cloud_posture_custom_rule_create

MCP tool from Vision One MCP Server by trendmicro

(Beta) Creates a custom rule for your company. Requires Master Administrator role.

How to use it

cloud_posture_custom_rule_create is exposed by the Vision One MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the cloud_posture_custom_rule_create tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

FULL VISION ONE MCP SERVER LISTING

Other tools in Vision One MCP Server (39)

cam_alibaba_account_get

Get the details of an Alibaba account managed by Cloud Account Manangement.

cam_alibaba_accounts_list

Displays all Alibaba Cloud accounts connected to Trend Vision One in a paginated list.

cam_aws_account_get

Get the details of an AWS account managed by Cloud Account Management.

cam_aws_accounts_list

List AWS accounts managed by Cloud Account Management.

cloud_posture_account_checks_list

(Beta) List the checks of an account.

cloud_posture_account_scan

(Beta) Start scanning Cloud Posture account.

cloud_posture_account_scan_settings_get

(Beta) Get the scan settings for an account.

cloud_posture_account_scan_settings_update

(Beta) Update an account's scan settings.

cloud_posture_accounts_list

(Beta) List CSPM Accounts.

cloud_posture_custom_rule_delete

(Beta) Deletes the specified custom rule permanently. Requires Master Administrator role.

cloud_posture_custom_rule_get

(Beta) Returns the configuration of the specified custom rule.

cloud_posture_custom_rule_test

(Beta) Tests the provided custom rule configuration against an account or mock resource data. Requires Master Administrator role.

cloud_posture_custom_rule_update

(Beta) Updates the specified custom rule. Requires Master Administrator role.

cloud_posture_custom_rules_list

(Beta) Displays the custom rules of your company in a paginated list.

cloud_posture_template_scanner_run

(Beta) Scan an infrastructure as code template using the cloud posture template scanner.

crem_attack_surface_cloud_asset_profile_get

Get a cloud asset's profile.

crem_attack_surface_cloud_asset_risk_indicators_list

List a cloud asset's risk indicators.

crem_attack_surface_cloud_assets_list

List discovered cloud assets.

crem_attack_surface_custom_tags_list

List tag definitions.

crem_attack_surface_devices_list

List discovered attack surface devices.

crem_attack_surface_domain_accounts_list

List discovered attack surface domain accounts.

crem_attack_surface_global_fqdns_list

List discovered internet facing domains (Fully Qualified Domain Names).

crem_attack_surface_high_risk_users_list

List high risk users.

crem_attack_surface_local_app_devices_list

Displays the devices with the specified local application installed.

crem_attack_surface_local_app_executable_files_list

Displays the local applications installed executable files.

crem_attack_surface_local_app_profile_get

Get a local app's profile.

crem_attack_surface_local_app_risk_indicators_list

List a local app's risk indicators.

crem_attack_surface_local_apps_list

List discovered local applications.

crem_attack_surface_public_ips_list

List discovered public IP addresses.

crem_attack_surface_service_accounts_list

List discovered service accounts.

iam_account_delete

Deletes the specified account.

iam_account_invite

Sends an invitation to the specified email address to be added as an account.

iam_account_update

Updates the specified account.

iam_accounts_list

Displays users, groups, and invitations in the account.

iam_api_keys_delete

Delete Vision One API Keys.

iam_api_keys_list

List Vision One API Keys.

workbench_alert_detail_get

Displays information about the specified alert.

workbench_alerts_list

List Trend Vision One Workbench Alerts.

workbench_observed_attack_techniques_list

List observed attack techniques.