privilege levels, etc.) for in-depth analysis.

• Get non os disk scanning settings

  Tool name: get_non_os_disk_scanning_settings

  Fetches tenant-level non-OS disk scanning configuration from the Wiz API (Settings → Workload Scanner → Non-OS Disk Scanning).

• Get nrt settings

  Tool name: get_nrt_settings

  Retrieves the Near Real-Time (NRT) scanning settings for the Wiz tenant.

• Get penetration test finding

  Tool name: get_penetration_test_finding

  Retrieve detailed information about a specific penetration test finding by ID, including description, severity, status, origin, affected resource, projects, tags, reporter, file attachments, and…

• Get platform adoption metrics

  Tool name: get_platform_adoption_metrics

  Get platform adoption metrics including active users, projects, services, and integrations.

• Get posture issue

  Tool name: get_posture_issue

  Retrieves detailed information for a specific security posture issue using its unique ID.

• Get posture issue assignee suggestions

  Tool name: get_posture_issue_assignee_suggestions

  Retrieves suggested assignees for a specific posture issue from the Wiz platform.

• Get principal

  Tool name: get_principal

  Retrieves details for a specific cloud identity principal by ID.

• Get project

  Tool name: get_project

  Retrieve detailed information for a specific project by exact ID.

• Get resource cost

  Tool name: get_resource_cost

  Retrieve granular cost data for individual cloud resources (most detailed level).

• Get sast finding

  Tool name: get_sast_finding

  Retrieve detailed information about a specific SAST finding from Wiz.

• Get sec arch opp

  Tool name: get_sec_arch_opp

  Returns the full data for a single Secure Architecture opportunity, looked up by its opportunity id: the affected resource (name, external ID / image path, native type, live issue and vulnerability…

• Get secret finding

  Tool name: get_secret_finding

  Fetch comprehensive details about a specific secret finding by ID, including validation status, resource context, blast radius analytics, and remediation tracking.

• Get security score

  Tool name: get_security_score

  Get current Wiz security score with industry and workload-based benchmarks.

• Get sensor cloud event

  Tool name: get_sensor_cloud_event

  Retrieve full details of a single Wiz Sensor event by its ID.

• Get software management finding

  Tool name: get_software_management_finding

  Retrieve detailed information about a specific Software Management or Supply Chain finding by ID.

• Get subcategory policies

  Tool name: get_subcategory_policies

  Retrieves the policy IDs (controls, cloud configuration rules, host configuration rules) mapped to a specific security subcategory.

• Get subscription

  Tool name: get_subscription

  Retrieve detailed information for a specific cloud account/subscription by exact ID or name.

• Get system health issue

  Tool name: get_system_health_issue

  Retrieve detailed information about a specific system health issue including impact, remediation steps, deployment details, and related permissions.

• Get technology

  Tool name: get_technology

  Retrieves comprehensive catalog details about a specific technology by its unique ID.

• Get tenant contacts

  Tool name: get_tenant_contacts

  Get tenant contact information including name, email, and role.

• Get threat

  Tool name: get_threat

  Retrieve detailed analysis about a specific threat from Wiz using custom GraphQL query.

• Get threat center item

  Tool name: get_threat_center_item

  Retrieves a specific, detailed threat intelligence item from the Wiz Threat Center using its unique ID.

• Get vulnerability AI description

  Tool name: get_vulnerability_ai_description

  Fetches the AI-generated narrative for a vulnerability by its external identifier (for example CVE-2024-1234 or GHSA-xxxx-yyyy-zzzz): a plain-language overview, technicalDetails (named vulnerable…

• Get vulnerability assessment settings

  Tool name: get_vulnerability_assessment_settings

  Retrieves the tenant-level vulnerability assessment settings that control which libraries, package ecosystems, lifecycle stages, and dependency scopes Wiz scans for SCA findings.

• Get vulnerability catalog

  Tool name: get_vulnerability_catalog

  Fetches the catalog record for a vulnerability by its external identifier (for example CVE-2024-1234 or GHSA-xxxx-yyyy-zzzz).

