API Reference
/- sessionsCount
agents
agent
agentAudit
topAgentCountByOwner
topAgentCountByEnvironment
topAgentCountByPlatform
topAgentCountByAccessibility
topAgentCountByDataSource
topAgentCountByFindingType
auditTimeline
listEnvironments
listOwners
listPlatforms
listTools
usageRange
lastSessionRange
integrations
integration
listFoundationalModels
tools
tool
dataSources
dataSource
accessChannels
accessChannel
inventoryCategories
listToolTypes
topToolByExternalType
listDataSourceTypes
listChannelTypes
sessionActivities
sessions
activitiesTimelineChart
detections
detection
flows
flow
policies
policy
testPolicy
policyTriggerTypes
policyActionTypes
policyFilterOptions
previewPolicyImpact
generatePolicyMetadata
users
exportUsers
organizationConfiguration
sessionsCount
Download GraphQL schema
Arguments
limit
Int
before
after
Return type
[Tooltype
String!,non-null
count
Int!,non-null
Query sample
query topToolByExternalType(
$limit: Int
$before: DateTime
$after: DateTime
) {
topToolByExternalType(
limit: $limit
before: $before
after: $after
) {
type
count
}
}Variables
{ "limit": 40, "before": "Example Custom Scalar", "after": "Example Custom Scalar" }
Response sample
{ "data": [ { "type": "Example String", "count": 40 } ] }
Return type
[String!]!The String scalar type represents textual data, represented as UTF-8 character sequences. The String type is most often used by GraphQL to represent free-form human-readable text.
Query sample
query listDataSourceTypes {
listDataSourceTypes
}Response sample
{ "data": [ "Example String" ] }
Return type
[String!]!The String scalar type represents textual data, represented as UTF-8 character sequences. The String type is most often used by GraphQL to represent free-form human-readable text.
Query sample
query listChannelTypes {
listChannelTypes
}Response sample
{ "data": [ "Example String" ] }
Arguments
session Id
I D!,non-nullrequired
Return type
[SessionQuery sample
query sessionActivities($sessionId: ID!) {
sessionActivities(sessionId: $sessionId) {
id
type
timestamp
agent {
__typename
# ...AgentFragment
}
message
policy {
__typename
# ...PolicyFragment
}
issue {
__typename
# ...IssueFragment
}
}
}Variables
{ "sessionId": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4" }
Response sample
{ "data": [ { "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "type": "SESSION", "timestamp": "Example Custom Scalar", "agent": { "__typename": "Agent" }, "message": "Example String", "policy": { "__typename": "Policy" }, "issue": { "__typename": "Issue" } } ] }
Arguments
filter
order By
limit
Int
Default:100
offset
Int
Default:0
Return type
[Session!]!type
timestamp
agent
message
String
session Id
I D!,non-null
detections
Detections that were created as part of the session
violations
Violations that were created as part of the session.
Query sample
query sessions(
$filter: SessionFilter
$orderBy: [SessionOrderByInput!]
$limit: Int
$offset: Int
) {
sessions(
filter: $filter
orderBy: $orderBy
limit: $limit
offset: $offset
) {
type
timestamp
agent {
__typename
# ...AgentFragment
}
message
sessionId
detections {
__typename
# ...DetectionFragment
}
violations {
__typename
# ...ViolationPreviewFragment
}
}
}Variables
{ "filter": { "sessionId": { "__typename": "StringFilter" }, "activityType": { "__typename": "ActivityTypeFilter" }, "dateRange": { "__typename": "DateTimeFilter" }, "agent": { "__typename": "AgentReferenceFilter" }, "search": "Example String", "findingType": { "__typename": "FindingTypeFilter" }, "issue": { "__typename": "IssueReferenceFilter" }, "detections": { "__typename": "DetectionFilter" }, "tool": { "__typename": "ToolReferenceFilter" }, "dataSource": { "__typename": "DataSourceReferenceFilter" }, "accessChannel": { "__typename": "AccessChannelReferenceFilter" } }, "orderBy": [ { "field": "TIMESTAMP", "direction": "ASC" } ], "limit": 40, "offset": 40 }
Response sample
{ "data": [ { "type": "SESSION", "timestamp": "Example Custom Scalar", "agent": { "__typename": "Agent" }, "message": "Example String", "sessionId": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "detections": [ { "__typename": "Detection" } ], "violations": [ { "__typename": "ViolationPreview" } ] } ] }
Arguments
filter
Return type
Int!The Int scalar type represents non-fractional signed whole numeric values. Int can represent values between -(2^31) and 2^31 - 1.
