Security
SecurityScorecard
Connect SecurityScorecard once and hand every teammate a governed MCP endpoint with 405 tools ready to call from Claude, ChatGPT, Cursor, or any MCP client, inside the same permissions they already have, with every call checked and logged.
See it in Elaichi
What connecting SecurityScorecard gets you
6 screens from the product, each doing one job for your SecurityScorecard account.
The agent
Ask for scores, get straight answers.
Type a plain question and pull live ratings and risk factors from securityscorecard portfolios.
- portfolios
- companies
- scorecard tags
- expanded risks
Ask Elaichi to work across your apps.
List the lowest scoring companies in our vendor portfolio.
Show new expanded risks added this week.
Which scorecard tags have the most flagged companies.
Also runs in Claude, ChatGPT or Cursor
MCP clients
One endpoint, every client, no api keys.
Claude, chatgpt and cursor all reach securityscorecard through a single governed org endpoint.
Claude
ChatGPT
Cursor
Copy the endpoint
Tool catalogue
405 securityscorecard tools, zero integration code.
Portfolios, tags, companies and bulk actions, all catalogued and ready to call.
- list_all_securityscorecard_portfolios
- create_a_securityscorecard_portfolio
- update_a_securityscorecard_portfolio_by_id
- delete_a_securityscorecard_portfolio_by_id
Toolboxes
Every team gets its own toolbox.
Security, IT and vendor risk each work from a toolbox scoped to their team.
- Security
- Vendor risk
- IT
- Compliance
Shared connections
Shared access, no shared credentials.
See who connected each securityscorecard account and how many teams and members use it.
- Vendor Risk
- Enterprise Security
- Third Party
- Compliance
Audit log
Every call, logged and attributable.
See who touched which portfolio or scorecard tag, and exactly when.
- When
- Who
- What happened
- Resource
Automations & dashboards
From answering questions to doing the work
A person no longer has to ask. A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations and live dashboards ship on the Black plan.
Automations
A schedule starts the work, a person approves it.
Records fetch, group into a digest, then wait for approval before posting back to securityscorecard.
SecurityScorecard digest
Run 418 · started 2 minutes ago · on behalf of Emma Laurent
-
✓
Schedule
Every weekday at 08:00
0.2s -
✓
Fetch portfolios
SecurityScorecard
1.4s -
✓
Group by owner
Transform
0.1s -
✓
Draft the digest
Agent step
Ran with 4 tools, returned a structured summary
6.2s -
Approve the digest
Needs approval
Assigned to Michael Brennan
Approve Deny -
Post the digest
SecurityScorecard
Queued
Collections and dashboards
Scorecard health, computed, not asked for.
Four metrics and a 14 day trend on records created, broken down by team.
SecurityScorecard health
Refreshed 4 minutes ago · every 15 minutes · from the portfolios collection
Portfolios
1,284 ↓ 12%
Companies
96 ↓ 8%
Needs attention
3 ↑ 2
Updated this week
412 ↑ 9%
Portfolios created
Last 14 days
By workspace
Share of activity
Vendor Risk 34%
Enterprise Security 27%
Third Party 21%
Compliance 18%
AI tools
SecurityScorecard tools for your AI agents
405 tools are ready to call through Elaichi's MCP endpoint the moment you connect SecurityScorecard, governed by the same roles, restrictions, and audit log as everything else in Elaichi.
list_all_securityscorecard_portfolios
List SecurityScorecard portfolios. Returns: id, name, description, privacy, team_id.
create_a_securityscorecard_portfolio
Create a SecurityScorecard portfolio with a name, description, and privacy level. Returns: id, name, description, privacy, team_id. Required: name.
update_a_securityscorecard_portfolio_by_id
Update a SecurityScorecard portfolio by id. Returns: id, name, description, privacy, team_id. Required: id, name.
delete_a_securityscorecard_portfolio_by_id
Delete a SecurityScorecard portfolio by id. Returns an empty 204 response on success. Required: id.
securityscorecard_companies_bulk_uploads_bulk_update
Bulk upload companies to SecurityScorecard portfolios via a PUT request. Returns a list of the uploaded companies following processing. Provide a JSON request body containing the companies to add.
list_all_securityscorecard_portfolio_companies
List companies (scorecards) in a SecurityScorecard portfolio with optional filters for grade, industry, vulnerability, issue type, status, and recent breaches. Returns: domain, grade, industry, status. Required: portfolio_id.
securityscorecard_portfolio_companies_bulk_update
Add a company scorecard to a SecurityScorecard portfolio by domain. Returns: domain, grade, industry, status. Required: portfolio_id, domain.
securityscorecard_portfolio_companies_bulk_delete
Remove a company from a SecurityScorecard portfolio by domain. Returns an empty 204 response on success. Required: portfolio_id, domain.
securityscorecard_companies_alls_bulk_delete
Remove all companies from a SecurityScorecard portfolio by portfolio id. Returns an empty 204 response on success. Required: id.
list_all_securityscorecard_portfolio_expanded_risks
List expanded risk entries for all companies in a SecurityScorecard portfolio. Returns: domain, name, grade, score, industry, status. Required: portfolio_id.
list_all_securityscorecard_scorecard_tags
List scorecard tags in SecurityScorecard. Returns: id, name. Uses cursor-based pagination via the entries array.
create_a_securityscorecard_scorecard_tag
Create a new scorecard tag in SecurityScorecard. Returns: id, name.
update_a_securityscorecard_scorecard_tag_by_id
Update a scorecard tag by id in SecurityScorecard. Returns: id, name. Required: id.
delete_a_securityscorecard_scorecard_tag_by_id
Delete a scorecard tag by id in SecurityScorecard. Returns an empty 204 response on success. Required: id.
create_a_securityscorecard_scorecard_tags_bulk_delete
Bulk delete scorecard tags in SecurityScorecard by submitting a list of tag IDs. Returns an empty 204 response on success. Required: ids.
list_all_securityscorecard_scorecard_tags_groups
List SecurityScorecard scorecard tag groups. Returns: id, name.
create_a_securityscorecard_scorecard_tags_group
Create a new scorecard tag group in SecurityScorecard. Returns: id, name. Required: name.
get_single_securityscorecard_scorecard_tags_group_by_id
Get a single SecurityScorecard scorecard tag group by id. Returns: id, name. Required: id.
update_a_securityscorecard_scorecard_tags_group_by_id
Update a SecurityScorecard scorecard tag group by id. Returns: id, name. Required: id.
