> ## Documentation Index > Fetch the complete documentation index at: https://docs.leen.dev/llms.txt > Use this file to discover all available pages before exploring further. # Create Connection Invite Token > Create a one-time use connection invite token for an Organization. ## OpenAPI ````yaml post /provisioning/organizations/{organization_id}/connection-invite-tokens openapi: 3.1.0 info: title: Leen Security API version: 0.0.1 servers: - description: Production API (US) url: https://api.leen.dev/v1 - description: Production API (EU) url: https://api.eu-c1.leen.dev/v1 - description: Production API (APAC) url: https://api.ap-se2.leen.dev/v1 security: [] paths: /provisioning/organizations/{organization_id}/connection-invite-tokens: post: tags: - provisioning summary: Create Connection Invite Token description: Create a one-time use connection invite token for an Organization. operationId: create_connection_invite_token parameters: - in: path name: organization_id required: true schema: format: uuid title: Organization Id type: string requestBody: content: application/json: schema: $ref: '#/components/schemas/ConnectionInviteTokenCreateModel' required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/CreateConnectionInviteTokenRespModel' description: Successful Response '422': content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' description: Validation Error security: - API-Key: [] components: schemas: ConnectionInviteTokenCreateModel: properties: connection_id: anyOf: - format: uuid type: string - type: 'null' description: Connection ID for the connection to be updated title: Connection Id expiry_secs: anyOf: - type: integer - type: 'null' default: 1800 description: Connection token expiry in seconds, default 30 minutes title: Expiry Secs identifier: anyOf: - type: string - type: 'null' description: >- Identifier for the connection to be created or updated with this token title: Identifier options: anyOf: - $ref: '#/components/schemas/AikidoConnectionOptions' - $ref: '#/components/schemas/ArnicaConnectionOptions' - $ref: '#/components/schemas/AwsAccessAnalyzerOptions' - $ref: '#/components/schemas/AwsGuardDutyOptions' - $ref: '#/components/schemas/AwsInspector2Options' - $ref: '#/components/schemas/AwsSecurityHubOptions' - $ref: '#/components/schemas/BitSightConnectionOptions' - $ref: '#/components/schemas/BlackDuckConnectionOptions' - $ref: '#/components/schemas/BlackDuckSCAConnectionOptions' - $ref: '#/components/schemas/BlackKiteConnectionOptions' - $ref: '#/components/schemas/CheckmarxConnectionOptions' - $ref: '#/components/schemas/CrowdStrikeConnectionOptions' - $ref: '#/components/schemas/CrowdStrikeSpotlightConnectionOptions' - $ref: '#/components/schemas/GitHubConnectionOptions' - $ref: '#/components/schemas/GitlabOptions' - $ref: '#/components/schemas/HeelerOptions' - $ref: '#/components/schemas/InsightVMConnectionOptions' - $ref: '#/components/schemas/JiraConnectionOptions' - $ref: '#/components/schemas/LaceworkCSPMOptions' - $ref: '#/components/schemas/MendConnectionOptions' - $ref: '#/components/schemas/MSDefenderCloudConnectionOptions' - $ref: '#/components/schemas/MSDefenderEndpointConnectionOptions' - $ref: '#/components/schemas/MSDefenderVMSConnectionOptions' - $ref: '#/components/schemas/MSDefenderVMSGccHighConnectionOptions' - $ref: '#/components/schemas/MSEntraConnectionOptions' - $ref: '#/components/schemas/MSIntuneConnectionOptions' - $ref: '#/components/schemas/OktaIDPOptions' - $ref: '#/components/schemas/OrcaConnectionOptions' - $ref: '#/components/schemas/ProcessUnityConnectionOptions' - $ref: '#/components/schemas/ProofPointOptions' - $ref: '#/components/schemas/QualysConnectionOptions' - $ref: '#/components/schemas/SecurityScorecardConnectionOptions' - $ref: '#/components/schemas/SemgrepOptions' - $ref: '#/components/schemas/SentinelOneEDROptions' - $ref: '#/components/schemas/SentinelOneVMSOptions' - $ref: '#/components/schemas/ServiceNowGRCConnectionOptions' - $ref: '#/components/schemas/ServiceNowITSMConnectionOptions' - $ref: '#/components/schemas/ServiceNowVROptions' - $ref: '#/components/schemas/SnykConnectionOptions' - $ref: '#/components/schemas/SocketOptions' - $ref: '#/components/schemas/SonarQubeConnectionOptions' - $ref: '#/components/schemas/TaniumVMSOptions' - $ref: '#/components/schemas/TenableConnectionOptions' - $ref: '#/components/schemas/UpwindConnectionOptions' - $ref: '#/components/schemas/WizCodeOptions' - $ref: '#/components/schemas/WizCSPMOptions' - $ref: '#/components/schemas/WizVMSOptions' - type: 