• Get vulnerability finding

  Tool name: get_vulnerability_finding

  Retrieves comprehensive details for a single vulnerability finding using its unique ID.

• Get Wiz portal role

  Tool name: get_wiz_portal_role

  Get detailed information about a specific Wiz portal user role by ID.

• Get Wiz service account

  Tool name: get_wiz_service_account

  Resolve a Wiz platform service account (an identity used to access the Wiz API) by its client ID or display name.

• Get wizos image

  Tool name: get_wizos_image

  Returns full details for ONE WizOS Image Catalog entry, looked up by its catalog id: description, technology, repository (name + URL), compliance, image type, in-use status, created/updated…

• Get workload related volumes

  Tool name: get_workload_related_volumes

  Retrieves the volumes that a virtual machine workload uses, via the Wiz Security Graph.

• Get workload scan status

  Tool name: get_workload_scan_status

  Retrieves the most recent workload scan (SECURITY_TOOL_SCAN) for a specific cloud resource using the Wiz Security Graph.

• Graph search

  Tool name: graph_search

  Complex security scenarios involving RELATIONSHIPS and PATHS between resources (e.g., "publicly exposed VM with access to sensitive data", "container with vulnerability that can reach database")

• Import security review skill

  Tool name: import_security_review_skill

  Integrates security findings from external security reports into Wiz Penetration Test Findings.

• List AI security findings

  Tool name: list_ai_security_findings

  Retrieve AI-specific security findings including model risks (PyTorch/Keras/Pickle arbitrary code execution, exfiltration), MCP risks (reverse shells, tool poisoning), and agent risks.

• List AI workloads

  Tool name: list_ai_workloads

  Returns the AI workloads in the tenant from the Wiz Security Graph: virtual machines, containers, container images, and serverless functions whose purpose is AI (purposes = AI) AND that run at least…

• List API endpoints

  Tool name: list_api_endpoints

  Retrieves API endpoints discovered across your environment from cloud API gateways, runtime sensor traffic, attack surface scanning, and the Red Agent AI-powered Web Crawler.

• List attack surface findings

  Tool name: list_attack_surface_findings

  Retrieves attack surface findings including exploitable CVEs, default credentials, and misconfigurations.

• List attack surface rules

  Tool name: list_attack_surface_rules

  Retrieves attack surface rules that define security checks for identifying exploitable vulnerabilities, default credentials, and misconfigurations.

• List attack surface scan log events

  Tool name: list_attack_surface_scan_log_events

  Retrieves individual scan events showing the evidence and reasoning behind detections.

• List attack surface scan log table

  Tool name: list_attack_surface_scan_log_table

  Retrieves scan results grouped by endpoint, showing what was found on each endpoint (findings, technologies, secrets, data findings) and endpoint status (open/closed).

• List audit log entries

  Tool name: list_audit_log_entries

  Retrieve audit log entries from Wiz to inspect actions performed by users and service accounts.

• List automation rules

  Tool name: list_automation_rules

  List automation rules with filtering by trigger source, integration, enabled status, and auto-remediation settings.

• List AWS customer managed keys encrypting volumes

  Tool name: list_aws_customer_managed_keys_encrypting_volumes

  Returns the AWS customer-managed KMS keys (CMKs) that encrypt EBS volumes in the tenant, from the Wiz Security Graph, with aggregateCount = the number of volumes each key encrypts (for prioritization…

• List champion center modules

  Tool name: list_champion_center_modules

  List Champion Center modules with completion status and journey tracking.

• List ci pipelines

  Tool name: list_ci_pipelines

  Retrieves CI/CD pipelines detected in your environment.

• List cicd scan policies

  Tool name: list_cicd_scan_policies

  Retrieves CI/CD scan policies — the policies evaluated by Wiz CLI scans in build pipelines (vulnerabilities, secrets, IaC, SAST, sensitive data, malware, image integrity, host configuration, software…

• List cicd scans

  Tool name: list_cicd_scans

  Retrieves CI/CD scans executed by the Wiz CLI in build pipelines (container image, IaC, directory, and VM image scans).