delete_a_securityscorecard_scorecard_tags_group_by_id
Delete a SecurityScorecard scorecard tag group by id. Returns an empty 204 response on success. Required: id.
create_scorecard_tags_remove_public_tag_association
Remove a public tag association from scorecard tags in SecurityScorecard. Returns an empty 204 response on success.
list_all_securityscorecard_scorecard_tag_companies
List companies assigned to a SecurityScorecard scorecard tag. Returns: domain, name, grade, score, industry. Required: scorecard_tag_id.
create_a_securityscorecard_scorecard_tag_company
Add a company to a SecurityScorecard scorecard tag by domain. Returns: domain, name, grade, score, industry. Required: scorecard_tag_id, domain.
securityscorecard_scorecard_tag_companies_bulk_delete
Remove a company from a SecurityScorecard scorecard tag by domain. Returns an empty 204 response on success. Required: id, domain.
create_a_securityscorecard_scorecard_tag_group
Assign a SecurityScorecard tag group to a scorecard tag. Returns an empty 204 response on success. Required: tag_id, tag_group_id.
delete_a_securityscorecard_scorecard_tag_group_by_id
Remove a SecurityScorecard tag group from a scorecard tag. Returns an empty 204 response on success. Required: tag_id, id.
list_all_securityscorecard_ip_domain_tags
List IP domain tags in SecurityScorecard. Returns: id, domain, ip.
create_a_securityscorecard_ip_domain_tag
Create a new IP domain tag in SecurityScorecard. Returns: id, domain, ip. Required: domain.
update_a_securityscorecard_ip_domain_tag_by_id
Update an IP domain tag in SecurityScorecard by id. Returns: id, created_at, updated_at. Required: id.
delete_a_securityscorecard_ip_domain_tag_by_id
Delete an IP domain tag in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
list_all_securityscorecard_ip_domain_tags_groups
List IP domain tag groups in SecurityScorecard. Returns: id, name.
create_a_securityscorecard_ip_domain_tags_group
Create a new IP domain tag group in SecurityScorecard. Returns: id, name. Required: name.
get_single_securityscorecard_ip_domain_tags_group_by_id
Get a single IP domain tag group by id in SecurityScorecard. Returns: id, name. Required: id.
update_a_securityscorecard_ip_domain_tags_group_by_id
Update an IP domain tag group in SecurityScorecard by id. Returns the updated group object including id, created_at, and updated_at. Required: id.
delete_a_securityscorecard_ip_domain_tags_group_by_id
Delete an IP domain tag group in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
list_all_securityscorecard_parent_domain_domains
List domains under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: parent_domain.
create_a_securityscorecard_parent_domain_domain
Associate a domain with an IP domain tag under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: tag_id, parent_domain, domain.
securityscorecard_parent_domain_domains_search
Search domains under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: parent_domain.
securityscorecard_parent_domain_domains_bulk_delete
Remove a domain's association with an IP domain tag under a parent domain in SecurityScorecard. Returns an empty 204 response on success. Required: tag_id, parent_domain, domain.
list_all_securityscorecard_parent_domain_ips
List IP addresses associated with a parent domain in SecurityScorecard, including their related tags. Returns: ip, parent_domain. Required: parent_domain.
create_a_securityscorecard_parent_domain_ip
Associate a tag with an IP address under a parent domain in SecurityScorecard. Returns: ip, parent_domain. Required: tag_id, parent_domain, ip.
securityscorecard_parent_domain_ips_search
Search for IP addresses associated with a parent domain in SecurityScorecard. Returns: ip, parent_domain. Required: parent_domain.
securityscorecard_parent_domain_ips_bulk_delete
Remove a tag association from an IP address under a parent domain in SecurityScorecard. Returns an empty 204 response on success. Required: tag_id, parent_domain, ip.
create_a_securityscorecard_ip_domain_tag_group
Create an IP domain tag group association in SecurityScorecard by linking a tag group to an IP domain tag. Returns an empty 204 response on success. Required: tag_id, tag_group_id.
delete_a_securityscorecard_ip_domain_tag_group_by_id
Delete an IP domain tag group association in SecurityScorecard by removing a tag group from an IP domain tag. Returns an empty 204 response on success. Required: tag_id, id.
create_a_securityscorecard_companies_bulk_search
Initiate a bulk search for SecurityScorecard company scorecards by submitting a list of domains. Returns an array of scorecards including name, domain, grade, score, industry, and scorecard_identifier. Required: domains.
list_all_securityscorecard_companies
Get a company's scorecard summary from SecurityScorecard by scorecard identifier. Returns: id, name, grade, score, industry. Required: scorecard_identifier. The company must be added to a portfolio before its scorecard can be accessed.
list_all_securityscorecard_companie_expanded_risks
List expanded risk entries for a SecurityScorecard company scorecard. Returns a collection of expanded risk entries for the specified scorecard. Required: scorecard_identifier.
list_all_securityscorecard_companie_factors
List SecurityScorecard factor scores and issue counts for a company scorecard. Returns each factor's name, score, and issue_count. Required: scorecard_identifier. The company must be added to a portfolio before factor-level data is accessible.
list_all_securityscorecard_factors_scores
List SecurityScorecard company factor score history for up to the last 12 months. Returns entries with date, name, score, grade, and issue_count per factor. Required: scorecard_identifier.
list_all_securityscorecard_history_scores
List a company's historical SecurityScorecard scores over time. Returns each dated entry with domain, date, and score. Use timing to control granularity and from/to to bound the range. Required: scorecard_identifier.
list_all_securityscorecard_score_plans_by_targets
Get a score plan for a SecurityScorecard company scorecard by specifying a target score. Returns a list of score plan entries describing actions needed to reach the target score. Required: domain, score.
list_all_securityscorecard_companie_summary_factors
List SecurityScorecard summary factors for a company by scorecard identifier. Returns: name, score, grade, issues. Required: scorecard_identifier. Company must be added to a portfolio first to access factor-level data.
list_all_securityscorecard_industrie_factors
List SecurityScorecard industry factors with scores and issue counts for a given industry. Returns: name, score, issue_count. Required: industry.
list_all_securityscorecard_history_factors
List historical SecurityScorecard factor scores for an industry over a date range within the last 12 months. Returns: date, name, score, grade, issues_count. Required: industry.
list_all_securityscorecard_industrie_scores
List SecurityScorecard industry scores for a specified industry. Returns: score, grade. Required: industry.
