> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leen.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Connection by ID and Organization ID

> Update a connection's credentials, identifier or state. Credentials are replaced rather than merged, so a partial set will overwrite the stored ones.



## OpenAPI

````yaml patch /provisioning/organizations/{organization_id}/connections/{connection_id}
openapi: 3.1.0
info:
  title: Leen Security API
  version: 0.0.1
servers:
  - description: Production API (US)
    url: https://api.leen.dev/v1
  - description: Production API (EU)
    url: https://api.eu-c1.leen.dev/v1
  - description: Production API (APAC)
    url: https://api.ap-se2.leen.dev/v1
security: []
paths:
  /provisioning/organizations/{organization_id}/connections/{connection_id}:
    patch:
      tags:
        - provisioning
      summary: Update Connection by ID and Organization ID
      description: >-
        Update a connection's credentials, identifier or state. Credentials are
        replaced rather than merged, so a partial set will overwrite the stored
        ones.
      operationId: update_connection_by_id
      parameters:
        - in: path
          name: organization_id
          required: true
          schema:
            format: uuid
            title: Organization Id
            type: string
        - in: path
          name: connection_id
          required: true
          schema:
            format: uuid
            title: Connection Id
            type: string
        - in: header
          name: X-CONNECTION-INVITE-TOKEN
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            title: X-Connection-Invite-Token
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ConnectionUpdateModel'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ConnectionRespModel'
          description: Successful Response
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Validation Error
      security:
        - API-Key: []
components:
  schemas:
    ConnectionUpdateModel:
      properties:
        credentials:
          anyOf:
            - $ref: '#/components/schemas/AikidoCredentials'
            - $ref: '#/components/schemas/ArnicaCredentials'
            - $ref: '#/components/schemas/AwsAccessAnalyzerCredentials'
            - $ref: '#/components/schemas/AwsGuardDutyCredentials'
            - $ref: '#/components/schemas/AwsInspector2Credentials'
            - $ref: '#/components/schemas/AwsSecurityHubCredentials'
            - $ref: '#/components/schemas/BitSightCredentials'
            - $ref: '#/components/schemas/BlackDuckCredentials'
            - $ref: '#/components/schemas/BlackDuckSCACredentials'
            - $ref: '#/components/schemas/BlackKiteCredentials'
            - $ref: '#/components/schemas/CheckmarxCredentials'
            - $ref: '#/components/schemas/CrowdStrikeCredentials'
            - $ref: '#/components/schemas/CrowdStrikeSpotlightCredentials'
            - $ref: '#/components/schemas/GitHubCredentials'
            - $ref: '#/components/schemas/GitlabCredentials'
            - $ref: '#/components/schemas/HeelerCredentials'
            - $ref: '#/components/schemas/InsightVMCredentials'
            - $ref: '#/components/schemas/JiraOAuth2Credentials'
            - $ref: '#/components/schemas/LaceworkCSPMCredentials'
            - $ref: '#/components/schemas/MendCredentials'
            - $ref: '#/components/schemas/MSDefenderCloudCredentials'
            - $ref: '#/components/schemas/MSDefenderEndpointCredentials'
            - $ref: '#/components/schemas/MSDefenderVMSCredentials'
            - $ref: '#/components/schemas/MSDefenderVMSGccHighCredentials'
            - $ref: '#/components/schemas/MSEntraCredential'
            - $ref: '#/components/schemas/MSIntuneCredentials'
            - $ref: '#/components/schemas/OktaIDPCredentials'
            - $ref: '#/components/schemas/OrcaCredentials'
            - $ref: '#/components/schemas/ProcessUnityCredentials'
            - $ref: '#/components/schemas/ProofPointCredentials'
            - $ref: '#/components/schemas/QualysCredentials'
            - $ref: '#/components/schemas/SecurityScorecardCredentials'
            - $ref: '#/components/schemas/SemgrepCredentials'
            - $ref: '#/components/schemas/SentinelOneEDRCredentials'
            - $ref: '#/components/schemas/SentinelOneVMSCredentials'
            - $ref: '#/components/schemas/ServiceNowCredentials'
            - $ref: '#/components/schemas/ServiceNowVRCredentials'
            - $ref: '#/components/schemas/SnykCredentials'
            - $ref: '#/components/schemas/SocketCredentials'
            - $ref: '#/components/schemas/SonarQubeCredentials'
            - $ref: '#/components/schemas/TaniumVMSCredentials'
            - $ref: '#/components/schemas/TenableCredentials'
            - $ref: '#/components/schemas/UpwindCredentials'
            - $ref: '#/components/schemas/WizCodeCredentials'
            - $ref: '#/components/schemas/WizCSPMCredentials'
            - $ref: '#/components/schemas/WizVMSCredentials'
            - type: 'null'
          description: Connection credentials
          title: Credentials
        identifier:
          anyOf:
            - type: string
            - type: 'null'
          description: >-
            An optional identifier for the connection, you can use this to
            reference the connection in your own system
          title: Identifier
        options:
          anyOf:
            - $ref: '#/components/schemas/BaseConnectionOptionsModel'
            - $ref: '#/components/schemas/AikidoConnectionOptions'
            - $ref: '#/components/schemas/ArnicaConnectionOptions'
            - $ref: '#/components/schemas/AwsAccessAnalyzerOptions'
            - $ref: '#/components/schemas/AwsGuardDutyOptions'
            - $ref: '#/components/schemas/AwsInspector2Options'
            - $ref: '#/components/schemas/AwsSecurityHubOptions'
            - $ref: '#/components/schemas/BitSightConnectionOptions'
            - $ref: '#/components/schemas/BlackDuckConnectionOptions'
            - $ref: '#/components/schemas/BlackDuckSCAConnectionOptions'