• List cloud accounts

  Tool name: list_cloud_accounts

  Retrieve cloud accounts (AWS accounts, Azure subscriptions, GCP projects, etc.) from Wiz.

• List cloud configuration findings grouped

  Tool name: list_cloud_configuration_findings_grouped

  Retrieves cloud configuration findings (a.k.a.

• List cloud configuration rules

  Tool name: list_cloud_configuration_rules

  List Cloud Configuration Rules from the Wiz platform with filtering, ordering, and pagination options.

• List cloud configurations findings

  Tool name: list_cloud_configurations_findings

  List Cloud Configuration Findings from the Wiz platform with filtering options including finding ID, resource ID, rule ID, severity, status, subscription, compliance framework, and public…

• List cloud events

  Tool name: list_cloud_events

  Retrieve individual cloud events (Security Logs) from the Wiz platform with comprehensive filtering options.

• List cloud events grouped

  Tool name: list_cloud_events_grouped

  Retrieve aggregated cloud events (Security Logs) from the Wiz platform grouped by specified fields.

• List cloud resources

  Tool name: list_cloud_resources

  Primary tool for cloud infrastructure resource listing and filtering queries.

• List cloud resources grouped

  Tool name: list_cloud_resources_grouped

  Identifying the most common technologies, cloud platforms, or resource types in use.

• List cloudtrail suggestions

  Tool name: list_cloudtrail_suggestions

  Retrieves a list of AWS CloudTrail configurations from the Wiz Graph.

• List code repositories

  Tool name: list_code_repositories

  Retrieves a detailed list of code repositories (GitHub, GitLab, Bitbucket, etc.).

• List code to cloud health issues by connector

  Tool name: list_code_to_cloud_health_issues_by_connector

  Lists system health issues whose affected module is Code-to-Cloud (CODE_TO_CLOUD), grouped by the connector/deployment they affect, from the Wiz Security Graph.

• List compliance frameworks

  Tool name: list_compliance_frameworks

  Retrieve and summarize compliance frameworks, including built-in and custom frameworks.

• List container image execution context

  Tool name: list_container_image_execution_context

  Locates the runtime/execution footprint of container images: which Kubernetes clusters, namespaces, container services, and cloud accounts they appear in, and at which lifecycle stage (CLOUD…

• List container image execution context grouped

  Tool name: list_container_image_execution_context_grouped

  Aggregates container image execution contexts (where images run) by a chosen field — Kubernetes cluster, namespace, container service, resource type, or native type — and returns a count per group.

• List container images

  Tool name: list_container_images

  Retrieves a list of container images and their details, including security issue counts, deployment context, and associated cloud accounts.

• List container images grouped

  Tool name: list_container_images_grouped

  Identifying which base images are most commonly used across your container fleet.

• List controls

  Tool name: list_controls

  Retrieves a list of control DEFINITIONS (security rules and policies) from the Wiz platform.

• List custom IP ranges

  Tool name: list_custom_ip_ranges

  List custom IP ranges configured in the Wiz tenant.

• List data classifier labels

  Tool name: list_data_classifier_labels

  Retrieves a list of data classifier labels (DSPM) available in the environment.

• List data classifiers

  Tool name: list_data_classifiers

  Retrieve and filter your organization's data classifiers.

• List data external labels

  Tool name: list_data_external_labels

  Retrieves a list of external labels associated with data findings (DSPM) available in the environment.

• List data findings

  Tool name: list_data_findings

  Retrieve and filter security findings related to data resources across your cloud environment.

• List data findings grouped

  Tool name: list_data_findings_grouped

  Retrieves data findings grouped by a specified field.

• List datastores

  Tool name: list_datastores

  Retrieve and filter specific data resources or data stores within your cloud environment.