list_all_securityscorecard_history_events
List scorecard event log entries for a company in SecurityScorecard. Events explain score changes and act as a news feed of scorecard updates including new issues, issues getting resolved, and reported breaches. Returns: id, attributes. Required: scorecard_identifier. History data is available for the last 12 months only.
list_all_securityscorecard_events_breaches
List breach events from a company's scorecard event log in SecurityScorecard. Events explain score changes and serve as a news feed of scorecard updates including reported breaches. Returns: date, description. Required: domain.
list_all_securityscorecard_companie_issue_contexts
List issue context entries for a SecurityScorecard company scorecard by domain and issue type. Returns a paginated collection of issue context entries for the specified company and issue type. Required: domain, issue_type.
list_all_issues_active_cve_exploitation_attempteds
List active CVE exploitation attempted issues from a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, cve. Required: scorecard_identifier, effective_date. Company must be added to a portfolio first.
list_all_securityscorecard_issues_adware_installations
List historical "adware_installation" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, malware_type, malware_family, malware_detection_methods, src_ip, connection_attributes, connection_attributes_stamped, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_adware_installation_trails
List adware installation trail issue entries for a SecurityScorecard scorecard at a specific effective date in the scorecard's history. Returns a paginated list of adware installation trail issue entries for that scorecard event. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_alleged_breach_incidents
List alleged breach incident issues recorded in a SecurityScorecard company's scorecard event history for a specific effective date. Returns a paginated collection of breach incident entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_attack_detecteds
List attack-detected issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns a collection of attack-detected issue entries (each with an id). Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_attempted_information_leaks
List attempted information leak issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_bitcoin_servers
List SecurityScorecard bitcoin_server issue entries from a company's scorecard history for a specific effective date. Returns: severity, issue_type, count. Required: scorecard_identifier, effective_date.
list_all_issues_browser_logs_contain_debug_messages
List browser_logs_contain_debug_message issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_cdn_hostings
List CDN hosting issues from a SecurityScorecard company scorecard's event history at a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_cobalt_strike_c_2_detecteds
List SecurityScorecard cobalt_strike_c2_detected issue events for a scorecard on a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_cobalt_strike_c_2_services
List SecurityScorecard cobalt strike C2 service issue findings for a specific effective date in a company's scorecard event log history. Returns: issue entries including severity, status, and first_seen/last_seen timestamps. Required: scorecard_identifier, effective_date.
list_all_issues_communication_server_with_expired_certs
List communication server with expired certificate issue findings for a SecurityScorecard company scorecard on a specific effective date from the scorecard event history. Returns: severity. Required: scorecard_identifier, effective_date.
issues_communication_with_server_certificate_issued_by_blacklist
List SecurityScorecard 'communication with server certificate issued by blacklisted country' issue findings for a scorecard at a specific effective date in its history. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_issues_compromised_by_information_stealers
List SecurityScorecard issues where credentials or data were compromised by an information stealer for a company's scorecard on a specific effective date. Returns a paginated list of compromised-by-information-stealer issue entries. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_compromised_credentials_founds
List compromised credentials found issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_confirmed_first_party_breaches
List confirmed first-party breach issues for a SecurityScorecard company scorecard on a specific effective date, as recorded in the scorecard event log. Returns a list of confirmed first-party breach issue entries. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_confirmed_third_party_breaches
List confirmed third-party breach issue records from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_contact_information_detecteds
List contact information detected issues for a specific SecurityScorecard scorecard event on a given effective date. Returns entries of contact information detected issue findings from the scorecard event history. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_cookie_missing_http_onlies
List historical "cookie_missing_http_only" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, hostname, url, cookie_name, raw_cookie, observations, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_issues_cookie_missing_secure_attributes
List historical "cookie_missing_secure_attribute" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, hostname, url, cookie_name, raw_cookie, observations, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_csp_no_policy_v_2_s
List historical "csp_no_policy_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_csp_too_broad_v_2_s
List CSP 'too broad' v2 issues from a SecurityScorecard company's scorecard history event for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_csp_unsafe_policy_v_2_s
List CSP unsafe policy v2 issues for a SecurityScorecard scorecard at a specific effective date in the event history. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_cve_in_use_by_threat_actors
List CVE-in-use-by-threat-actor issue findings from a SecurityScorecard company scorecard's history events on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_data_leak_detecteds
List data leak detected issue events from a SecurityScorecard company's scorecard history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_dkim_insufficient_key_lengths
List DKIM insufficient key length issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard data is available.
list_all_securityscorecard_issues_dkim_record_detecteds
List DKIM record detected issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_dkim_weak_signatures
List DKIM weak signature issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns a list of issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_dmarc_contains_nones
List DMARC 'contains none' issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_dmarc_record_missings
List DMARC record missing issue entries from a SecurityScorecard scorecard's history event log for a specific effective date. Returns: domain, severity. Required: scorecard_identifier, effective_date. Score history is available for the last 12 months.
list_all_securityscorecard_issues_domain_missing_https_v_2_s
List historical "domain_missing_https_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_dos_attack_attempt_detecteds
List DoS attack attempt detected issue events from a SecurityScorecard scorecard's event history on a specific effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_exploit_attempt_detecteds
List exploit attempt detected issue findings from a SecurityScorecard company scorecard's history events for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_exploited_products
List exploited product issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: severity, issue_type, count. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_exposed_cisco_web_uis
List historical "exposed_cisco_web_ui" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_issues_exposed_embedded_iot_web_servers
List historical "exposed_embedded_iot_web_server" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_exposed_mac_airport_devices
List exposed Mac Airport device issue findings from a SecurityScorecard scorecard's historical event for a given effective date. Returns a paginated list of issue entries including id and finding details. Required: scorecard_identifier, effective_date.
list_all_issues_exposed_network_attached_storage_devices
List exposed network-attached storage device issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns a list of issue entries documenting exposed network-attached storage devices detected on the company's scorecard at that point in time. Required: scorecard_identifier, effective_date. The company must be added to a portfolio first; history is available for…
list_all_issues_exposed_personal_information_infos
List exposed personal information info issues for a SecurityScorecard company scorecard event on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_exposed_printers
List exposed printer issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns a list of exposed printer issue entries. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard data is available.
list_all_securityscorecard_issues_fail_to_load_page_components
List SecurityScorecard fail-to-load page components issue findings for a company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_general_scan_detecteds
List general scan detected issues for a specific event in a SecurityScorecard company's scorecard history. Returns: id, issue_type, severity, count. Required: scorecard_identifier, effective_date.