            - $ref: '#/components/schemas/BlackKiteConnectionOptions'
            - $ref: '#/components/schemas/CheckmarxConnectionOptions'
            - $ref: '#/components/schemas/CrowdStrikeConnectionOptions'
            - $ref: '#/components/schemas/CrowdStrikeSpotlightConnectionOptions'
            - $ref: '#/components/schemas/GitHubConnectionOptions'
            - $ref: '#/components/schemas/GitlabOptions'
            - $ref: '#/components/schemas/HeelerOptions'
            - $ref: '#/components/schemas/InsightVMConnectionOptions'
            - $ref: '#/components/schemas/JiraConnectionOptions'
            - $ref: '#/components/schemas/LaceworkCSPMOptions'
            - $ref: '#/components/schemas/MendConnectionOptions'
            - $ref: '#/components/schemas/MSDefenderCloudConnectionOptions'
            - $ref: '#/components/schemas/MSDefenderEndpointConnectionOptions'
            - $ref: '#/components/schemas/MSDefenderVMSConnectionOptions'
            - $ref: '#/components/schemas/MSDefenderVMSGccHighConnectionOptions'
            - $ref: '#/components/schemas/MSEntraConnectionOptions'
            - $ref: '#/components/schemas/MSIntuneConnectionOptions'
            - $ref: '#/components/schemas/OktaIDPOptions'
            - $ref: '#/components/schemas/OrcaConnectionOptions'
            - $ref: '#/components/schemas/ProcessUnityConnectionOptions'
            - $ref: '#/components/schemas/ProofPointOptions'
            - $ref: '#/components/schemas/QualysConnectionOptions'
            - $ref: '#/components/schemas/SecurityScorecardConnectionOptions'
            - $ref: '#/components/schemas/SemgrepOptions'
            - $ref: '#/components/schemas/SentinelOneEDROptions'
            - $ref: '#/components/schemas/SentinelOneVMSOptions'
            - $ref: '#/components/schemas/ServiceNowGRCConnectionOptions'
            - $ref: '#/components/schemas/ServiceNowITSMConnectionOptions'
            - $ref: '#/components/schemas/ServiceNowVROptions'
            - $ref: '#/components/schemas/SnykConnectionOptions'
            - $ref: '#/components/schemas/SocketOptions'
            - $ref: '#/components/schemas/SonarQubeConnectionOptions'
            - $ref: '#/components/schemas/TaniumVMSOptions'
            - $ref: '#/components/schemas/TenableConnectionOptions'
            - $ref: '#/components/schemas/UpwindConnectionOptions'
            - $ref: '#/components/schemas/WizCodeOptions'
            - $ref: '#/components/schemas/WizCSPMOptions'
            - $ref: '#/components/schemas/WizVMSOptions'
            - type: 'null'
          description: Connection options
          title: Options
        state:
          anyOf:
            - $ref: '#/components/schemas/ConnectionStateEnum'
            - type: 'null'
          default: ACTIVE
      title: ConnectionUpdateModel
      type: object
    ConnectionRespModel:
      properties:
        created_at:
          description: When the connection was created.
          format: date-time
          title: Created At
          type: string
        direction:
          $ref: '#/components/schemas/ConnectionDirectionEnum'
          default: SOURCE
          description: >-
            Which way data moves. `SOURCE` reads from the vendor; the
            destination kinds write to it, and are what a push or pull
            integration uses.
        health:
          $ref: '#/components/schemas/ConnectionHealthRespModel'
          description: >-
            Whether the connection is working, and who has to act if it is not
            -- a revoked credential is yours to fix, a vendor outage is not.
        id:
          description: >-
            Leen's identifier for this connection. Pass it as `connection_id`
            when reading data.
          format: uuid
          title: Id
          type: string
        identifier:
          anyOf:
            - type: string
            - type: 'null'
          description: >-
            Your own reference for this connection, set when it was created.
            Leen does not interpret it; it is here so you can match a connection
            to a record in your system.
          title: Identifier
        is_active:
          description: >-
            Whether scheduled syncing runs. Separate from `state`: a connection
            can be `ACTIVE` with syncing switched off.
          title: Is Active
          type: boolean
        last_token_issued_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          description: >-
            Pull destinations only: latest access-token mint time across active
            secrets. Used as a freshness proxy since these connections never
            sync.
          title: Last Token Issued At
        oauth2_authorize_url:
          anyOf:
            - type: string
            - type: 'null'
          description: >-
            Where to send the user to authorise this connection, for vendors
            that use OAuth2. Null once authorisation is complete, and for every
            vendor that authenticates another way.
          title: Oauth2 Authorize Url
        organization_id:
          description: The organization this connection belongs to.
          format: uuid
          title: Organization Id
          type: string
        pull_destination_health:
          anyOf:
            - enum:
                - HEALTHY
                - STALE
              type: string
            - type: 'null'
          description: >-
            Pull destinations only: HEALTHY if a token was minted within the
            staleness window, STALE otherwise (including if none was ever
            minted).
          title: Pull Destination Health
        refresh_interval_secs:
          description: Seconds between scheduled syncs. Defaults to 14400 -- four hours.
          title: Refresh Interval Secs
          type: integer
        source_connection_id:
          anyOf:
            - format: uuid
              type: string
            - type: 'null'
          description: >-
            For a destination connection, the source whose data it forwards.