Query sample
query sessionsCount($filter: SessionFilter) {
sessionsCount(filter: $filter)
}Variables
{ "filter": { "sessionId": { "__typename": "StringFilter" }, "activityType": { "__typename": "ActivityTypeFilter" }, "dateRange": { "__typename": "DateTimeFilter" }, "agent": { "__typename": "AgentReferenceFilter" }, "search": "Example String", "findingType": { "__typename": "FindingTypeFilter" }, "issue": { "__typename": "IssueReferenceFilter" }, "detections": { "__typename": "DetectionFilter" }, "tool": { "__typename": "ToolReferenceFilter" }, "dataSource": { "__typename": "DataSourceReferenceFilter" }, "accessChannel": { "__typename": "AccessChannelReferenceFilter" } } }
Response sample
{ "data": 40 }
Arguments
input
Return type
Activitiesmetadata
bins
total Activities
Int!,non-null
total Indicators
Int!,non-null
Query sample
query activitiesTimelineChart($input: TimelineQueryInput!) {
activitiesTimelineChart(input: $input) {
metadata {
__typename
# ...TimelineQueryMetadataFragment
}
bins {
__typename
# ...ActivitiesTimelineBinFragment
}
totalActivities
totalIndicators
}
}Variables
{ "input": { "timeRange": { "__typename": "DateTimeFilter" }, "binCount": 40, "timezone": "Example String", "filters": { "__typename": "SessionFilter" } } }
Response sample
{ "data": { "metadata": { "__typename": "TimelineQueryMetadata" }, "bins": [ { "__typename": "ActivitiesTimelineBin" } ], "totalActivities": 40, "totalIndicators": 40 } }
Arguments
limit
Int
Default:100
offset
Int
Default:0
Return type
Detectionsitems
total
Int!,non-null
Query sample
query detections($limit: Int, $offset: Int) {
detections(limit: $limit, offset: $offset) {
items {
__typename
# ...DetectionFragment
}
total
}
}Variables
{ "limit": 40, "offset": 40 }
Response sample
{ "data": { "items": [ { "__typename": "Detection" } ], "total": 40 } }
Arguments
id
I D!,non-nullrequired
Return type
Detectionid
I D!,non-null
title
String!,non-null
type
detected At
issue
session
activities
Deprecation reason
Use 'messages' field instead for typed message access
agent
description
String
Query sample
query detection($id: ID!) {
detection(id: $id) {
id
title
type
detectedAt
issue {
__typename
# ...IssueFragment
}
session {
__typename
# ...SessionFragment
}
activities {
__typename
# ...AuditEventFragment
}
agent {
__typename
# ...AgentFragment
}
description
}
}Variables
{ "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4" }
Response sample
{ "data": { "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "title": "Example String", "type": "PII_LEAKAGE", "detectedAt": "Example Custom Scalar", "issue": { "__typename": "Issue" }, "session": { "__typename": "Session" }, "activities": [ { "__typename": "AuditEvent" } ], "agent": { "__typename": "Agent" }, "description": "Example String" } }
Arguments
filter
order By
first
Int
after
String
last
Int
before
String
Return type
Flownodes
edges
page Info
total Count
Int!,non-null
aggregations
Query sample
query flows(
$filter: FlowFilter
$orderBy: [FlowOrderByInput!]
$first: Int
$after: String
$last: Int
$before: String
) {
flows(
filter: $filter
orderBy: $orderBy
first: $first
after: $after
last: $last
before: $before
) {
nodes {
id
externalId
name
description
platform {
__typename
# ...PlatformFragment
}
environment {
__typename
# ...EnvironmentFragment
}
owner {
__typename
# ...OwnerFragment
}
status
mode
version
graph {
__typename
# ...FlowGraphFragment
}
agents {
__typename
# ...AgentPreviewFragment
}
tools {
__typename
# ...ToolPreviewFragment
}
dataSources {
__typename
# ...DataSourcePreviewFragment
}
findings {
__typename
# ...FindingFragment
}
issues {
__typename
# ...IssueFragment
}
createdAt
updatedAt
capturedAt
platformCreatedAt
platformUpdatedAt
metadata
}
edges {
node {
id
externalId
name
description
platform {
__typename
# ...PlatformFragment
}
environment {
__typename
# ...EnvironmentFragment
}
owner {
__typename
# ...OwnerFragment
}
status
mode
version
graph {
__typename
# ...FlowGraphFragment
}
agents {
__typename
# ...AgentPreviewFragment
}
tools {
__typename
# ...ToolPreviewFragment
}
dataSources {
__typename
# ...DataSourcePreviewFragment
}
findings {
__typename
# ...FindingFragment
}
issues {
__typename
# ...IssueFragment
}
createdAt
updatedAt
capturedAt
platformCreatedAt
platformUpdatedAt
metadata
}
cursor
}
pageInfo {
hasNextPage
hasPreviousPage
startCursor
endCursor
}
totalCount
aggregations {
__typename
# ...FlowAggregationsFragment
}
}
}Variables
