Agent Tool API Endpoints
These are the tools that agents call when they run.
Table 8. Agent Tool Endpoints
Method | Route | Blueprint | Description |
|---|---|---|---|
POST | /knowledge-graph-csv | knowledge_graph | Returns incident graph as compact CSV |
POST | /incident-retrieval | incident_retrieval | Raw incident details from API |
POST | /run-defender-query | defender_query | KQL queries to API |
POST | /analytics-query | analytics_query | Analytic data queries |
POST | /blob-storage/* | blob_storage | File CRUD |
— | /mcp-tools | mcp_tools | MCP tool integration endpoints |