            Null on a source connection.
          title: Source Connection Id
        state:
          $ref: '#/components/schemas/ConnectionStateEnum'
          description: >-
            Lifecycle state. `PENDING` until credentials are accepted, then
            `ACTIVE`. `PAUSED` stops syncing without discarding anything;
            `DELETED` is a soft delete and its data is no longer readable.
        timeout_secs:
          description: >-
            How long a single sync may run before it is abandoned. Defaults to
            3600.
          title: Timeout Secs
          type: integer
        updated_at:
          description: When any field on the connection last changed.
          format: date-time
          title: Updated At
          type: string
        vendor:
          description: >-
            The tool this connection reads from or writes to, e.g. `SNYK`,
            `QUALYS`.
          title: Vendor
          type: string
      required:
        - id
        - vendor
        - is_active
        - refresh_interval_secs
        - timeout_secs
        - organization_id
        - state
        - created_at
        - updated_at
        - health
      title: Connection
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    AikidoCredentials:
      properties:
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
      required:
        - client_id
        - client_secret
      title: AikidoCredentials
      type: object
    ArnicaCredentials:
      properties:
        access_token:
          title: Access Token
          type: string
      required:
        - access_token
      title: ArnicaCredentials
      type: object
    AwsAccessAnalyzerCredentials:
      properties:
        aws:
          discriminator:
            mapping:
              DIRECT_ACCESS: '#/components/schemas/AWSDirectAccessSecrets'
              LEEN_ROLE: '#/components/schemas/AWSLeenRoleSecrets'
              ROLE_CHAINING: '#/components/schemas/AWSRoleChainingSecrets'
            propertyName: type
          oneOf:
            - $ref: '#/components/schemas/AWSDirectAccessSecrets'
            - $ref: '#/components/schemas/AWSLeenRoleSecrets'
            - $ref: '#/components/schemas/AWSRoleChainingSecrets'
          title: Aws
      required:
        - aws
      title: AwsAccessAnalyzerCredentials
      type: object
    AwsGuardDutyCredentials:
      properties:
        aws:
          discriminator:
            mapping:
              DIRECT_ACCESS: '#/components/schemas/AWSDirectAccessSecrets'
              LEEN_ROLE: '#/components/schemas/AWSLeenRoleSecrets'
              ROLE_CHAINING: '#/components/schemas/AWSRoleChainingSecrets'
            propertyName: type
          oneOf:
            - $ref: '#/components/schemas/AWSDirectAccessSecrets'
            - $ref: '#/components/schemas/AWSLeenRoleSecrets'
            - $ref: '#/components/schemas/AWSRoleChainingSecrets'
          title: Aws
      required:
        - aws
      title: AwsGuardDutyCredentials
      type: object
    AwsInspector2Credentials:
      properties:
        aws:
          discriminator:
            mapping:
              DIRECT_ACCESS: '#/components/schemas/AWSDirectAccessSecrets'
              LEEN_ROLE: '#/components/schemas/AWSLeenRoleSecrets'
              ROLE_CHAINING: '#/components/schemas/AWSRoleChainingSecrets'
            propertyName: type
          oneOf:
            - $ref: '#/components/schemas/AWSDirectAccessSecrets'
            - $ref: '#/components/schemas/AWSLeenRoleSecrets'
            - $ref: '#/components/schemas/AWSRoleChainingSecrets'
          title: Aws
      required:
        - aws
      title: AwsInspector2Credentials
      type: object
    AwsSecurityHubCredentials:
      properties:
        aws:
          discriminator:
            mapping:
              DIRECT_ACCESS: '#/components/schemas/AWSDirectAccessSecrets'
              LEEN_ROLE: '#/components/schemas/AWSLeenRoleSecrets'
              ROLE_CHAINING: '#/components/schemas/AWSRoleChainingSecrets'
            propertyName: type
          oneOf:
            - $ref: '#/components/schemas/AWSDirectAccessSecrets'
            - $ref: '#/components/schemas/AWSLeenRoleSecrets'
            - $ref: '#/components/schemas/AWSRoleChainingSecrets'
          title: Aws
      required:
        - aws
      title: AwsSecurityHubCredentials
      type: object
    BitSightCredentials:
      properties:
        username:
          title: Username
          type: string
      required:
        - username
      title: BitSightCredentials
      type: object
    BlackDuckCredentials:
      description: Username + password authentication (HTTP Basic Auth).
      properties:
        base_url:
          description: Coverity Connect server URL, e.g. https://coverity.example.com
          title: Base Url
          type: string
        password:
          title: Password
          type: string
        username:
          title: Username
          type: string
      required:
        - base_url
        - username
        - password
      title: BlackDuckCredentials
      type: object
    BlackDuckSCACredentials:
      description: |-
        API token authentication for Black Duck SCA.

        Users generate an API token from the Black Duck UI (User > API Tokens).
        The token is exchanged for a short-lived bearer token via
        ``POST /api/tokens/authenticate``.