list_all_issues_historical_compromised_credentials_founds
List historical compromised credentials found issues for a SecurityScorecard company scorecard on a specific effective date. Returns entries with compromised credential finding records whose fields are specific to the SecurityScorecard issue type, including id and attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_hosted_on_object_storage_v_2_s
List issues hosted on object storage v2 from a SecurityScorecard company's scorecard event history at a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_hsts_incorrect_v_2_s
List HSTS incorrect v2 issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_industrial_control_devices
List industrial control device issues from a SecurityScorecard company's scorecard history event log for a specific effective date. Returns issue entries including severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_infected_by_targeted_attacks
List SecurityScorecard 'infected by targeted attack' issues from a company's scorecard event history for a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_insecure_ftps
List insecure FTP issue findings from a SecurityScorecard scorecard's event history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_issues_insecure_https_redirect_pattern_v_2_s
List insecure HTTPS redirect pattern v2 issue findings for a specific SecurityScorecard company scorecard event on a given effective date. Returns a paginated collection of issue finding entries, each including its id. Required: scorecard_identifier, effective_date.
list_all_issues_insecure_server_certificate_key_sizes
List insecure server certificate key size issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: entries. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_insecure_telnets
List insecure telnet issue findings from a SecurityScorecard company scorecard's history event on a specific effective date. Returns entries with id, severity, and status for each insecure telnet finding. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_iot_cameras
List IoT camera issue findings from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_issues_ip_black_list_due_malicious_activities
List IP black list issues due to malicious activity from a SecurityScorecard scorecard's event history for a specific effective date. Returns a paginated collection of issue entries including id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_java_debuggers
List Java debugger issues for a SecurityScorecard company scorecard's history events on a specific effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
list_all_issues_known_compromised_or_hostile_hosts
List known compromised or hostile host issue findings for a SecurityScorecard company on a specific event-log date. Returns: entry_id, severity, domain, discovered_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_leaked_credentials_infos
List leaked credentials information issues for a SecurityScorecard company scorecard history event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_links_to_insecure_websites
List links to insecure website issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_local_file_path_exposed_via_url_schemes
List SecurityScorecard issue findings of type 'local_file_path_exposed_via_url_scheme' from a company's scorecard event history for a specific effective date. Returns a paginated collection of issue finding entries extracted from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_mail_server_unusual_ports
List mail server unusual port issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns a collection of issue entries representing findings recorded on that date. Required: scorecard_identifier, effective_date.
list_all_issues_malicious_botnet_c_and_c_server_detecteds
List malicious botnet C&C server detected issue entries from a SecurityScorecard company's scorecard event history for a specific effective date. Returns a collection of issue records associated with detected malicious botnet command-and-control servers. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_malicious_scan_detecteds
List malicious scan detected issues for a SecurityScorecard scorecard's historical event at a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_issues_malicious_tor_exit_node_detecteds
List malicious Tor exit node detected issue findings for a SecurityScorecard scorecard at a specific effective date in its scorecard history. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_issues_malicious_tor_relay_router_node_detecteds
List historical "malicious_tor_relay_router_node_detected" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, ip, port, country_city, protocol, app_proto, affected_product, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_malicious_user_agent_detecteds
List malicious user agent detected issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id, created_at. Required: scorecard_identifier, effective_date. Score history is available for any date range within the last 12 months.
list_all_securityscorecard_issues_malware_detecteds
List malware detected issues recorded at a specific event date in a SecurityScorecard company's scorecard history. Returns entries of malware detection issue records, each with id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_malware_infections
List malware infection issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: entries with family, count, and scan_date for each detected malware infection. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_malware_infection_trails
List malware infection trail issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_issues_microsoft_exchange_0_day_vulnerabilities
List Microsoft Exchange 0-day vulnerability issues from a SecurityScorecard company scorecard's history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_microsoft_exchange_http_api_vulnerabilities
List historical "microsoft_exchange_http_api_vulnerability" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_minecraft_servers
List SecurityScorecard minecraft_server issue findings for a specific scorecard on a given effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_mirai_botnet_traffic_detecteds
List SecurityScorecard mirai botnet traffic detected issue findings from a scorecard's history events on a specific effective date. Returns entries describing each detected mirai botnet traffic issue from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_mysql_server_empty_passwords
List MySQL server empty password issue events from a SecurityScorecard company scorecard's history for a specific effective date. Returns issue event entries from the scorecard event log that explain score changes such as new issues and resolved issues. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_open_ports
List open port issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns entries describing exposed open ports with their port number, service, and host details. Required: scorecard_identifier, effective_date.
list_all_issues_openssl_critical_vulnerabilities
List historical OpenSSL critical vulnerability issue events from a SecurityScorecard company scorecard's event log at a specific effective date. Events in the event log explain score changes and work as a news feed of scorecard updates such as new issues, issues getting resolved, and reported breaches. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_outdated_browsers
List outdated browser issues for a SecurityScorecard company scorecard on a specific effective date from the scorecard's history events. Returns: entries with severity, scorecard_date, and last_seen. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_outdated_os
List outdated operating system issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns entries of outdated OS issue findings for the company. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_analysis_highs
List patching analysis high issues from a SecurityScorecard scorecard's event history for a given effective date. Returns a collection of issue entries. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_analysis_lows
List historical "patching_analysis_low" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, issue_count, resolved_issues, resolved_perc, time_to_patch_avg, range060, range61120, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_analysis_mediums
List patching analysis medium-severity issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_cadence_highs
List patching cadence high severity issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns issue entries with their id and issue-specific attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_cadence_lows
List patching cadence low issue events from a SecurityScorecard company's scorecard history for a given effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_cadence_mediums
List patching cadence medium issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_cadence_v_3_criticals
List patching cadence v3 critical issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard history data is accessible.
