{"openapi":"3.1.0","info":{"title":"Manifest Cyber (BYOK) API","version":"0.1.0","description":"Manifest Cyber (BYOK) lets an AI assistant read your own Manifest Cyber data through the Manifest Cyber API with a key you supply (Manifest API token (with read scopes for what you query)). Read-only: 12 tools (get_stats, list_assets, list_most_impacted_assets, list_components, list_sboms, list_suppliers, get_supplier_stats, get_supplier_overview, list_supplier_vulnerabilities, search_inventory,...\n\nEvery operation is read-only or compute-only. The same tools are available over MCP (streamable HTTP) at https://byok-manifestcyber.connectorbay.com/mcp.","contact":{"name":"Unify Dynamics LLC","email":"agent@connectorbay.com","url":"https://connectorbay.com/byok-manifestcyber/docs"},"termsOfService":"https://connectorbay.com/byok-manifestcyber/terms"},"servers":[{"url":"https://byok-manifestcyber.connectorbay.com"}],"externalDocs":{"url":"https://connectorbay.com/byok-manifestcyber/docs"},"security":[{"upstreamKey":[]}],"components":{"securitySchemes":{"bearer":{"type":"http","scheme":"bearer","description":"Optional. A Pro API key raises rate limits; no credentials are required."},"upstreamKey":{"type":"apiKey","in":"header","name":"X-Upstream-Key","description":"Your own key for the service this connector wraps (bring your own key). Used for that one call only; never stored, logged or cached."}},"schemas":{"Error":{"type":"object","properties":{"ok":{"const":false},"error":{"type":"object"}}}}},"paths":{"/v1/tools/get_stats":{"post":{"operationId":"get_stats","summary":"Show the organization's totals: assets, components, SBOMs and vulnerabilities. Use for \"How many assets, components and ","description":"Show the organization's totals: assets, components, SBOMs and vulnerabilities. Use for \"How many assets, components and vulnerabilities does Manifest track for us\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"filters":{"anyOf":[{"maxLength":1000,"type":"string"},{"type":"null"}],"default":null,"description":"Optional JSON array of preset filters, for example [{\"field\":\"assetActive\",\"value\":[true]}].","title":"Filters"}},"title":"get_statsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_assets":{"post":{"operationId":"list_assets","summary":"List assets (applications, containers, libraries) with version, type, SBOM format and vulnerability counts by severity. ","description":"List assets (applications, containers, libraries) with version, type, SBOM format and vulnerability counts by severity. Paged and filterable. Use for \"Which assets in Manifest have critical vulnerabilities\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"page":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":1,"description":"Page number (default 1).","title":"Page"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"Results per page (default 100, max 1000).","title":"Limit"},"filters":{"anyOf":[{"maxLength":1500,"type":"string"},{"type":"null"}],"default":null,"description":"Optional JSON array of preset filters, for example [{\"field\":\"onlyCriticalVulns\",\"value\":\"true\"}] (fields include onlyHasVulns, onlyFirstParty, onlyThirdParty, cvssSeverity, assetSupplier, assetType, riskScore, assetActive, textSearch).","title":"Filters"},"asset_ids":{"anyOf":[{"maxLength":500,"type":"string"},{"type":"null"}],"default":null,"description":"Comma-separated asset ids to fetch (default: all assets).","title":"Asset Ids"}},"title":"list_assetsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_most_impacted_assets":{"post":{"operationId":"list_most_impacted_assets","summary":"List the assets with the most vulnerabilities, with severity counts. Paged and filterable like list_assets. Use for \"Whi","description":"List the assets with the most vulnerabilities, with severity counts. Paged and filterable like list_assets. Use for \"Which assets are most impacted by vulnerabilities in Manifest\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"page":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":1,"description":"Page number (default 1).","title":"Page"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"Results per page (default 100, max 1000).","title":"Limit"},"filters":{"anyOf":[{"maxLength":1500,"type":"string"},{"type":"null"}],"default":null,"description":"Optional JSON array of preset filters, for example [{\"field\":\"onlyCriticalVulns\",\"value\":\"true\"}] (fields include onlyHasVulns, onlyFirstParty, onlyThirdParty, cvssSeverity, assetSupplier, assetType, riskScore, assetActive, textSearch).","title":"Filters"},"asset_ids":{"anyOf":[{"maxLength":500,"type":"string"},{"type":"null"}],"default":null,"description":"Comma-separated asset ids to fetch (default: all assets).","title":"Asset Ids"}},"title":"list_most_impacted_assetsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_components":{"post":{"operationId":"list_components","summary":"List software components (package URL, version, ecosystem, licenses) across the organization, optionally for one asset o","description":"List software components (package URL, version, ecosystem, licenses) across the organization, optionally for one asset or package URL. Paged. Use for \"Which components of this asset does Manifest know about\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"page":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":1,"description":"Page number (default 1).","title":"Page"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"Results per page (default 100, max 1000).","title":"Limit"},"asset_id":{"anyOf":[{"maxLength":60,"type":"string"},{"type":"null"}],"default":null,"description":"Only components of this asset id.","title":"Asset Id"},"package_urls":{"anyOf":[{"maxLength":500,"type":"string"},{"type":"null"}],"default":null,"description":"Comma-separated package URLs to match, for example pkg:npm/lodash@4.17.21.","title":"Package Urls"},"coordinates":{"anyOf":[{"maxLength":300,"type":"string"},{"type":"null"}],"default":null,"description":"Match these package URL coordinates.","title":"Coordinates"}},"title":"list_componentsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_sboms":{"post":{"operationId":"list_sboms","summary":"List SBOM records (metadata, not contents) with asset, version, format, source and processing dates. Paged; optional ass","description":"List SBOM records (metadata, not contents) with asset, version, format, source and processing dates. Paged; optional asset and text filter. Use for \"Which SBOMs have been uploaded to Manifest recently\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"page":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":1,"description":"Page