      properties:
        api_token:
          description: Black Duck API token
          title: Api Token
          type: string
        base_url:
          description: Black Duck server URL, e.g. https://blackduck.example.com
          title: Base Url
          type: string
      required:
        - base_url
        - api_token
      title: BlackDuckSCACredentials
      type: object
    BlackKiteCredentials:
      properties:
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
      required:
        - client_id
        - client_secret
      title: BlackKiteCredentials
      type: object
    CheckmarxCredentials:
      properties:
        base_url:
          title: Base Url
          type: string
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
        tenant_name:
          title: Tenant Name
          type: string
      required:
        - tenant_name
        - base_url
        - client_id
        - client_secret
      title: CheckmarxCredentials
      type: object
    CrowdStrikeCredentials:
      properties:
        base_url:
          title: Base Url
          type: string
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
      required:
        - base_url
        - client_id
        - client_secret
      title: CrowdStrikeCredentials
      type: object
    CrowdStrikeSpotlightCredentials:
      properties:
        base_url:
          title: Base Url
          type: string
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
      required:
        - base_url
        - client_id
        - client_secret
      title: CrowdStrikeSpotlightCredentials
      type: object
    GitHubCredentials:
      properties: {}
      title: GitHubCredentials
      type: object
    GitlabCredentials:
      properties:
        allowed_project_ids:
          anyOf:
            - type: string
            - type: 'null'
          title: Allowed Project Ids
        private_access_token:
          title: Private Access Token
          type: string
      required:
        - private_access_token
      title: GitlabCredentials
      type: object
    HeelerCredentials:
      properties:
        api_token:
          title: Api Token
          type: string
      required:
        - api_token
      title: HeelerCredentials
      type: object
    InsightVMCredentials:
      properties:
        api_key:
          title: Api Key
          type: string
        base_url:
          title: Base Url
          type: string
      required:
        - base_url
        - api_key
      title: InsightVMCredentials
      type: object
    JiraOAuth2Credentials:
      properties:
        access_token:
          anyOf:
            - type: string
            - type: 'null'
          title: Access Token
        cloud_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Cloud Id
        refresh_token:
          anyOf:
            - type: string
            - type: 'null'
          title: Refresh Token
        token_expires_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Token Expires At
      title: JiraOAuth2Credentials
      type: object
    LaceworkCSPMCredentials:
      properties:
        account:
          title: Account
          type: string
        key_id:
          title: Key Id
          type: string
        secret:
          title: Secret
          type: string
        sub_account:
          anyOf:
            - type: string
            - type: 'null'
          title: Sub Account
      required:
        - account
        - key_id
        - secret
      title: LaceworkCSPMCredentials
      type: object
    MendCredentials:
      properties:
        base_url:
          anyOf:
            - type: string
            - type: 'null'
          default: https://api-saas.mend.io
          title: Base Url
        org_uuid:
          anyOf:
            - type: string
            - type: 'null'
          title: Org Uuid
        user_email:
          anyOf:
            - type: string
            - type: 'null'
          title: User Email
        user_key:
          anyOf:
            - type: string
            - type: 'null'
          title: User Key
      required:
        - user_email
        - user_key
        - org_uuid
      title: MendCredentials
      type: object
    MSDefenderCloudCredentials:
      properties: {}
      title: MSDefenderCloudCredentials
      type: object
    MSDefenderEndpointCredentials:
      description: >-
        Either nothing (Leen's app, admin consent) or a customer's own app
        registration.


        All three fields present makes the connection app-only: the customer
        granted

        admin consent in their own tenant, so there is nothing to redirect them
        for.

        The empty shape is the pre-existing consent flow and stays the default.
      properties:
        client_id:
          anyOf:
            - type: string
            - type: 'null'
          description: Application (client) ID of the app registration
          title: Client Id
        client_secret:
          anyOf:
            - type: string
            - type: 'null'
          description: Client secret value generated for the app registration
          title: Client Secret
        tenant_id:
          anyOf:
            - type: string
            - type: 'null'
          description: Directory (tenant) ID of the tenant the app is registered in
          title: Tenant Id
      title: MSDefenderEndpointCredentials
      type: object
    MSDefenderVMSCredentials:
      description: >-
        Either nothing (Leen's app, admin consent) or a customer's own app
        registration.


        Same shape as Defender for Endpoint: this vendor reads the same API with
        the

        same MSAL client-credentials call, so an app-only credential works
        identically.
      properties:
        client_id:
          anyOf:
            - type: string
            - type: 'null'
          description: Application (client) ID of the app registration
          title: Client Id
        client_secret:
          anyOf:
            - type: string
            - type: 'null'
          description: Client secret value generated for the app registration
          title: Client Secret
        tenant_id:
          anyOf:
            - type: string
            - type: 'null'
          description: Directory (tenant) ID of the tenant the app is registered in
          title: Tenant Id
      title: MSDefenderVMSCredentials
      type: object
    MSDefenderVMSGccHighCredentials:
      properties: {}
      title: MSDefenderVMSGccHighCredentials
      type: object
    MSEntraCredential:
      anyOf:
        - $ref: '#/components/schemas/MSEntraOAuth2Credentials'
        - $ref: '#/components/schemas/MSEntraSecretCredentials'
      title: MSEntraCredential
    MSIntuneCredentials:
      properties: {}
      title: MSIntuneCredentials
      type: object
    OktaIDPCredentials:
      properties:
        api_token:
          title: Api Token
          type: string
        org_url:
          title: Org Url
          type: string
      required:
        - org_url
        - api_token
      title: OktaIDPCredentials
      type: object
    OrcaCredentials:
      properties:
        api_token:
          title: Api Token
          type: string
        region:
          anyOf:
            - type: string
            - type: 'null'
          default: US
          title: Region
      required:
        - api_token
      title: OrcaCredentials
      type: object
    ProcessUnityCredentials:
      properties:
        base_url:
          title: Base Url
          type: string
        issues_import_template_id:
          title: Issues Import Template Id
          type: integer
        password:
          title: Password
          type: string
        third_party_import_template_id:
          title: Third Party Import Template Id
          type: integer
        username:
          title: Username
          type: string
      required:
        - base_url
        - username
        - password
        - third_party_import_template_id
        - issues_import_template_id
      title: ProcessUnityCredentials
      type: object
    ProofPointCredentials:
      properties:
        secret:
          title: Secret
          type: string
        service_principal:
          title: Service Principal
          type: string
      required:
        - service_principal
        - secret
      title: ProofPointCredentials
      type: object
    QualysCredentials:
      properties:
        password:
          title: Password
          type: string
        username:
          title: Username
          type: string
      required:
        - username
        - password
      title: QualysCredentials
      type: object
    SecurityScorecardCredentials:
      properties:
        api_key:
          title: Api Key
          type: string
      required:
        - api_key
      title: SecurityScorecardCredentials
      type: object
    SemgrepCredentials:
      properties:
        web_api_token:
          title: Web Api Token
          type: string
      required:
        - web_api_token
      title: SemgrepCredentials
      type: object
    SentinelOneEDRCredentials:
      properties:
        api_token:
          title: Api Token
          type: string
        base_url:
          title: Base Url
          type: string
      required:
        - base_url
        - api_token
      title: SentinelOneEDRCredentials
      type: object
    SentinelOneVMSCredentials:
      properties:
        api_token:
          title: Api Token
          type: string
        base_url:
          title: Base Url
          type: string
      required:
        - base_url
        - api_token
      title: SentinelOneVMSCredentials
      type: object
    ServiceNowCredentials:
      description: ServiceNow connection credentials.