list_all_securityscorecard_issues_patching_cadence_v_3_highs
List high-severity patching cadence v3 issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_cadence_v_3_lows
List patching_cadence_v3_low issue events from a SecurityScorecard scorecard's history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_patching_cadence_v_3_mediums
List SecurityScorecard patching cadence v3 medium-severity issue findings from a scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_payment_providers
List payment provider issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns entries with issue severity, status, and domain. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_potentially_vulnerables
List potentially vulnerable issues recorded at a specific effective date in a SecurityScorecard scorecard's history event log. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cisco_rv_320_325_s
List potentially vulnerable Cisco RV 320/325 issue findings from a SecurityScorecard scorecard's historical events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_33246_s
List potentially vulnerable CVE-2023-33246 issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_34362_s
List potentially vulnerable CVE-2023-34362 issues from a SecurityScorecard scorecard's event history at a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_3519_s
List potentially vulnerable CVE-2023-3519 issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_37582_s
List potentially vulnerable CVE-2023-37582 issue entries from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_37979_s
List potentially vulnerable CVE-2023-37979 issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_38035_s
List historical "potentially_vulnerable_cve_2023_38035" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_46747_s
List potentially vulnerable CVE-2023-46747 issues from a SecurityScorecard company's scorecard history events on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2024_21887_s
List potentially vulnerable CVE-2024-21887 issues from a SecurityScorecard scorecard's history events on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2024_46805_s
List potentially vulnerable CVE-2024-46805 issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_issues_product_exploited_by_ransomware_actors
List SecurityScorecard issues of type product_exploited_by_ransomware_actors for a specific scorecard's historical event on a given effective date. Returns a list of issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_issues_product_uses_vulnerable_log_4_js
List 'product_uses_vulnerable_log4j' issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_pva_installations
List PVA installation issues for a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. Max 50 items per page.
list_all_securityscorecard_issues_pva_installation_trails
List PVA (Publicly Vulnerable Application) installation trail issues from a specific scorecard history event on a given effective date in SecurityScorecard. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_ransomware_associations
List ransomware association issues for a SecurityScorecard company's scorecard event on a given effective date. Returns ransomware association issue entries from the event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_ransomware_infections
List ransomware infection issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns paginated entries of ransomware infection issue records. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_ransomware_infection_trails
List SecurityScorecard ransomware infection trail issues for a company's scorecard event on a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_ransomware_victims
List ransomware victim issues for a SecurityScorecard company scorecard on a specific effective date. Returns ransomware victim entries from the scorecard's historical event log. Required: scorecard_identifier, effective_date.
list_all_issues_redirect_chain_contains_http_v_2_s
List redirect_chain_contains_http_v2 issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: issue entries including id and name. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_redirect_to_insecure_websites
List redirect-to-insecure-website issues from a SecurityScorecard company's event history on a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_references_object_storage_v_2_s
List SecurityScorecard issue references from object storage (v2) for a specific scorecard's history event on a given effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_remote_acceses
List remote access issues from a SecurityScorecard company scorecard's event history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. Scorecard history is available for the last 12 months and the company must be added to a portfolio first.
list_issues_sensitive_data_exposure_through_insecure_channels
List sensitive data exposure through insecure channel issue findings for a SecurityScorecard company scorecard at a specific point in its history. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_server_errors
List server error issues recorded on a specific event date in a SecurityScorecard company scorecard's history. Returns an array of issue entries from the scorecard event log for the given effective date. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_cassandras
List SecurityScorecard service_cassandra issues recorded in a specific scorecard's history event on a given effective date. Returns: entries with each issue's id, severity, and issue type. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_cloud_providers
List historical "service_cloud_provider" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_couchdbs
List SecurityScorecard service_couchdb issue entries from a company's scorecard event history for a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_dns
List service DNS issues from a SecurityScorecard company's scorecard event history on a specific effective date. Returns: entries with severity, issue type, and domain details for each DNS finding. Required: scorecard_identifier, effective_date. History is available within the last 12 months.
list_all_securityscorecard_issues_service_elasticsearches
List SecurityScorecard service_elasticsearch issue findings for a specific scorecard on a given effective date from the scorecard event history. Returns a paginated list of issue entries including id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_end_of_lifes
List service end of life issues for a SecurityScorecard company scorecard at a specific effective date in the scorecard's history events. Returns: id and severity for each service end of life issue finding. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_end_of_services
List service_end_of_service issue findings from a SecurityScorecard scorecard's history event log for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_ftps
List SecurityScorecard service_ftp issue findings for a company's scorecard on a specific effective date from the scorecard history event log. Returns: entries with domain, port, and severity for each service_ftp issue finding. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_http_proxies
List SecurityScorecard service_http_proxy issue findings from a scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_imaps
List historical "service_imap" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_ldaps
List service LDAP issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_ldap_anonymous
List SecurityScorecard service_ldap_anonymous issue findings for a specific scorecard event on a given effective date. Returns: entries with issue id, severity, and finding details. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_microsoft_sqls
List SecurityScorecard Microsoft SQL service issues for a company's scorecard history event on a specific effective date. Returns issue entries with severity, status, and service-related details. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_mongodbs
List SecurityScorecard MongoDB service issues recorded in a company's scorecard event history for a specific effective date. Returns: id, issue_type, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_mysqls
List MySQL service issues from a SecurityScorecard scorecard's event history on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_netbus_remote_acceses
List SecurityScorecard scorecard history event issues of type service_netbus_remote_access for a specific company and effective date. Returns a list of issue event entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_networkings
List service networking issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns entries with id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_open_vpns
List SecurityScorecard service open VPN issue findings recorded during a specific scorecard history event on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_oracle_dbs
List SecurityScorecard service_oracle_db issue findings for a company's scorecard history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_oracle_registries
List SecurityScorecard service oracle registry issue findings from a scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_pop_3_s
List SecurityScorecard POP3 service issues for a specific scorecard event on a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_postgresqls
List service_postgresql issues recorded in a SecurityScorecard company's scorecard history event log at a specific effective date. Returns entries of service_postgresql issue findings from that date's event snapshot. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_pptps
List SecurityScorecard service PPTP issues for a specific company scorecard event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_pulse_vpns
List SecurityScorecard service pulse VPN issues for a specific company scorecard on a given effective date, retrieved from the scorecard history events. Returns entries with severity, status, and issue count details. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_rdps
List SecurityScorecard service RDP issues from a company's scorecard event history for a given effective date. Returns a paginated list of service_rdp issue entries. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_redis
List service_redis issues from a SecurityScorecard company's scorecard event log history for a specific effective date. Returns issue entries including id, severity, and created_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_rsyncs
List service_rsync issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_smbs
List SecurityScorecard service_smb issues from a company scorecard's history events on a specific effective date. Returns issue entries from the scorecard event log showing service SMB issue changes for that date. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_soaps
List service SOAP issue entries from a SecurityScorecard company scorecard's history event log for a specific effective date. Returns an array of entries describing each service SOAP issue finding recorded in the event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_socks_proxies
List service SOCKS proxy issue findings from a SecurityScorecard company's scorecard event history at a given effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_telnets
List SecurityScorecard service telnet issues from a scorecard's event history for a specific effective date. Returns entries with domain, port, and severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_vncs
List service VNC issues from a SecurityScorecard company scorecard's historical event log for a given effective date. Returns a list of service VNC issue entries. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_vuln_host_highs
List high-severity service vulnerability host issues from a SecurityScorecard company's scorecard historical event log on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_vuln_host_lows
List low-severity service vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_vuln_host_mediums
List medium-severity service vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_issues_service_vuln_host_v_3_criticals
List critical service vulnerability host issues (service_vuln_host_v3_critical) from a SecurityScorecard company's scorecard history events on a specific effective date. Returns vulnerability issue entries for the specified scorecard and date. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_vuln_host_v_3_highs
List high-severity service vulnerability host issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_service_vuln_host_v_3_lows
List low-severity service vulnerability host issues (service_vuln_host_v3_low) for a SecurityScorecard company scorecard event on a specific effective date. Returns entries with domain, cve, and ip for each vulnerability finding. Required: scorecard_identifier, effective_date, domain.