{ "filter": { "id": { "__typename": "StringFilter" }, "search": "Example String", "status": { "__typename": "FlowStatusFilter" }, "platform": { "__typename": "PlatformFilter" }, "environment": { "__typename": "EnvironmentFilter" }, "owner": { "__typename": "OwnerFilter" }, "mode": { "__typename": "FlowModeFilter" }, "hasExternalTrigger": { "__typename": "BooleanFilter" }, "severity": { "__typename": "SeverityFilter" }, "findings": { "__typename": "FindingFilter" }, "agents": { "__typename": "FlowAgentFilter" }, "createdAt": { "__typename": "DateTimeFilter" }, "updatedAt": { "__typename": "DateTimeFilter" } }, "orderBy": [ { "field": "NAME", "direction": "ASC" } ], "first": 40, "after": "Example String", "last": 40, "before": "Example String" }
Response sample
{ "data": { "nodes": [ { "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "externalId": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "name": "Example String", "description": "Example String", "platform": { "__typename": "Platform" }, "environment": { "__typename": "Environment" }, "owner": { "__typename": "Owner" }, "status": "ACTIVE", "mode": "SYNC", "version": "Example String", "graph": { "__typename": "FlowGraph" }, "agents": [ { "__typename": "AgentPreview" } ], "tools": [ { "__typename": "ToolPreview" } ], "dataSources": [ { "__typename": "DataSourcePreview" } ], "findings": [ { "__typename": "Finding" } ], "issues": [ { "__typename": "Issue" } ], "createdAt": "Example Custom Scalar", "updatedAt": "Example Custom Scalar", "capturedAt": "Example Custom Scalar", "platformCreatedAt": "Example Custom Scalar", "platformUpdatedAt": "Example Custom Scalar", "metadata": "Example Custom Scalar" } ], "edges": [ { "node": { "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "externalId": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "name": "Example String", "description": "Example String", "platform": { "__typename": "Platform" }, "environment": { "__typename": "Environment" }, "owner": { "__typename": "Owner" }, "status": "ACTIVE", "mode": "SYNC", "version": "Example String", "graph": { "__typename": "FlowGraph" }, "agents": [ { "__typename": "AgentPreview" } ], "tools": [ { "__typename": "ToolPreview" } ], "dataSources": [ { "__typename": "DataSourcePreview" } ], "findings": [ { "__typename": "Finding" } ], "issues": [ { "__typename": "Issue" } ], "createdAt": "Example Custom Scalar", "updatedAt": "Example Custom Scalar", "capturedAt": "Example Custom Scalar", "platformCreatedAt": "Example Custom Scalar", "platformUpdatedAt": "Example Custom Scalar", "metadata": "Example Custom Scalar" }, "cursor": "Example String" } ], "pageInfo": { "hasNextPage": true, "hasPreviousPage": true, "startCursor": "Example String", "endCursor": "Example String" }, "totalCount": 40, "aggregations": { "__typename": "FlowAggregations" } } }
Arguments
id
I D!,non-nullrequired
Return type
Flowid
I D!,non-null
external Id
I D!,non-null
name
String!,non-null
description
String
platform
environment
owner
status
mode
version
String
graph
agents
tools
data Sources
findings
issues
created At
updated At
captured At
platform Created At
platform Updated At
metadata
Query sample
query flow($id: ID!) {
flow(id: $id) {
id
externalId
name
description
platform {
__typename
# ...PlatformFragment
}
environment {
__typename
# ...EnvironmentFragment
}
owner {
__typename
# ...OwnerFragment
}
status
mode
version
graph {
__typename
# ...FlowGraphFragment
}
agents {
__typename
# ...AgentPreviewFragment
}
tools {
__typename
# ...ToolPreviewFragment
}
dataSources {
__typename
# ...DataSourcePreviewFragment
}
findings {
__typename
# ...FindingFragment
}
issues {
__typename
# ...IssueFragment
}
createdAt
updatedAt
capturedAt
platformCreatedAt
platformUpdatedAt
metadata
}
}Variables
{ "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4" }
Response sample
{ "data": { "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "externalId": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "name": "Example String", "description": "Example String", "platform": { "__typename": "Platform" }, "environment": { "__typename": "Environment" }, "owner": { "__typename": "Owner" }, "status": "ACTIVE", "mode": "SYNC", "version": "Example String", "graph": { "__typename": "FlowGraph" }, "agents": [ { "__typename": "AgentPreview" } ], "tools": [ { "__typename": "ToolPreview" } ], "dataSources": [ { "__typename": "DataSourcePreview" } ], "findings": [ { "__typename": "Finding" } ], "issues": [ { "__typename": "Issue" } ], "createdAt": "Example Custom Scalar", "updatedAt": "Example Custom Scalar", "capturedAt": "Example Custom Scalar", "platformCreatedAt": "Example Custom Scalar", "platformUpdatedAt": "Example Custom Scalar", "metadata": "Example Custom Scalar" } }