      properties:
        instance_name:
          title: Instance Name
          type: string
        password:
          title: Password
          type: string
        username:
          title: Username
          type: string
      required:
        - username
        - password
        - instance_name
      title: ServiceNowCredentials
      type: object
    ServiceNowVRCredentials:
      properties: {}
      title: ServiceNowVRCredentials
      type: object
    SnykCredentials:
      properties:
        api_token:
          anyOf:
            - type: string
            - type: 'null'
          title: Api Token
        base_url:
          anyOf:
            - type: string
            - type: 'null'
          default: https://app.snyk.io
          title: Base Url
      title: SnykCredentials
      type: object
    SocketCredentials:
      description: >-
        Credentials for Socket.dev API.

        Token is a static Bearer token created from Socket dashboard → Settings
        → API Tokens.

        It has no expiry and does not require refresh.
      properties:
        api_token:
          title: Api Token
          type: string
        org_slug:
          title: Org Slug
          type: string
      required:
        - api_token
        - org_slug
      title: SocketCredentials
      type: object
    SonarQubeCredentials:
      properties:
        api_token:
          title: Api Token
          type: string
        base_url:
          anyOf:
            - type: string
            - type: 'null'
          default: https://sonarcloud.io
          title: Base Url
        organization:
          title: Organization
          type: string
      required:
        - api_token
        - organization
      title: SonarQubeCredentials
      type: object
    TaniumVMSCredentials:
      properties:
        api_token:
          title: Api Token
          type: string
        base_url:
          title: Base Url
          type: string
        next_rotation:
          anyOf:
            - type: string
            - type: 'null'
          title: Next Rotation
      required:
        - api_token
        - base_url
      title: TaniumVMSCredentials
      type: object
    TenableCredentials:
      properties:
        client_key:
          title: Client Key
          type: string
        secret_key:
          title: Secret Key
          type: string
      required:
        - client_key
        - secret_key
      title: TenableCredentials
      type: object
    UpwindCredentials:
      properties:
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
        upwind_organization_id:
          title: Upwind Organization Id
          type: string
      required:
        - client_id
        - client_secret
        - upwind_organization_id
      title: UpwindCredentials
      type: object
    WizCodeCredentials:
      properties:
        base_url:
          title: Base Url
          type: string
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
      required:
        - base_url
        - client_id
        - client_secret
      title: WizCodeCredentials
      type: object
    WizCSPMCredentials:
      properties:
        base_url:
          title: Base Url
          type: string
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
      required:
        - base_url
        - client_id
        - client_secret
      title: WizCSPMCredentials
      type: object
    WizVMSCredentials:
      properties:
        base_url:
          title: Base Url
          type: string
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
      required:
        - base_url
        - client_id
        - client_secret
      title: WizVMSCredentials
      type: object
    BaseConnectionOptionsModel:
      additionalProperties: true
      properties: {}
      title: BaseConnectionOptionsModel
      type: object
    AikidoConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: AikidoConnectionOptions
      type: object
    ArnicaConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: ArnicaConnectionOptions
      type: object
    AwsAccessAnalyzerOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        vendor:
          default: AWS_ACCESS_ANALYSER
          title: Vendor
          type: string
      title: AwsAccessAnalyzerOptions
      type: object
    AwsGuardDutyOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: AwsGuardDutyOptions
      type: object
    AwsInspector2Options:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        vendor:
          default: AWS_INSPECTOR2
          title: Vendor
          type: string
      title: AwsInspector2Options
      type: object
    AwsSecurityHubOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        vendor:
          default: AWS_SECURITYHUB
          title: Vendor
          type: string
      title: AwsSecurityHubOptions
      type: object
    BitSightConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        finding_filters:
          anyOf:
            - $ref: '#/components/schemas/BitSightFilter'
            - type: 'null'
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: BitSightConnectionOptions
      type: object
    BlackDuckConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: BlackDuckConnectionOptions
      type: object
    BlackDuckSCAConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        verify_ssl:
          default: true
          description: >-
            Whether to verify SSL certificates when connecting to the Black Duck
            server
          title: Verify Ssl
          type: boolean
      title: BlackDuckSCAConnectionOptions
      type: object
    BlackKiteConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        finding_filters:
          anyOf:
            - $ref: '#/components/schemas/BlackKiteFilters'
            - type: 'null'
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: BlackKiteConnectionOptions
      type: object
    CheckmarxConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: CheckmarxConnectionOptions
      type: object
    CrowdStrikeConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: CrowdStrikeConnectionOptions
      type: object
    CrowdStrikeSpotlightConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        severity:
          default: []
          items:
            $ref: >-
              #/components/schemas/CrowdStrikeSpotlightVulnerabilityCveSeverityEnum
          title: Severity
          type: array
      title: CrowdStrikeSpotlightConnectionOptions
      type: object
    GitHubConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: GitHubConnectionOptions
      type: object
    GitlabOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: GitlabOptions
      type: object
    HeelerOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: HeelerOptions
      type: object
    InsightVMConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        full_refresh_interval_in_days:
          default: 1
          exclusiveMinimum: 0
          title: Full Refresh Interval In Days
          type: integer
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: InsightVMConnectionOptions
      type: object
    JiraConnectionOptions:
      properties:
        assignable_user_concurrency:
          default: 3
          description: >-
            Max concurrent assignable-user API calls when fetching project
            members. DLT runs transformers in parallel (one per project), so
            this caps the burst rate against the Jira API.
          exclusiveMinimum: 0
          title: Assignable User Concurrency
          type: integer
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        enable_webhooks:
          anyOf:
            - type: boolean
            - type: 'null'
          title: Enable Webhooks
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        include_resolved_tickets:
          anyOf:
            - type: boolean
            - type: 'null'
          description: >-
            When True, resolved tickets are included in the sync. Applies to
            tickets, attachments, and comments queries. Defaults to False when
            not set (only unresolved tickets are synced).
          title: Include Resolved Tickets
        initial_sync_days:
          anyOf:
            - exclusiveMinimum: 0
              type: integer
            - type: 'null'
          description: >-
            Number of days to look back on the initial sync (when no prior sync
            exists). Defaults to 365 days when not set.
          title: Initial Sync Days
        jira_standard_issue_type_names:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: >-
            Names of standard (non-subtask) JIRA issue types, stored lowercase.