list_all_securityscorecard_issues_service_vuln_host_v_3_mediums
List medium-severity service vulnerability host issues for a SecurityScorecard scorecard event on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_site_emits_browser_logs
List site_emits_browser_log issue findings from a SecurityScorecard company's scorecard event history for a specific effective date. Returns entries of issue findings from the event log. Required: scorecard_identifier, effective_date.
list_all_issues_site_requests_data_over_insecure_channels
List SecurityScorecard 'site_requests_data_over_insecure_channel' issue findings from a scorecard's event history for a specific effective date. Returns: domain, severity, first_observed, last_observed. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_spa_browsers
List SPA browser issues for a specific SecurityScorecard scorecard event on a given effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_spf_record_malformeds
List SPF record malformed issue events from a SecurityScorecard scorecard's event history for a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_spf_record_missings
List SecurityScorecard SPF record missing issue events from a company scorecard's history for a given effective date. Returns entries from the scorecard event log describing updates related to the spf_record_missing issue type, such as new issues and resolved issues. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_spf_record_softfails
List historical "spf_record_softfail" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, domain, record, analysis, analysis_description, reason, effective_date, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_spf_record_wildcards
List SPF record wildcard issue entries from a SecurityScorecard company scorecard's history event log for a specific effective date. The scorecard event log tracks scorecard updates such as new issues being detected and issues getting resolved. Returns a collection of SPF record wildcard issue entries from the event history. Required: scorecard_identifier, effective_date.
list_all_issues_sql_payload_using_tor_proxy_detecteds
List SecurityScorecard event log issues of type sql_payload_using_tor_proxy_detected for a company's scorecard on a specific effective date. Returns the event log entries describing detected SQL payload issues using Tor proxy for the given scorecard and date. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_ssh_weak_ciphers
List SSH weak cipher issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_ssh_weak_macs
List historical "ssh_weak_mac" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, banner, evidence, connection_attributes, reason, effective_date, group_status. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_ssh_weak_protocols
List SSH weak protocol issues from a SecurityScorecard scorecard's historical event log for a specific effective date. Returns an array of SSH weak protocol issue finding entries. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_subdomain_dmarc_contains_nones
List SecurityScorecard subdomain DMARC issue entries (subdomains with no DMARC record) from a scorecard's event log for a specific effective date. Returns: entries with id and subdomain DMARC issue details. Required: scorecard_identifier, effective_date.
list_all_issues_synth_high_risk_appsec_vulnerabilities
List synthetic high-risk application security vulnerability issues recorded in a SecurityScorecard scorecard's event history for a given effective date. Returns: vulnerability issue entries with id, severity, and count. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_synth_possible_initial_acceses
List SecurityScorecard synth_possible_initial_access issues for a specific scorecard event on an effective date. Returns an array of issue entries from the scorecard's event history. Required: scorecard_identifier, effective_date.
list_all_issues_targeted_by_threat_actor_groups
List SecurityScorecard scorecard issues targeted by threat actor groups for a specific effective date in the scorecard event history. Returns: id, issue_type, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_telephonies
List SecurityScorecard telephony issues for a company scorecard on a specific effective date from the scorecard history event log. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_issues_threat_actor_hosting_infrastructures
List threat actor hosting infrastructure issues for a SecurityScorecard company scorecard event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tls_ocsp_staplings
List TLS OCSP stapling issues from a SecurityScorecard scorecard's historical event on a specific effective date. Returns a collection of issue entries detailing the TLS OCSP stapling findings recorded for that event. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tls_weak_ciphers
List TLS weak cipher issues for a specific historical event on a SecurityScorecard company scorecard. Returns entries describing TLS weak cipher issue findings from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tls_weak_protocols
List TLS weak protocol issues from a SecurityScorecard company scorecard's event history at a specific effective date. Returns: domain, port, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tlscert_excessive_expirations
List historical "tlscert_excessive_expiration" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, target, observations, sha256_fingerprint, evidence, output, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tlscert_expireds
List TLS certificate expired issues for a SecurityScorecard scorecard at a specific effective date in the event history. Returns: severity, domain, port. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tlscert_no_revocations
List SecurityScorecard TLS certificate no-revocation issue entries from a company's scorecard event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tlscert_revokeds
List SecurityScorecard TLS certificate revocation issues from a scorecard's event-log history for a specific effective date. Returns a list of revoked TLS certificate issue entries from the scorecard's event history. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tlscert_self_signeds
List TLS self-signed certificate issue findings from a specific SecurityScorecard scorecard history event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tlscert_weak_signatures
List TLS certificate weak signature issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns entries with domain, port, and severity for each weak TLS certificate signature finding. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tor_servers
List SecurityScorecard tor_server issues recorded for a company's scorecard on a specific effective date from the scorecard event history. Returns entries with domain, severity, is_positive, first_seen, and last_seen. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_tor_traffic_detecteds
List Tor traffic detected issues for a SecurityScorecard company scorecard's history event on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_typosquats
List typosquat issue findings for a SecurityScorecard company scorecard on a specific event date in the scorecard's history. Returns a paginated list of typosquat issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_uces
List historical "uce" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, src_ip, sources, reason, effective_date, group_status. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_unsafe_sri_v_2_s
List historical "unsafe_sri_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_upnp_accessibles
List UPnP accessible SecurityScorecard issue findings for a specific scorecard event on a given effective date. Returns: severity, port, domain. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_uses_go_daddy_infrastructures
List GoDaddy infrastructure issues recorded in a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_uses_go_daddy_managed_wordpreses
List uses_go_daddy_managed_wordpress issue findings from a SecurityScorecard company's scorecard event history for a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_waf_detected_v_2_s
List historical "waf_detected_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_web_vuln_host_highs
List high-severity web vulnerability host issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns issue entries from the event log. Required: scorecard_identifier, effective_date. History is available within the last 12 months.
