Information Security

9 entities and 81 agent-callable operations in infosec. Each operation is addressed as {mega_tool}/infosec/{entity}/{operation} and carries the same permission check over MCP and REST.

`asset_security_posture`

Operation	Mega-tool	What it does
`compliance_summary`	`report_query`	Count assets by compliance_status
`create`	`entity_crud`	Create a new asset security posture record
`delete`	`entity_crud`	Delete an asset security posture (soft-delete by default)
`list`	`entity_crud`	List asset security postures with filtering and pagination
`read`	`entity_crud`	Get detailed asset security posture information
`risk_distribution`	`report_query`	Aggregate asset counts by risk_level or asset_type with optional date range filter
`search`	`entity_crud`	Search asset security postures with fuzzy matching
`update`	`entity_crud`	Update an existing asset security posture (asset_type is immutable)
`vulnerability_scorecard`	`report_query`	Aggregate open/critical vulnerabilities and risk_score percentiles across all assets

`incident_action`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new incident action (status will be set to pending)
`delete`	`entity_crud`	Delete an incident action (soft-delete by default)
`get_transitions`	`workflow_action`	Get available status transitions for an incident action
`list`	`entity_crud`	List incident actions with filtering and pagination.
`read`	`entity_crud`	Get detailed incident action information including parameters and result
`search`	`entity_crud`	Search incident actions with fuzzy matching
`transition`	`workflow_action`	Transition an incident action to a new status
`update`	`entity_crud`	Update an incident action's parameters or notes.

`security_assessment`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new security assessment
`delete`	`entity_crud`	Delete a security assessment
`get_transitions`	`workflow_action`	Get available transitions for a security assessment
`list`	`entity_crud`	List security_assessments with filtering and pagination
`read`	`entity_crud`	Get detailed security assessment information
`search`	`entity_crud`	Search security_assessments with fuzzy matching
`transition`	`workflow_action`	Transition security assessment to a new status
`update`	`entity_crud`	Update an existing security assessment

`security_evidence`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new security evidence record.
`delete`	`entity_crud`	Delete security evidence (soft-delete by default)
`list`	`entity_crud`	List security evidence with filtering and pagination
`read`	`entity_crud`	Get detailed security evidence including chain_of_custody
`search`	`entity_crud`	Search security evidence with fuzzy matching or exact file_hash lookup
`update`	`entity_crud`	Update security evidence.

`security_incident`

Operation	Mega-tool	What it does
`breakdown`	`report_query`	Get security incident breakdown by dimension
`create`	`entity_crud`	Create a new security incident
`delete`	`entity_crud`	Delete a security incident
`get_transitions`	`workflow_action`	Get available transitions for a security incident
`list`	`entity_crud`	List security_incidents with filtering and pagination
`read`	`entity_crud`	Get detailed security incident information
`search`	`entity_crud`	Search security_incidents with fuzzy matching
`summary`	`report_query`	Security incident analytics by severity and status
`transition`	`workflow_action`	Transition security incident to a new status
`trend`	`report_query`	Get security incident trend over time
`update`	`entity_crud`	Update an existing security incident

`security_policy`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new security policy
`delete`	`entity_crud`	Delete a security policy
`get_transitions`	`workflow_action`	Get available transitions for a security policy
`list`	`entity_crud`	List security_policies with filtering and pagination
`read`	`entity_crud`	Get detailed security policy information
`search`	`entity_crud`	Search security_policies with fuzzy matching
`transition`	`workflow_action`	Transition security policy to a new status
`update`	`entity_crud`	Update an existing security policy

`security_scan`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new security scan (status will be set to pending)
`delete`	`entity_crud`	Delete a security scan (soft-delete by default)
`execution_summary`	`report_query`	Count of scans by status over a time period, grouped by day/week/month
`findings_breakdown`	`report_query`	Aggregate findings_count totals across completed scans by severity
`get_transitions`	`workflow_action`	Get available status transitions for a security scan
`list`	`entity_crud`	List security scans with filtering and pagination
`read`	`entity_crud`	Get detailed security scan information including results and findings
`search`	`entity_crud`	Search security scans with fuzzy matching
`sla_health`	`report_query`	Percentage of scans completed within SLA duration; avg and count overdue
`transition`	`workflow_action`	Transition a security scan to a new status
`update`	`entity_crud`	Update a security scan's config or schedule.

`threat_intelligence`

Operation	Mega-tool	What it does
`active_threats_summary`	`report_query`	Active threat counts by severity and top-5 most recent active threats
`create`	`entity_crud`	Create a new threat intelligence entry
`delete`	`entity_crud`	Delete a threat intelligence entry (soft-delete by default)
`indicator_trend`	`report_query`	Time-series of new threat entries per day, grouped by threat_type or severity
`list`	`entity_crud`	List threat intelligence entries with filtering and pagination
`read`	`entity_crud`	Get detailed threat intelligence entry including indicators and TTPs
`search`	`entity_crud`	Search threat intelligence entries with fuzzy matching
`severity_distribution`	`report_query`	Count threats by severity × threat_type grid with optional date/activity filters
`update`	`entity_crud`	Update a threat intelligence entry (threat_type is immutable)

`vulnerability`

Operation	Mega-tool	What it does
`breakdown`	`report_query`	Get vulnerability breakdown by dimension
`create`	`entity_crud`	Create a new vulnerability
`delete`	`entity_crud`	Delete a vulnerability
`get_transitions`	`workflow_action`	Get available transitions for a vulnerability
`list`	`entity_crud`	List vulnerabilities with filtering and pagination
`read`	`entity_crud`	Get detailed vulnerability information
`search`	`entity_crud`	Search vulnerabilities with fuzzy matching
`summary`	`report_query`	Vulnerability volume by severity and status
`transition`	`workflow_action`	Transition vulnerability to a new status
`trend`	`report_query`	Get vulnerability trend over time
`update`	`entity_crud`	Update an existing vulnerability

Parameter schemas and permission codenames are in the full reference — sign in — or call prism_introspect(dimension="capability_search", query="…") with your key.

In the full reference this application appears under entity_crud, report_query, workflow_action.