            Refreshed on every workflow run. Used to filter tickets via
            standardIssueTypes.
          title: Jira Standard Issue Type Names
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        priority_mapping:
          anyOf:
            - items:
                additionalProperties:
                  type: string
                type: object
              type: array
            - type: 'null'
          description: >-
            Maps JIRA priority names to standard ITSM priority levels. Ordered
            list where earlier entries take precedence when multiple JIRA
            priorities map to the same ITSM priority. If provided at connection
            creation, auto-mapping will be skipped. Valid values: CRITICAL,
            HIGH, MEDIUM, LOW, INFORMATIONAL, UNKNOWN. Example: [{'Highest':
            'CRITICAL'}, {'High': 'HIGH'}, {'Medium': 'MEDIUM'}]
          title: Priority Mapping
        project_keys_filter:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          title: Project Keys Filter
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        request_admin_scope:
          anyOf:
            - type: boolean
            - type: 'null'
          description: >-
            Controls manage:jira-configuration scope. Before OAuth: overrides
            the environment-level jira_enable_admin_scope setting to determine
            whether to request the scope. Set automatically after OAuth callback
            to reflect whether the scope was actually granted. When False, group
            member fetching is skipped (groups are still exported with empty
            member lists).
          title: Request Admin Scope
        site_name:
          anyOf:
            - type: string
            - type: 'null'
          title: Site Name
        site_url:
          anyOf:
            - type: string
            - type: 'null'
          title: Site Url
        status_mapping:
          anyOf:
            - items:
                additionalProperties:
                  type: string
                type: object
              type: array
            - type: 'null'
          description: >-
            Maps JIRA status names to standard ITSM status values. Ordered list
            where earlier entries take precedence when multiple JIRA statuses
            map to the same ITSM status. If provided at connection creation,
            auto-mapping will be skipped. Valid values: OPEN, TODO, IN_PROGRESS,
            IN_REVIEW, BLOCKED, PENDING, RESOLVED, CLOSED, CANCELLED, DELETED,
            UNKNOWN. Example: [{'To Do': 'TODO'}, {'In Progress':
            'IN_PROGRESS'}, {'Done': 'CLOSED'}]
          title: Status Mapping
      title: JiraConnectionOptions
      type: object
    LaceworkCSPMOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: LaceworkCSPMOptions
      type: object
    MendConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: MendConnectionOptions
      type: object
    MSDefenderCloudConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: MSDefenderCloudConnectionOptions
      type: object
    MSDefenderEndpointConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: MSDefenderEndpointConnectionOptions
      type: object
    MSDefenderVMSConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        vulnerability_lookback_in_days:
          default: 3
          exclusiveMinimum: 0
          title: Vulnerability Lookback In Days
          type: integer
      title: MSDefenderVMSConnectionOptions
      type: object
    MSDefenderVMSGccHighConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        vulnerability_lookback_in_days:
          default: 3
          exclusiveMinimum: 0
          title: Vulnerability Lookback In Days
          type: integer
      title: MSDefenderVMSGccHighConnectionOptions
      type: object
    MSEntraConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        filter_option:
          anyOf:
            - $ref: '#/components/schemas/EntraIDFilterOption'
            - type: 'null'
          description: Filter option for MSEntra users
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: MSEntraConnectionOptions
      type: object
    MSIntuneConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: MSIntuneConnectionOptions
      type: object
    OktaIDPOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: OktaIDPOptions
      type: object
    OrcaConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: OrcaConnectionOptions
      type: object
    ProcessUnityConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        breach_risk_filters:
          anyOf:
            - items:
                $ref: '#/components/schemas/FindingSeverityEnum'
              type: array
            - type: 'null'
          default:
            - HIGH
          title: Breach Risk Filters
        connection_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Connection Id
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        issues_mapping:
          anyOf:
            - additionalProperties:
                type: string
              type: object
            - type: 'null'
          title: Issues Mapping
        portfolio_ids:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          title: Portfolio Ids
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        third_party_mapping:
          anyOf:
            - additionalProperties:
                type: string
              type: object
            - type: 'null'
          title: Third Party Mapping
        threat_level_filters:
          anyOf:
            - items:
                $ref: '#/components/schemas/FindingSeverityEnum'
              type: array
            - type: 'null'
          default:
            - HIGH
          title: Threat Level Filters
      title: ProcessUnityConnectionOptions
      type: object
    ProofPointOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: ProofPointOptions
      type: object
    QualysConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        host_detection_params:
          anyOf:
            - additionalProperties: true
              type: object
            - type: 'null'
          description: Custom headers to be sent with detection list requests
          title: Host Detection Params
        host_params:
          anyOf:
            - additionalProperties: true
              type: object
            - type: 'null'
          description: Custom headers to be sent with host list requests
          title: Host Params
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: QualysConnectionOptions
      type: object
    SecurityScorecardConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        finding_filters:
          anyOf:
            - items:
                $ref: '#/components/schemas/FindingSeverityEnum'
              type: array
            - type: 'null'
          default:
            - HIGH
          title: Finding Filters
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: SecurityScorecardConnectionOptions
      type: object
    SemgrepOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: SemgrepOptions
      type: object
    SentinelOneEDROptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: SentinelOneEDROptions
      type: object
    SentinelOneVMSOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: SentinelOneVMSOptions
      type: object
    ServiceNowGRCConnectionOptions:
      description: ServiceNow GRC connection options.