• List datastores grouped

  Tool name: list_datastores_grouped

  Retrieves data stores grouped by a specified field (e.g., GRAPH_ENTITY_TYPE, CLOUD_PLATFORM, CLOUD_ACCOUNT, PROJECT).

• List deployed remediation actions

  Tool name: list_deployed_remediation_actions

  Lists deployed remediation and response actions that are available for execution.

• List deployments

  Tool name: list_deployments

  Retrieves a list of deployments (connectors, integrations, sensors) configured in the Wiz environment.

• List discovered resources

  Tool name: list_discovered_resources

  Retrieves discovered (unscanned) resources that Wiz can identify but cannot directly scan, such as unconnected cloud accounts, organizations, and repositories.

• List end of life technologies findings

  Tool name: list_end_of_life_technologies_findings

  Retrieve a list of specific End of Life (EOL) findings.

• List end of life technologies grouped

  Tool name: list_end_of_life_technologies_grouped

  Retrieves End of Life (EOL) technology findings aggregated by a specified field (e.g., project, cloud platform, asset type, or severity).

• List endpoint attack surfaces

  Tool name: list_endpoint_attack_surfaces

  Retrieves endpoint attack surface data grouped by various dimensions (e.g., application endpoints, exposed resources, technologies).

• List endpoint attack surfaces grouped

  Tool name: list_endpoint_attack_surfaces_grouped

  Retrieves endpoint attack surface data grouped by a specified field (Project, Cloud Platform, Host, Technology, Cloud Account, Resource Type, etc.).

• List entitlements

  Tool name: list_entitlements

  Retrieves effective access entitlements showing what entities (principals) have access to what resources.

• List excessive access findings

  Tool name: list_excessive_access_findings

  Retrieves excessive access findings that identify principals with more permissions than they actively use.

• List excessive access findings grouped

  Tool name: list_excessive_access_findings_grouped

  Retrieves excessive access findings grouped by a specified dimension (cloud platform, principal type, principal, etc.) with aggregated analytics.

• List findings

  Tool name: list_findings

  Retrieves multiple finding types for cloud resources in a single parallel query.

• List framework failing controls

  Tool name: list_framework_failing_controls

  Lists all failing controls, cloud configuration rules (CCR), and host configuration rules (HCR) for a specific security framework.

• List host configuration findings

  Tool name: list_host_configuration_findings

  Retrieves assessments for host configuration rules (e.g., OS configuration findings) across your environment.

• List host configuration rules

  Tool name: list_host_configuration_rules

  Lists host configuration rules from the Wiz platform with filtering and ordering options.

• List hosted technologies

  Tool name: list_hosted_technologies

  Retrieves a detailed inventory of hosted technologies (e.g., databases, web servers, operating systems) running on resources across your cloud environment.

• List hosted technologies group by value

  Tool name: list_hosted_technologies_group_by_value

  Retrieves a summary of hosted technologies (software, databases, operating systems) grouped by a specific field like Version, Owner, or Resource Type.

• List iac findings

  Tool name: list_iac_findings

  List IaC (Infrastructure as Code) findings with filtering options including severity, status, IaC platform, cloud platform, repository, file path, framework category, and remediation availability.

• List iac findings grouped

  Tool name: list_iac_findings_grouped

  Retrieves IaC findings aggregated by a specified field (e.g., repository, rule, severity, IaC platform).

• List identities

  Tool name: list_identities

  Retrieves identities (people) with their linked user accounts across multiple services.

• List identity access findings

  Tool name: list_identity_access_findings

  Retrieves identity access findings that identify problematic access patterns such as public access, allUsers/allAuthenticatedUsers access to resources.

• List identity access findings grouped

  Tool name: list_identity_access_findings_grouped

  Retrieves identity access findings grouped by a specified dimension (severity, resource type, cloud platform, entity type, etc.) with aggregated analytics.

• List identity access rules

  Tool name: list_identity_access_rules

  Retrieves identity access rules that define policies for detecting problematic access patterns.