number (default 1).","title":"Page"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"Results per page (default 100, max 1000).","title":"Limit"},"asset_id":{"anyOf":[{"maxLength":60,"type":"string"},{"type":"null"}],"default":null,"description":"Only SBOMs uploaded for this asset id.","title":"Asset Id"},"search_text":{"anyOf":[{"maxLength":200,"type":"string"},{"type":"null"}],"default":null,"description":"Only SBOMs whose asset name (or container name, image id, repo tag) matches.","title":"Search Text"}},"title":"list_sbomsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_suppliers":{"post":{"operationId":"list_suppliers","summary":"List third-party suppliers with asset count, worst risk band and summed vulnerability counts (including known-exploited)","description":"List third-party suppliers with asset count, worst risk band and summed vulnerability counts (including known-exploited). Paged; name search and sort. Use for \"Which suppliers carry the most risk in Manifest\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"page":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":1,"description":"Page number (default 1).","title":"Page"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"Results per page (default 100, max 1000).","title":"Limit"},"search":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Only suppliers whose name contains this text (case-insensitive).","title":"Search"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"JSON sort object, for example {\"risk\":-1}. Sortable fields: name, risk, assetCount, vulns.","title":"Sort"}},"title":"list_suppliersArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_supplier_stats":{"post":{"operationId":"get_supplier_stats","summary":"Show organization-wide supplier totals: suppliers, high-risk suppliers, third-party assets and vulnerabilities. Use for ","description":"Show organization-wide supplier totals: suppliers, high-risk suppliers, third-party assets and vulnerabilities. Use for \"How many high-risk suppliers do we have in Manifest\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{},"title":"get_supplier_statsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_supplier_overview":{"post":{"operationId":"get_supplier_overview","summary":"Show one supplier's risk band, asset count, vulnerability counts and number of high-risk assets. Use for \"How risky is t","description":"Show one supplier's risk band, asset count, vulnerability counts and number of high-risk assets. Use for \"How risky is the supplier Acme Corp according to Manifest\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"name":{"description":"Supplier name exactly as returned in the supplier field of list_suppliers (case-sensitive).","maxLength":200,"title":"Name","type":"string"}},"required":["name"],"title":"get_supplier_overviewArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_supplier_vulnerabilities":{"post":{"operationId":"list_supplier_vulnerabilities","summary":"List vulnerabilities across a supplier's assets, deduplicated by CVE, ranked by recommended action then CVSS, with EPSS ","description":"List vulnerabilities across a supplier's assets, deduplicated by CVE, ranked by recommended action then CVSS, with EPSS and known-exploited flag. Paged. Use for \"Which vulnerabilities come with the supplier Acme Corp\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"name":{"description":"Supplier name exactly as returned in the supplier field of list_suppliers (case-sensitive).","maxLength":200,"title":"Name","type":"string"},"page":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":1,"description":"Page number (default 1).","title":"Page"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"Results per page (default 100, max 1000).","title":"Limit"}},"required":["name"],"title":"list_supplier_vulnerabilitiesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/search_inventory":{"post":{"operationId":"search_inventory","summary":"Search assets, components and vulnerabilities by text, for example a CVE id or package name. Use for \"Is CVE-2015-1648 a","description":"Search assets, components and vulnerabilities by text, for example a CVE id or package name. Use for \"Is CVE-2015-1648 anywhere in our Manifest inventory\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"search_for":{"description":"Text to search for, such as a CVE id or component name.","maxLength":200,"title":"Search For","type":"string"},"grouped":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":true,"description":"True groups the results by entity type (Asset, Component, Vulnerability).","title":"Grouped"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":10,"description":"Maximum results (default 10, max 1000).","title":"Limit"}},"required":["search_for"],"title":"search_inventoryArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_vulnerabilities":{"post":{"operationId":"list_vulnerabilities","summary":"Look up CVEs in Manifest's vulnerability catalog (not limited to your assets) with CVSS and EPSS scores. Paged; optional","description":"Look up CVEs in Manifest's vulnerability catalog (not limited to your assets) with CVSS and EPSS scores. Paged; optional list of CVE ids. Use for \"What are the CVSS and EPSS scores for CVE-2021-26084\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"page":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":1,"description":"Page number (default 1).","title":"Page"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"Results per page (default 100, max 1000).","title":"Limit"},"cve_ids":{"anyOf":[{"maxLength":500,"type":"string"},{"type":"null"}],"default":null,"description":"Comma-separated CVE ids to look up.","title":"Cve Ids"}},"title":"list_vulnerabilitiesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_vulnerability_feed":{"post":{"operationId":"list_vulnerability_feed","summary":"List the latest 10 published vulnerabilities with severity and how many of your assets they affect. Use for \"Which new v","description":"List the latest 10 published vulnerabilities with severity and how many of your assets they affect. Use for \"Which new vulnerabilities were published lately, and do they hit us\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"filters":{"anyOf":[{"maxLength":1000,"type":"string"},{"type":"null"}],"default":null,"description":"Optional JSON array of preset filters, for example [{\"field\":\"assetActive\",\"value\":[true]}].","title":"Filters"}},"title":"list_vulnerability_feedArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}}}}