'null' description: >- Connection options, **ONLY** used for Oauth2 URL overrides for Snyk and MS Defender Endpoint, and auth_type for AWS connectors, Snyk, MS Defender Endpoint and MS Defender Vulnerability Management title: Options source_connection_id: anyOf: - format: uuid type: string - type: 'null' description: >- For a destination vendor only (pull or push): binds this token to a specific SOURCE connection, so the resulting connection can only be created with a matching source_connection_id. Distinct from connection_id, which means 'update this existing connection' — never both set. title: Source Connection Id vendor: anyOf: - $ref: '#/components/schemas/ConnectionVendorEnum' - type: 'null' description: Vendor for which the connection token is being created title: ConnectionInviteTokenCreateModel type: object CreateConnectionInviteTokenRespModel: properties: token: description: >- The token to hand to whoever will authorise the connection. Shown once, at creation; it cannot be read back afterwards. title: Token type: string required: - token title: ConnectionInviteToken type: object HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' title: Detail type: array title: HTTPValidationError type: object AikidoConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: AikidoConnectionOptions type: object ArnicaConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: ArnicaConnectionOptions type: object AwsAccessAnalyzerOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object vendor: default: AWS_ACCESS_ANALYSER title: Vendor type: string title: AwsAccessAnalyzerOptions type: object AwsGuardDutyOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: AwsGuardDutyOptions type: object AwsInspector2Options: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object vendor: default: AWS_INSPECTOR2 title: Vendor type: string title: AwsInspector2Options type: object AwsSecurityHubOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object vendor: default: AWS_SECURITYHUB title: Vendor type: string title: AwsSecurityHubOptions type: object BitSightConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean finding_filters: anyOf: - $ref: '#/components/schemas/BitSightFilter' - type: 'null' refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: BitSightConnectionOptions type: object BlackDuckConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: BlackDuckConnectionOptions type: object BlackDuckSCAConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object verify_ssl: default: true description: >- Whether to verify SSL certificates when connecting to the Black Duck server title: Verify Ssl type: boolean title: BlackDuckSCAConnectionOptions type: object BlackKiteConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean finding_filters: anyOf: - $ref: '#/components/schemas/BlackKiteFilters' - type: 'null' refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: BlackKiteConnectionOptions type: object CheckmarxConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: CheckmarxConnectionOptions type: object CrowdStrikeConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: CrowdStrikeConnectionOptions type: object CrowdStrikeSpotlightConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object severity: default: [] items: $ref: >- #/components/schemas/CrowdStrikeSpotlightVulnerabilityCveSeverityEnum title: Severity type: array title: CrowdStrikeSpotlightConnectionOptions type: object GitHubConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: GitHubConnectionOptions type: object GitlabOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: GitlabOptions type: object HeelerOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: HeelerOptions type: object InsightVMConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean full_refresh_interval_in_days: default: 1 exclusiveMinimum: 0 title: Full Refresh Interval In Days type: integer refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: InsightVMConnectionOptions type: object JiraConnectionOptions: properties: assignable_user_concurrency: default: 3 description: >- Max concurrent assignable-user API calls when fetching project members. DLT runs transformers in parallel (one per project), so this caps the burst rate against the Jira API. exclusiveMinimum: 0 title: Assignable User Concurrency type: integer auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 enable_webhooks: anyOf: - type: boolean - type: 'null' title: Enable Webhooks external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean include_resolved_tickets: anyOf: - type: boolean - type: 'null' description: >- When True, resolved tickets are included in the sync. Applies to tickets, attachments, and comments queries. Defaults to False when not set (only unresolved tickets are synced). title: Include Resolved Tickets initial_sync_days: anyOf: - exclusiveMinimum: 0 type: integer - type: 'null' description: >- Number of days to look back on the initial sync (when no prior sync exists). Defaults to 365 days when not set. title: Initial Sync Days jira_standard_issue_type_names: anyOf: - items: type: string type: array - type: 'null' description: >- Names of standard (non-subtask) JIRA issue types, stored lowercase. Refreshed on every workflow run. Used to filter tickets via standardIssueTypes. title: Jira Standard Issue Type Names oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization priority_mapping: anyOf: - items: additionalProperties: type: string type: object type: array - type: 'null' description: >- Maps JIRA priority names to standard ITSM priority levels. Ordered list where earlier entries take precedence when multiple JIRA priorities map to the same ITSM priority. If provided at connection creation, auto-mapping will be skipped. Valid values: CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNKNOWN. Example: [{'Highest': 'CRITICAL'}, {'High': 'HIGH'}, {'Medium': 'MEDIUM'}] title: Priority Mapping project_keys_filter: anyOf: - items: type: string type: array - type: 'null' title: Project Keys Filter refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object request_admin_scope: anyOf: - type: boolean - type: 'null' description: >- Controls manage:jira-configuration scope. Before OAuth: overrides the environment-level jira_enable_admin_scope setting to determine whether to request the scope. Set automatically after OAuth callback to reflect whether the scope was actually granted. When False, group member fetching is skipped (groups are still exported with empty member lists). title: Request Admin Scope site_name: anyOf: - type: string - type: 'null' title: Site Name site_url: anyOf: - type: string - type: 'null' title: Site Url status_mapping: anyOf: - items: additionalProperties: type: string type: object type: array - type: 'null' description: >- Maps JIRA status names to standard ITSM status values. Ordered list where earlier entries take precedence when multiple JIRA statuses map to the same ITSM status. If provided at connection creation, auto-mapping will be skipped. Valid values: OPEN, TODO, IN_PROGRESS, IN_REVIEW, BLOCKED, PENDING, RESOLVED, CLOSED, CANCELLED, DELETED, UNKNOWN. Example: [{'To Do': 'TODO'}, {'In Progress': 'IN_PROGRESS'}, {'Done': 'CLOSED'}] title: Status Mapping title: JiraConnectionOptions type: object LaceworkCSPMOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: LaceworkCSPMOptions type: object MendConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: MendConnectionOptions type: object MSDefenderCloudConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: MSDefenderCloudConnectionOptions type: object MSDefenderEndpointConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: MSDefenderEndpointConnectionOptions type: object MSDefenderVMSConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object vulnerability_lookback_in_days: default: 3 exclusiveMinimum: 0 title: Vulnerability Lookback In Days type: integer title: MSDefenderVMSConnectionOptions type: object MSDefenderVMSGccHighConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object vulnerability_lookback_in_days: default: 3 exclusiveMinimum: 0 title: Vulnerability Lookback In Days type: integer title: MSDefenderVMSGccHighConnectionOptions type: object MSEntraConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean filter_option: anyOf: - $ref: '#/components/schemas/EntraIDFilterOption' - type: 'null' description: Filter option for MSEntra users oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: MSEntraConnectionOptions type: object MSIntuneConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: MSIntuneConnectionOptions type: object OktaIDPOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: OktaIDPOptions type: object OrcaConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: OrcaConnectionOptions type: object ProcessUnityConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS breach_risk_filters: anyOf: - items: $ref: '#/components/schemas/FindingSeverityEnum' type: array - type: 'null' default: - HIGH title: Breach