• List ignore rules

  Tool name: list_ignore_rules

  List Ignore Rules from the Wiz platform with filtering, ordering, and pagination options.

• List imported assets

  Tool name: list_imported_assets

  Retrieves imported assets from third-party vulnerability scanners and security tools integrated with Wiz.

• List imported assets grouped

  Tool name: list_imported_assets_grouped

  Retrieves imported assets grouped by a specified field for aggregation and distribution analysis.

• List integrations

  Tool name: list_integrations

  List configured integrations with their name, type, and status.

• List inventory findings

  Tool name: list_inventory_findings

  Retrieves and filters inventory findings across your cloud environment.

• List inventory rules

  Tool name: list_inventory_rules

  Retrieves inventory management rules that define governance and compliance policies for cloud resources.

• List issues

  Tool name: list_issues

  Retrieve security issues from the Wiz platform with comprehensive filtering options that are cloud toxic combinations or cloud configuration issues.

• List issues grouped

  Tool name: list_issues_grouped

  Identifying the most affected resources, or cloud accounts, subscriptions, source rules, Kubernetes clusters, Kubernetes namespaces, or container services.

• List kubernetes clusters

  Tool name: list_kubernetes_clusters

  Retrieves a list of Kubernetes clusters from the Inventory across your cloud environment.

• List kubernetes clusters grouped

  Tool name: list_kubernetes_clusters_grouped

  Provides aggregated summaries of Kubernetes clusters grouped by various dimensions (cloud platform, flavor, region, etc.).

• List kubernetes cost grouped

  Tool name: list_kubernetes_cost_grouped

  Retrieve Kubernetes cost data aggregated by clusters, namespaces, workloads, and cloud accounts.

• List licenses

  Tool name: list_licenses

  Retrieve Wiz subscription licenses with SKU, status, and expiration dates.

• List malware findings

  Tool name: list_malware_findings

  Retrieve malware findings from the Wiz platform.

• List monitored metrics

  Tool name: list_monitored_metrics

  List all monitored metrics (Wiz Metrics) with filtering by type and category.

• List network exposure

  Tool name: list_network_exposure

  Retrieves a lightweight overview of network exposures showing connectivity paths between cloud resources.

• List package dependencies

  Tool name: list_package_dependencies

  Retrieves SBOM components by package name, grouped with usage counts, and lets you filter by dependency type (direct vs transitive) via the transitivity filter.

• List partial terraform backends

  Tool name: list_partial_terraform_backends

  Lists Terraform backends that are partial in the Wiz Security Graph — the Terraform backend block does not hardcode its state container (bucket, or storage account plus container), so Wiz could not…

• List partial terraform backends grouped

  Tool name: list_partial_terraform_backends_grouped

  Groups partial Terraform backends by the source repository that contains them, from the Wiz Security Graph, to show which repositories are most affected.

• List penetration test findings

  Tool name: list_penetration_test_findings

  Retrieve penetration test findings from the Wiz platform with filtering options including severity, status, resolution reason, origin, resource type, tags, and project.

• List portal lens

  Tool name: list_portal_lens

  Get the user's current portal lens (focus area) setting.

• List posture issues

  Tool name: list_posture_issues

  Retrieves a list of security posture issues, including vulnerabilities, secret exposures, and data-related findings.

• List posture system health issues

  Tool name: list_posture_system_health_issues

  Retrieves the system health issues (SHIs) that belong to a specific posture issue, scoped via the related_posture_issue_id filter.

• List preview migration hub items

  Tool name: list_preview_migration_hub_items

  List features available in the Preview & Migration Hub with enablement status.

• List principals

  Tool name: list_principals

  Retrieves a list of cloud identity principals (users, service accounts, groups and access keys) from the Wiz platform.

• List principals grouped

  Tool name: list_principals_grouped

  Retrieves cloud identity principals (users, service accounts, groups, access keys) grouped by specified fields for aggregated analysis.

• List privileged action requests

  Tool name: list_privileged_action_requests

  List approval requests (a.k.a.

