What it does: Shows complete information about a specific vulnerability.

When to use:

1. Investigating a security issue
2. Understanding how to fix a vulnerability
3. Reviewing a vulnerability before closing it

Examples of requests:

1. "Show me details for vulnerability VULNERABILITY_UUID."
2. "What's the full information on the SQL injection in login.py for the group GROUP_NAME?"
   

API token required.

Get a vulnerability report

What it does: Creates a comprehensive report grouping vulnerabilities by type.

When to use:

1. Security audits
2. Compliance reporting
3. Sprint planning meetings
4. Management presentations

Examples of requests:

1. "Generate a vulnerability report for the ProductionAPI group."
2. "Show me a report of all open security issues in the group GROUP_NAME."
3. "Create a summary of vulnerabilities by severity in the group GROUP_NAME."
   

API token required.

Get a vulnerability overview

What it does: Shows counts of vulnerabilities and weaknesses at a glance.

When to use:

1. Quick daily status checks
2. Dashboard creation
3. Priority assessment

Examples of requests:

1. "How many open vulnerabilities do we have in the group GROUP_NAME?"
2. "Give me a vulnerability count summary for the group GROUP_NAME."
3. "What's the current vulnerability status for the group GROUP_NAME?"
   

API token required.

Asset discovery (roots)

View Git repositories

Tool: get_group_git_roots

What it does: Lists source code repositories being tested for security.

When to use:

1. Verifying what code is being scanned
2. Finding specific repositories
3. Ensuring all code is covered

Examples of requests:

1. "What Git repositories are we testing?"
2. "Show me all code repositories for the group GROUP_NAME."
3. "Is the frontend repository being scanned?"
   

API token required.

View IP addresses

Tool: get_group_ip_roots

What it does: Lists applications and services accessible via IP addresses being tested. 

When to use:

1. Black-box testing scope verification
2. Network security assessment
3. Infrastructure testing

Examples of requests:

1. "What IP addresses are we scanning?"
2. "Show me all tested network endpoints."
3. "List IPs being tested for the WebApp group."
   

API token required.

View URLs

Tool: get_group_url_roots

What it does: Lists live websites and web applications being tested.

When to use:

1. Verifying production testing scope
2. Web application security assessment
3. Ensuring all environments are covered

Examples of requests:

1. "What websites are we testing?"
2. "Show me all URLs for the E-commerce project."
3. "List production environments being scanned."
   

API token required.

View vulnerabilities by root

Tool: fetch_group_root_vulnerabilities

What it does: Shows vulnerabilities found in a specific repository, IP, or URL.

When to use:

1. Repository-specific security review
2. Assigning work to teams responsible for specific assets
3. Understanding security issues in one part of your infrastructure

Examples of requests:

1. "What vulnerabilities are in the main-app repository?"
2. "Show me security issues for the production URL."
3. "List vulnerabilities found in the API server IP."
   

API token required.

Security scanning

Run SCA scanner

Tool: run_sca_scanner

What it does: Provides instructions to scan your project dependencies for known vulnerabilities.

When to use:

1. After adding new dependencies
2. Before releasing new versions
3. Regular security audits of libraries

Examples of requests:

1. "How do I scan my dependencies?"
2. "Run an SCA scan on this project."
3. "Check my npm packages for vulnerabilities."

What it scans:

1. Package.json and lock files
2. Requirements.txt and poetry files
3. Composer.json
4. pom.xml and gradle files
5. Any dependency management files

Run SAST scanner

Tool: run_sast_scanner

What it does: Provides instructions to scan your source code for security vulnerabilities.

When to use:

1. After writing new code
2. Before code reviews
3. Pre-deployment security checks

Examples of requests:

1. "How do I scan my code for vulnerabilities?"
2. "Run a SAST scan on the authentication module."
3. "Check my Python code for security issues."

What it finds:

1. SQL injection
2. Cross-site scripting (XSS)
3. Security misconfigurations
4. Hardcoded secrets
5. Insecure cryptography
   
6. And 100+ other vulnerability types
   

Run both scanners

Tool: run_sca_and_sast_scanners

What it does: Provides instructions to run SAST and SCA scans together.

When to use:

1. Comprehensive security assessment
2. Pre-production security gate
3. Weekly security checks

Examples of requests:

1. "Run a complete security scan."
2. "Scan both my code and dependencies."
3. "Do a full security assessment."
   

No authentication required. However, Docker is required to run the scanners. See "Install Docker to run scanners" for more information.

DevSecOps integration

View CI/CD security results

Tool: get_devsecops_agent_executions

What it does: Shows results from automated security scans in your development pipeline.

When to use:

1. Checking build status
2. Investigating failed security gates
3. Monitoring automation effectiveness

Examples of requests:

1. "How many builds failed security checks this week for the group GROUP_NAME?"
2. "What was the result of the last Forces execution for the group GROUP_NAME?"
   

API token required.

View unsolved events

Tool: get_unsolved_events

What it does: Lists security incidents and situations requiring attention.

When to use:

1. Daily incident review
2. Security event management
3. Prioritizing urgent issues

Examples of requests:

1. "What security events need my attention?"
2. "Show me unsolved incidents."
   
3. "List open security events."
   

API token required.

Knowledge Base/Documentation

Search articles

Tool: search_related_articles

What it does: Searches Fluid Attacks' security knowledge base for relevant information.

When to use:

1. Learning about vulnerability types
2. Finding remediation guidance
3. Understanding security concepts

Examples of requests:

1. "How to configure the SCA scanner to run on Azure DevOps?"
2. "What is cross-site scripting?"

Topics covered:

1. Vulnerability explanations
2. Remediation guides
3. Security best practices
   
4. Platform usage instructions
   
5. Compliance guidance
   

No authentication required.