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: ServiceNowGRCConnectionOptions
      type: object
    ServiceNowITSMConnectionOptions:
      description: ServiceNow ITSM connection options.
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: ServiceNowITSMConnectionOptions
      type: object
    ServiceNowVROptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: ServiceNowVROptions
      type: object
    SnykConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: OAUTH2
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        oauth2_redirect_urls:
          anyOf:
            - $ref: '#/components/schemas/OAuth2RedirectUrls'
            - type: 'null'
          description: override Leen's default splash page after authorization
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: SnykConnectionOptions
      type: object
    SocketOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: SocketOptions
      type: object
    SonarQubeConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: SonarQubeConnectionOptions
      type: object
    TaniumVMSOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: TaniumVMSOptions
      type: object
    TenableConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        severity:
          default: []
          items:
            $ref: '#/components/schemas/TenableVulnerabilitySeverityEnum'
          title: Severity
          type: array
        stale_device_lookback_days:
          anyOf:
            - minimum: 1
              type: integer
            - type: 'null'
          description: >-
            Grace window (days) for the stale-device decommission lookback: a
            non-deleted device is only a deletion candidate once its updated_at
            is older than this many days AND it is absent from the latest asset
            export. Defaults to the adapter's STALE_LOOKBACK_DAYS when unset.
          title: Stale Device Lookback Days
      title: TenableConnectionOptions
      type: object
    UpwindConnectionOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        exploitable_only:
          anyOf:
            - type: boolean
            - type: 'null'
          description: >-
            When true, only vulnerability findings that Upwind flags as having a
            known exploit are exported. The filter is applied by the Upwind API
            itself, so non-matching findings are never fetched. Defaults to
            false when not set (export all findings regardless of
            exploitability). Enabling this on an existing connection causes
            previously-exported non-exploitable findings to be closed on the
            next sync, since they will no longer appear in the export. Note this
            also narrows the resource inventory: resources are derived from the
            same filtered stream, so a resource whose findings are all
            non-exploitable stops being refreshed, and one that never carries an
            exploitable finding is not created at all.
          title: Exploitable Only
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        severity_filters:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          description: Optional CSV list of Upwind CVSS severities to export.
          title: Severity Filters
      title: UpwindConnectionOptions
      type: object
    WizCodeOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: WizCodeOptions
      type: object
    WizCSPMOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
      title: WizCSPMOptions
      type: object
    WizVMSOptions:
      properties:
        auth_type:
          $ref: '#/components/schemas/ConnectionAuthTypeEnum'
          default: SECRETS
        external_use_only:
          default: false
          description: >-
            If true, this connection is only for external/agentic use, so no
            scheduled data fetches. If false, this is a normal connection with
            periodic data fetches.
          title: External Use Only
          type: boolean
        graph_search_concurrency:
          anyOf:
            - type: integer
            - type: 'null'
          default: 10
          description: >-
            Max concurrent graphSearch API calls. Wiz rate-limits service
            accounts to 10 graphSearch queries/sec.
          title: Graph Search Concurrency
        refresh_intervals:
          additionalProperties:
            type: integer
          description: arbitrary settings
          title: Refresh Intervals
          type: object
        severity:
          default: []
          items:
            $ref: '#/components/schemas/WizVMSVulnerabilitySeverityEnum'
          title: Severity
          type: array
        vulnerability_fetch_concurrency:
          default: 10
          description: >-
            Max concurrent vulnerability shard queries. Caps peak in-flight
            `first: 5000` Wiz queries independently of the shard count, which
            scales with the export window (a forced 365-day refresh shards into
            dozens). Keeps memory bounded on a connector with prior OOM history.
          minimum: 1
          title: Vulnerability Fetch Concurrency
          type: integer
      title: WizVMSOptions
      type: object
    ConnectionStateEnum:
      enum:
        - PENDING
        - ACTIVE
        - PAUSED
        - DELETED
        - HARD_DELETED
      title: ConnectionStateEnum
      type: string
    ConnectionDirectionEnum:
      enum:
        - SOURCE
        - PUSH_DESTINATION
        - PULL_DESTINATION
      title: ConnectionDirectionEnum
      type: string
    ConnectionHealthRespModel:
      properties:
        description:
          title: Description
          type: string
        details:
          anyOf:
            - items:
                $ref: '#/components/schemas/ConnectionHealthUnauthorizedDetail'
              type: array
            - type: 'null'
          title: Details
        name:
          $ref: '#/components/schemas/ConnectionHealthStatusName'
        resolution_owner:
          $ref: '#/components/schemas/ResolutionOwner'
        status:
          $ref: '#/components/schemas/ConnectionHealthStatusEnum'
      required:
        - name
        - status
        - description
        - resolution_owner
      title: ConnectionHealthRespModel
      type: object
    ValidationError:
      properties:
        ctx:
          title: Context
          type: object
        input:
          title: Input
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object
    AWSDirectAccessSecrets:
      properties:
        aws_access_key_id:
          title: Aws Access Key Id
          type: string
        aws_region_name:
          anyOf:
            - type: string
            - type: 'null'
          title: Aws Region Name
        aws_secret_access_key:
          title: Aws Secret Access Key
          type: string
        type:
          const: DIRECT_ACCESS
          title: Type
          type: string
      required:
        - aws_access_key_id
        - aws_secret_access_key
        - type
      title: AWSDirectAccessSecrets
      type: object
    AWSLeenRoleSecrets:
      properties:
        aws_region_name:
          anyOf:
            - type: string
            - type: 'null'
          title: Aws Region Name
        aws_role_arn:
          title: Aws Role Arn
          type: string
        external_id:
          anyOf:
            - type: string
            - type: 'null'
          title: External Id
        type:
          const: LEEN_ROLE
          title: Type
          type: string
      required:
        - aws_role_arn
        - type
      title: AWSLeenRoleSecrets
      type: object
    AWSRoleChainingSecrets:
      properties:
        aws_region_name:
          anyOf:
            - type: string
            - type: 'null'
          title: Aws Region Name
        aws_role_arn:
          title: Aws Role Arn
          type: string
        external_id:
          anyOf:
            - type: string
            - type: 'null'
          title: External Id
        type:
          const: ROLE_CHAINING
          title: Type
          type: string
      required:
        - aws_role_arn
        - type
      title: AWSRoleChainingSecrets
      type: object
    MSEntraOAuth2Credentials:
      properties:
        auth_type:
          const: OAUTH2
          default: OAUTH2
          title: Auth Type
          type: string
      title: MSEntraOAuth2Credentials
      type: object
    MSEntraSecretCredentials:
      properties:
        auth_type:
          const: SECRETS
          default: SECRETS
          title: Auth Type
          type: string
        client_id:
          title: Client Id
          type: string
        client_secret:
          title: Client Secret
          type: string
        tenant_id:
          title: Tenant Id
          type: string
      required:
        - tenant_id
        - client_id
        - client_secret
      title: MSEntraSecretCredentials
      type: object
    ConnectionAuthTypeEnum:
      enum:
        - SECRETS
        - OAUTH2
        - DIRECT_ACCESS
        - LEEN_ROLE
        - ROLE_CHAINING
      title: ConnectionAuthTypeEnum
      type: string
    BitSightFilter:
      properties:
        severity_gte:
          anyOf:
            - type: integer
            - type: 'null'
          title: Severity Gte
      title: BitSightFilter
      type: object
    BlackKiteFilters:
      properties:
        severity:
          items:
            $ref: '#/components/schemas/BlackKiteSeverityLevelEnum'
          title: Severity
          type: array
      required:
        - severity
      title: BlackKiteFilters
      type: object
    CrowdStrikeSpotlightVulnerabilityCveSeverityEnum:
      enum:
        - MEDIUM
        - HIGH
        - CRITICAL
      title: CrowdStrikeSpotlightVulnerabilityCveSeverityEnum
      type: string
    OAuth2RedirectUrls:
      properties:
        error:
          description: Redirect URL on failed authorization
          title: Error
          type: string
        success:
          description: Redirect URL on successful authorization
          title: Success
          type: string
      required:
        - success
        - error
      title: OAuth2RedirectUrls
      type: object
    EntraIDFilterOption:
      enum:
        - active_users_only
        - active_users_with_enabled_licenses_only
      title: EntraIDFilterOption
      type: string
    FindingSeverityEnum:
      enum:
        - CRITICAL
        - HIGH
        - MEDIUM
        - LOW
        - INFO
        - UNKNOWN
      title: FindingSeverityEnum
      type: string
    TenableVulnerabilitySeverityEnum:
      description: Severity levels accepted by Tenable's vulnerability export API.
      enum:
        - info
        - low
        - medium
        - high
        - critical
      title: TenableVulnerabilitySeverityEnum
      type: string
    WizVMSVulnerabilitySeverityEnum:
      enum:
        - INFORMATIONAL
        - LOW
        - MEDIUM
        - HIGH
        - CRITICAL
      title: WizVMSVulnerabilitySeverityEnum
      type: string
    ConnectionHealthUnauthorizedDetail:
      properties:
        data_export_type:
          anyOf:
            - $ref: '#/components/schemas/DataExportTypesEnum'
            - type: 'null'
        endpoint:
          title: Endpoint
          type: string
      required:
        - endpoint
      title: ConnectionHealthUnauthorizedDetail
      type: object
    ConnectionHealthStatusName:
      enum:
        - HEALTHY
        - INITIALIZING
        - UNAUTHORIZED
        - CONNECTION_RECONFIGURATION_REQUIRED
        - VENDOR_CLIENT_ERROR
        - VENDOR_SERVER_ERROR
        - EXECUTION_TIMEOUT
        - RATE_LIMIT_EXCEEDED
        - INTERNAL_ERROR
      title: ConnectionHealthStatusName
      type: string
    ResolutionOwner:
      enum:
        - LEEN
        - CUSTOMER
        - VENDOR
      title: ResolutionOwner
      type: string
    ConnectionHealthStatusEnum:
      enum:
        - HEALTHY
        - UNHEALTHY
        - INITIALIZING
      title: ConnectionHealthStatusEnum
      type: string
    BlackKiteSeverityLevelEnum:
      enum:
        - Info
        - Low
        - Medium
        - High
        - Critical
      title: BlackKiteSeverityLevelEnum
      type: string
    DataExportTypesEnum:
      enum:
        - alerts
        - compliances
        - compliance_findings
        - config_users
        - cspm_alerts
        - device_groups
        - device_policies
        - devices
        - idp
        - idp_alerts
        - idp_audit_logs
        - idp_policies
        - issues
        - organization_identities
        - sast_issues
        - sca_issues
        - vms_scan_configs
        - vulnerabilities
        - resources
        - vulnerability_findings_v2
        - grc_entity
        - grc_control
        - grc_evidence
        - grc_assessment_question
        - grc_assessment
        - tprm
        - tprm_company
        - tprm_finding
        - findings
        - itsm_users
        - itsm_groups
        - itsm_projects
        - itsm_tickets
        - itsm_attachments
        - itsm_comments
        - applications
        - siem_events
      title: DataExportTypesEnum
      type: string
  securitySchemes:
    API-Key:
      in: header
      name: X-API-KEY
      type: apiKey

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.