list_all_securityscorecard_issues_web_vuln_host_lows
List low-severity web vulnerability host issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: entries with domain, cve, and ip for each vulnerability host finding. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_web_vuln_host_mediums
List medium-severity web vulnerability host issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: domain, severity, count. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_web_vuln_host_v_3_criticals
List critical web vulnerability host issues (web_vuln_host_v3_critical) from a SecurityScorecard scorecard's event history for a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_web_vuln_host_v_3_highs
List high-severity web vulnerability host issues (web_vuln_host_v3_high) from a SecurityScorecard scorecard's history events on a specific effective date. Returns: id, domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_web_vuln_host_v_3_lows
List low-severity web vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date, domain.
list_all_securityscorecard_issues_web_vuln_host_v_3_mediums
List medium-severity web vulnerability host issues from a SecurityScorecard scorecard's event log history for a specific effective date. Returns entries of web vulnerability host findings from the scorecard event log. Required: scorecard_identifier, effective_date. Scorecard history is available for the last 12 months.
list_all_issues_webapp_vulnerable_to_spring_4_shells
List webapp vulnerable to Spring4Shell issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_website_copyright_expireds
List website copyright expired issues for a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_website_copyright_up_to_dates
List website copyright up to date issues for a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_websocket_receives_datas
List SecurityScorecard 'websocket receives data' issue events from a company's scorecard event history for a specific effective date. Returns: id, type, severity for each issue entry. Required: scorecard_identifier, effective_date.
list_all_issues_websocket_requests_contain_sensitive_fields
List SecurityScorecard historical issue findings of type 'websocket_requests_contain_sensitive_fields' for a company scorecard at a specific effective date. Returns a paginated list of entries with id. Required: scorecard_identifier, effective_date.
list_all_securityscorecard_issues_websocket_sends_datas
List SecurityScorecard websocket sends data issues for a specific scorecard event on a given effective date. Returns a paginated collection of issue entries from the scorecard's history event log. Required: scorecard_identifier, effective_date.
list_all_issues_x_content_type_options_incorrect_v_2_s
List SecurityScorecard x_content_type_options_incorrect_v2 issue findings from a company's scorecard history event on a specific effective date. Returns issue finding entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_issues_x_frame_options_incorrect_v_2_s
List X-Frame-Options incorrect issue findings from a SecurityScorecard company scorecard's history events for a given effective date. Returns a collection of issue entries associated with the x_frame_options_incorrect_v2 issue type. Required: scorecard_identifier, effective_date.
list_all_issues_x_xss_protection_incorrect_v_2_s
List SecurityScorecard X-XSS-Protection incorrect v2 issue findings for a specific scorecard history event on a given effective date. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
list_all_issues_xss_payload_using_tor_proxy_detecteds
List SecurityScorecard 'xss_payload_using_tor_proxy_detected' issue findings for a specific scorecard's history event on a given effective date. Returns a paginated collection of issue finding entries from the scorecard event log. Required: scorecard_identifier, effective_date. Company must be added to a portfolio before scorecard data is accessible.
create_a_securityscorecard_custom_scorecard
Create a custom scorecard in SecurityScorecard for a subsidiary or subset of a regular scorecard. Returns: id, attributes.
get_single_securityscorecard_custom_scorecard_by_id
Get a custom scorecard in SecurityScorecard by id. Returns: id, attributes. Required: id.
update_a_securityscorecard_custom_scorecard_by_id
Update a custom scorecard in SecurityScorecard by id. Returns: id, attributes. Required: id.
delete_a_securityscorecard_custom_scorecard_by_id
Delete a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
securityscorecard_custom_scorecard_filters_bulk_update
Update the filter configuration for a SecurityScorecard custom scorecard. Returns: id. Required: id.
securityscorecard_custom_scorecard_filters_bulk_delete
Delete the filter configuration for a SecurityScorecard custom scorecard. Returns an empty 204 response on success. Required: id.
securityscorecard_custom_scorecard_sources_bulk_update
Update the sources of a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
securityscorecard_custom_scorecard_sources_bulk_delete
Delete the sources of a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
list_all_securityscorecard_compliance_frameworks
List compliance frameworks available in SecurityScorecard. Returns: id.
get_single_securityscorecard_compliance_framework_by_id
Get a single compliance framework in SecurityScorecard by id. Returns: id. Required: id.
get_single_securityscorecard_vendor_detection_portfolio_by_id
Get a single SecurityScorecard portfolio by its id. Returns: id, name, description, privacy. Required: id.
list_all_securityscorecard_vendor_detection_fourth_parties
List fourth-party vendors detected by SecurityScorecard's vendor detection for a given domain. Returns: domain. Required: domain.
list_all_securityscorecard_vendor_detection_products
List vendor detection products detected on a domain in SecurityScorecard. Returns: id, name. Required: domain.
list_all_securityscorecard_vendor_detection_risks
List vendor detection risks for a domain in SecurityScorecard. Returns a paginated list of risk entries from the vendor detection analysis for the specified domain. Required: domain.
list_all_securityscorecard_vendor_detection_third_parties
List third-party vendors and technologies detected on a domain via SecurityScorecard's Attack Surface Intelligence. Returns a paginated collection of detected third-party entries. Required: domain.
create_a_securityscorecard_csv_export
Create a compliance CSV export report in SecurityScorecard. Returns: report_url, status. The report is generated asynchronously; use the returned report_url to download the CSV file once the status indicates completion.
create_a_securityscorecard_reports_detailed
Generate a detailed SecurityScorecard report asynchronously. Returns: report_url, status. The report is processed in the background and can be downloaded from the returned report_url once complete. Subject to a stricter per-endpoint rate limit; avoid high-frequency automated calls.
create_a_securityscorecard_reports_events_json
Generate a SecurityScorecard scorecard events report as JSON for asynchronous download. Returns: report_url, status. The report is processed asynchronously and can be downloaded from the returned report_url once complete.
list_all_securityscorecard_reports_files
List SecurityScorecard report files at a given file path. Returns: id, name, report_url, status. Required: file_path.