• List product updates

  Tool name: list_product_updates

  Retrieve Wiz product updates (versions of wiz products, announcements, new features, deployments, and migrations) with filtering.

• List projects

  Tool name: list_projects

  List and search Wiz projects with filtering by security score, risk, and other criteria.

• List red agent scan log events

  Tool name: list_red_agent_scan_log_events

  Retrieves individual HTTP request events made by the Red Agent during scans.

• List red agent scan logs

  Tool name: list_red_agent_scan_logs

  Retrieves Red Agent scan session logs.

• List reports

  Tool name: list_reports

  Lists reports configured in Wiz, ordered by most recently run.

• List response action catalog

  Tool name: list_response_action_catalog

  Lists available response actions in the remediation and response catalog.

• List sast findings

  Tool name: list_sast_findings

  Retrieve SAST findings from the Wiz platform.

• List sbom

  Tool name: list_sbom

  Retrieves and aggregates Software Bill of Materials (SBOM) components.

• List sbom by asset

  Tool name: list_sbom_by_asset

  Retrieves all SBOM (Software Bill of Materials) artifacts detected on a specific asset, optionally filtered by library/component name.

• List sbom by resource

  Tool name: list_sbom_by_resource

  Retrieves Software Bill of Materials (SBOM) artifacts filtered by resource or Kubernetes cluster.

• List sca library findings

  Tool name: list_sca_library_findings

  Query vulnerability findings for specific code libraries (packages/components) detected on container images, repository branches, and serverless functions.

• List scan activities

  Tool name: list_scan_activities

  Retrieves recent connector scan activity logs showing scan status (SUCCESS/FAILURE), timing, and trigger type (SCHEDULED/MANUAL).

• List sec arch opps

  Tool name: list_sec_arch_opps

  Searches and filters Secure Architecture opportunities — per-resource findings generated by Secure Architecture rules, identifying resources (currently container images) that can be replaced with a…

• List secret findings

  Tool name: list_secret_findings

  Fetch secret findings with advanced filtering and analysis capabilities to identify exposed credentials, API keys, and sensitive data across your infrastructure.

• List secret findings grouped

  Tool name: list_secret_findings_grouped

  Retrieves secret findings grouped by a specified field such as resource type, severity, cloud account, or VCS repository.

• List secrets detection rules

  Tool name: list_secrets_detection_rules

  Retrieve and filter secrets detection rules from the Wiz platform.

• List sensor cloud events

  Tool name: list_sensor_cloud_events

  Wiz Sensor event lookup for workload-side investigation.

• List sensor cloud events grouped

  Tool name: list_sensor_cloud_events_grouped

  Retrieve aggregated Wiz Sensor events grouped by specified fields.

• List service catalog

  Tool name: list_service_catalog

  Retrieves a list of Application Services (also known as Promoted Services or Service Catalog items) across the environment.

• List service issues

  Tool name: list_service_issues

  Retrieves security issues specifically for Application Services by service ID.

• List service suggestions

  Tool name: list_service_suggestions

  Retrieves a list of potential Application Services that have been automatically discovered but not yet promoted to the Service Catalog.

• List software management findings

  Tool name: list_software_management_findings

  Retrieves a list of Software Management and Supply Chain findings, including details on the associated rule, affected resource, and component versions.

• List source mappings

  Tool name: list_source_mappings

  Retrieve code-to-cloud source mappings showing correlations between code resources (IaC declarations, repository branches) and deployed cloud resources (container images, buckets, VMs, etc.).

• List subscriptions

  Tool name: list_subscriptions

  List, search, or filter cloud accounts/subscriptions within the Wiz platform.

• List system activity logs

  Tool name: list_system_activity_logs

  Retrieves system activity log entries (long-running or automated activities executed inside Wiz), including reports, automation/workflow runs, integration action executions, remediation actions,…

• List system health issue types

  Tool name: list_system_health_issue_types

  Retrieves system health issue types with their IDs, names, and severity.