Risk Filters connection_id: anyOf: - type: string - type: 'null' title: Connection Id external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean issues_mapping: anyOf: - additionalProperties: type: string type: object - type: 'null' title: Issues Mapping portfolio_ids: anyOf: - items: type: string type: array - type: 'null' title: Portfolio Ids refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object third_party_mapping: anyOf: - additionalProperties: type: string type: object - type: 'null' title: Third Party Mapping threat_level_filters: anyOf: - items: $ref: '#/components/schemas/FindingSeverityEnum' type: array - type: 'null' default: - HIGH title: Threat Level Filters title: ProcessUnityConnectionOptions type: object ProofPointOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: ProofPointOptions type: object QualysConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean host_detection_params: anyOf: - additionalProperties: true type: object - type: 'null' description: Custom headers to be sent with detection list requests title: Host Detection Params host_params: anyOf: - additionalProperties: true type: object - type: 'null' description: Custom headers to be sent with host list requests title: Host Params refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: QualysConnectionOptions type: object SecurityScorecardConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean finding_filters: anyOf: - items: $ref: '#/components/schemas/FindingSeverityEnum' type: array - type: 'null' default: - HIGH title: Finding Filters refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: SecurityScorecardConnectionOptions type: object SemgrepOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: SemgrepOptions type: object SentinelOneEDROptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: SentinelOneEDROptions type: object SentinelOneVMSOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: SentinelOneVMSOptions type: object ServiceNowGRCConnectionOptions: description: ServiceNow GRC connection options. properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: ServiceNowGRCConnectionOptions type: object ServiceNowITSMConnectionOptions: description: ServiceNow ITSM connection options. properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: ServiceNowITSMConnectionOptions type: object ServiceNowVROptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: ServiceNowVROptions type: object SnykConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: OAUTH2 external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean oauth2_redirect_urls: anyOf: - $ref: '#/components/schemas/OAuth2RedirectUrls' - type: 'null' description: override Leen's default splash page after authorization refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: SnykConnectionOptions type: object SocketOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: SocketOptions type: object SonarQubeConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: SonarQubeConnectionOptions type: object TaniumVMSOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: TaniumVMSOptions type: object TenableConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object severity: default: [] items: $ref: '#/components/schemas/TenableVulnerabilitySeverityEnum' title: Severity type: array stale_device_lookback_days: anyOf: - minimum: 1 type: integer - type: 'null' description: >- Grace window (days) for the stale-device decommission lookback: a non-deleted device is only a deletion candidate once its updated_at is older than this many days AND it is absent from the latest asset export. Defaults to the adapter's STALE_LOOKBACK_DAYS when unset. title: Stale Device Lookback Days title: TenableConnectionOptions type: object UpwindConnectionOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS exploitable_only: anyOf: - type: boolean - type: 'null' description: >- When true, only vulnerability findings that Upwind flags as having a known exploit are exported. The filter is applied by the Upwind API itself, so non-matching findings are never fetched. Defaults to false when not set (export all findings regardless of exploitability). Enabling this on an existing connection causes previously-exported non-exploitable findings to be closed on the next sync, since they will no longer appear in the export. Note this also narrows the resource inventory: resources are derived from the same filtered stream, so a resource whose findings are all non-exploitable stops being refreshed, and one that