• List system health issues

  Tool name: list_system_health_issues

  Retrieves system health issues with total count and severity breakdown.

• List system health issues grouped by deployment

  Tool name: list_system_health_issues_grouped_by_deployment

  Retrieves deployments with their system health issues, showing top 5 most severe issues per deployment and issue counts by severity.

• List system health issues grouped by type

  Tool name: list_system_health_issues_grouped_by_type

  Retrieves system health issues grouped by issue type, showing the most popular issue types with their counts and severity.

• List technologies

  Tool name: list_technologies

  Retrieves the technology catalog showing all technologies detected in your environment.

• List threat actors

  Tool name: list_threat_actors

  Retrieves a detailed list of known threat actors tracked by Wiz Threat Center.

• List threat advisory items

  Tool name: list_threat_advisory_items

  Retrieve threat-intel advisories from the Wiz Threat Intel Center.

• List threats

  Tool name: list_threats

  Retrieve threat detection issues from the Wiz platform with detailed information about actors, resources, and detection details and also insights that if they are existing needs to be mentioned.

• List users

  Tool name: list_users

  List Wiz users with filtering by role, status, and activity.

• List vulnerability findings

  Tool name: list_vulnerability_findings

  A comprehensive search tool for security vulnerabilities across the entire "Code-to-Cloud" lifecycle.

• List vulnerability findings grouped

  Tool name: list_vulnerability_findings_grouped

  Retrieves vulnerability findings aggregated by a specified field (e.g., asset, cloud platform, or repository).

• List weaknesses

  Tool name: list_weaknesses

  Lists CWE (Common Weakness Enumeration) weaknesses.

• List Wiz portal roles

  Tool name: list_wiz_portal_roles

  List Wiz portal user roles (RBAC roles for Wiz portal access control).

• List wizos image catalog

  Tool name: list_wizos_image_catalog

  Returns WizOS Image Catalog entries as a lightweight list with only id and name per image.

• List wizos packages

  Tool name: list_wizos_packages

  Retrieves packages available in the WizOS package catalog (apk packages shipped by Wiz).

• List workflow templates

  Tool name: list_workflow_templates

  List workflow templates from the Wiz workflow catalog.

• List workload scan failures

  Tool name: list_workload_scan_failures

  Lists individual workloads (virtual machines, volumes) whose agentless workload scan failed, from the workload scan log.

• Migrate to wizos

  Tool name: migrate_to_wizos

  Migrate a container image to WizOS — from a Secure Architecture opportunity ID, a pasted Dockerfile/layer dump, or a portal container image.

• Migrate wizos image skill

  Tool name: migrate_wizos_image_skill

  Returns step-by-step migration instructions for converting Docker files images to WizOS — a secure, minimal container image with near-zero CVEs.

• Remediation skill

  Tool name: remediation_skill

  Returns a full code-to-cloud remediation workflow using Green Agent AI analysis.

• Sbom v2 migration readiness

  Tool name: sbom_v2_migration_readiness

  Assesses whether an organization still depends on the legacy SBOM experience before the SBOM Search Refactor cutover.

• Summarize scan failures by account region

  Tool name: summarize_scan_failures_by_account_region

  Aggregates agentless workload scan failures across the tenant, grouped by the requested dimensions, returning a count per group.

• Technology explore skill

  Tool name: technology_explore_skill

  Deep dive into a specific technology within the customer's environment.

• Vulnerability finding triage skill

  Tool name: vulnerability_finding_triage_skill

  Vulnerability triage across customer environments using threat intelligence, impact assessment, and remediation planning.

• Win API reference fetch

  Tool name: win_api_reference_fetch

  Returns the complete reference card for a single Wiz Integration Network (WIN) API operation: the GraphQL query/mutation, its variables and filter surface, the required scope, and a trimmed response…

• Docs knowledge base

  Tool name: wiz_docs_knowledge_base

  Takes the input query, uses embedding against a vector database in Wiz DB, and returns the most relevant chunks from the documentation.