never carries an exploitable finding is not created at all. title: Exploitable Only external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object severity_filters: anyOf: - items: type: string type: array - type: 'null' description: Optional CSV list of Upwind CVSS severities to export. title: Severity Filters title: UpwindConnectionOptions type: object WizCodeOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: WizCodeOptions type: object WizCSPMOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object title: WizCSPMOptions type: object WizVMSOptions: properties: auth_type: $ref: '#/components/schemas/ConnectionAuthTypeEnum' default: SECRETS external_use_only: default: false description: >- If true, this connection is only for external/agentic use, so no scheduled data fetches. If false, this is a normal connection with periodic data fetches. title: External Use Only type: boolean graph_search_concurrency: anyOf: - type: integer - type: 'null' default: 10 description: >- Max concurrent graphSearch API calls. Wiz rate-limits service accounts to 10 graphSearch queries/sec. title: Graph Search Concurrency refresh_intervals: additionalProperties: type: integer description: arbitrary settings title: Refresh Intervals type: object severity: default: [] items: $ref: '#/components/schemas/WizVMSVulnerabilitySeverityEnum' title: Severity type: array vulnerability_fetch_concurrency: default: 10 description: >- Max concurrent vulnerability shard queries. Caps peak in-flight `first: 5000` Wiz queries independently of the shard count, which scales with the export window (a forced 365-day refresh shards into dozens). Keeps memory bounded on a connector with prior OOM history. minimum: 1 title: Vulnerability Fetch Concurrency type: integer title: WizVMSOptions type: object ConnectionVendorEnum: enum: - AIKIDO - ARNICA - AWS_ACCESS_ANALYSER - AWS_GUARDDUTY - AWS_INSPECTOR2 - AWS_SECURITYHUB - BIT_SIGHT - BLACK_DUCK_COVERITY - BLACK_DUCK_SCA - BLACK_KITE - CHECKMARX - CROWDSTRIKE - CROWDSTRIKE_SPOTLIGHT - GITHUB - GITLAB - HEELER - INSIGHTVM - JIRA - LACEWORK_CSPM - MEND - MS_DEFENDER_CLOUD - MS_DEFENDER_ENDPOINT - MS_DEFENDER_VMS - MS_DEFENDER_VMS_GCC_HIGH - MS_ENTRA - MS_INTUNE - OKTA_IDP - ORCA - PROCESSUNITY - PROOFPOINT_TAP - QUALYS - SECURITY_SCORECARD - SEMGREP - SENTINELONE - SENTINELONE_VMS - SERVICENOW - SERVICENOW_ITSM - SERVICENOW_VR - SNYK - SOCKET - SONARQUBE - TANIUM_VMS - TENABLE - UPWIND - WIZ_CODE - WIZ_CSPM - WIZ_VMS title: ConnectionVendorEnum type: string ValidationError: properties: ctx: title: Context type: object input: title: Input loc: items: anyOf: - type: string - type: integer title: Location type: array msg: title: Message type: string type: title: Error Type type: string required: - loc - msg - type title: ValidationError type: object ConnectionAuthTypeEnum: enum: - SECRETS - OAUTH2 - DIRECT_ACCESS - LEEN_ROLE - ROLE_CHAINING title: ConnectionAuthTypeEnum type: string BitSightFilter: properties: severity_gte: anyOf: - type: integer - type: 'null' title: Severity Gte title: BitSightFilter type: object BlackKiteFilters: properties: severity: items: $ref: '#/components/schemas/BlackKiteSeverityLevelEnum' title: Severity type: array required: - severity title: BlackKiteFilters type: object CrowdStrikeSpotlightVulnerabilityCveSeverityEnum: enum: - MEDIUM - HIGH - CRITICAL title: CrowdStrikeSpotlightVulnerabilityCveSeverityEnum type: string OAuth2RedirectUrls: properties: error: description: Redirect URL on failed authorization title: Error type: string success: description: Redirect URL on successful authorization title: Success type: string required: - success - error title: OAuth2RedirectUrls type: object EntraIDFilterOption: enum: - active_users_only - active_users_with_enabled_licenses_only title: EntraIDFilterOption type: string FindingSeverityEnum: enum: - CRITICAL - HIGH - MEDIUM - LOW - INFO - UNKNOWN title: FindingSeverityEnum type: string TenableVulnerabilitySeverityEnum: description: Severity levels accepted by Tenable's vulnerability export API. enum: - info - low - medium - high - critical title: TenableVulnerabilitySeverityEnum type: string WizVMSVulnerabilitySeverityEnum: enum: - INFORMATIONAL - LOW - MEDIUM - HIGH - CRITICAL title: WizVMSVulnerabilitySeverityEnum type: string BlackKiteSeverityLevelEnum: enum: - Info - Low - Medium - High - Critical title: BlackKiteSeverityLevelEnum type: string securitySchemes: API-Key: in: header name: X-API-KEY type: apiKey ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.