create_a_securityscorecard_reports_footprint_domain
Generate a footprint domains report in SecurityScorecard. Returns: report_url, status. The report is processed asynchronously; once complete, download the generated file from the returned report_url.
create_a_securityscorecard_reports_footprint_ip
Generate a SecurityScorecard footprint IPs report asynchronously. Returns: report_url, status. The report_url can be used to download the generated file once processing completes.
create_a_securityscorecard_reports_full_scorecard_json
Generate a full scorecard JSON report in SecurityScorecard. The report is produced asynchronously. Returns: report_url, status. Once the status indicates completion, download the report from the report_url.
create_a_securityscorecard_reports_issue
Generate an issues report in SecurityScorecard. Returns: report_url, status. The report is processed asynchronously — download the file from the returned report_url once generation completes.
create_a_securityscorecard_reports_partnership
Create a partnership report in SecurityScorecard. Returns: report_url, status. The report is generated asynchronously — download it from report_url once complete.
create_a_securityscorecard_reports_portfolio
Generate a portfolio report in SecurityScorecard. The report is processed asynchronously and can be downloaded from the returned URL once complete. Returns: report_url, status.
list_all_securityscorecard_reports_recents
List recently generated SecurityScorecard reports. Returns: report_url, status. Each entry includes a download URL for the generated report file (e.g. csv, pdf) and its current processing status.
create_a_securityscorecard_reports_scorecard_footprint
Generate a Scorecard Footprint report for a company, describing the digital footprint attributed to its scorecard. Returns the generated report id, which is then used to poll for and download the finished file. Optionally scope the report by ips, subdomains, or countries, and choose pdf or csv output. Required: scorecard_identifier.
create_a_securityscorecard_reports_summary
Generate a Company Summary report for a company's SecurityScorecard scorecard. Returns the generated report id, which is then used to poll for and download the finished file. Optionally set branding when white-labeling is enabled for your account. Required: scorecard_identifier.
create_a_securityscorecard_invitation
Create an invitation in SecurityScorecard to invite a company to access and improve their own scorecard. All invited companies gain a free account. Returns: id, domain, created_at. Required: domain.
create_a_securityscorecard_issue_feedback_validation_request
Submit a feedback validation request for a specific issue type on a SecurityScorecard company scorecard. Returns a confirmation of the validation request submission. Required: domain, type.
create_a_securityscorecard_issue_feedback
Submit feedback to refute an issue of a specific type on a company's SecurityScorecard scorecard. Returns a confirmation of the submitted feedback. Required: domain, type.
list_all_securityscorecard_metadata_factors
List all available SecurityScorecard factor types and their metadata. Returns: id, name.
list_all_securityscorecard_metadata_issue_types
List all SecurityScorecard issue types. Returns: id, name.
get_single_securityscorecard_metadata_issue_type_by_id
Get a single SecurityScorecard issue type by id. Returns: id, name. Required: id.
list_all_securityscorecard_notifications_recents
List recent SecurityScorecard notifications for a user by username, generated from configured scorecard alert triggers. Returns notification entries including id. Required: username.
list_all_securityscorecard_metadata_service_providers
List SAML service provider metadata entries in SecurityScorecard. Returns: id, name.
list_all_securityscorecard_jiras
Validate Jira secrets configured in SecurityScorecard by calling the validate-jira-secrets action endpoint. Returns a validation result object whose fields are not documented in the upstream SecurityScorecard API reference.
list_all_securityscorecard_apps_jira_legacies
Validate Jira secrets for the Jira Legacy app integration in SecurityScorecard. This GET action endpoint checks whether the configured Jira credentials are valid. Returns an empty 204 response on success.
list_all_securityscorecard_jira_legacy_installs
List SecurityScorecard Jira Legacy app installations. Returns: id, created_at, updated_at. Max 50 items per page.
create_a_securityscorecard_jira_legacy_install
Install or configure the SecurityScorecard Jira Legacy app integration. Returns: id, created_at, updated_at.
list_all_securityscorecard_jira_legacy_installation_errors
List Jira legacy app installation errors in SecurityScorecard. Returns a paginated collection of error entries, each containing id and name. Max 50 items per page.
list_all_securityscorecard_jira_legacy_redirect_from_sscs
List Jira legacy redirect entries from SecurityScorecard. Returns: id, name. No required parameters.
list_all_securityscorecard_jira_installs
List Jira app installations in SecurityScorecard. Returns a paginated collection of install records. Returns: id.
create_a_securityscorecard_jira_install
Install a Jira app integration in SecurityScorecard. Returns the created install record. Returns: id.
list_all_securityscorecard_jira_installation_errors
List Jira installation errors recorded in SecurityScorecard. Returns a paginated collection of installation error records identified by id.
list_all_securityscorecard_jira_redirect_from_sscs
List Jira redirect-from-SSC entries in SecurityScorecard. The upstream API reference does not document the response shape for this endpoint; entries are returned under the standard `entries` pagination envelope. Returns: id, attributes.
list_all_securityscorecard_apps_jiras
List Jira app assets by asset filename in SecurityScorecard. Returns: id, name. Required: asset_filename.
create_a_securityscorecard_app_job
Create a new job for a SecurityScorecard app. Returns: id, created_at, updated_at. Required: app_id.
update_a_securityscorecard_app_job_by_id
Update a SecurityScorecard app job by id. Returns: id, created_at, updated_at. Required: app_id, id.
list_all_securityscorecard_audits_api_logs
List SecurityScorecard API audit log entries. Returns: id, created_at, updated_at. The full field set of each audit log entry is not enumerated in the available SecurityScorecard API documentation.
list_all_securityscorecard_companie_active_issues
List a company's currently active issues on its SecurityScorecard scorecard, grouped by issue type. Returns issue_types, each with name, issues, and issues_count. Optionally filter with issue_types. Required: scorecard_identifier.
get_single_securityscorecard_domain_migration_statuses_id_by_id
Get a domain migration status by id in SecurityScorecard. Returns the domain migration status record for the specified identifier. Required: id.
list_all_securityscorecard_targets
List domain migration statuses between a source and target domain in SecurityScorecard. Returns: source, target, status. Required: source, target.
securityscorecard_footprint_tags_bulk_create
Bulk create tags for SecurityScorecard footprint scorecards by submitting a JSON array of tag objects. Returns the created tags including their id and name. Required: a JSON array of tag objects, each with a name.
list_all_securityscorecard_assets_domains
List domain assets discovered within a SecurityScorecard footprint for a given parent domain. Returns: id. Required: parent_domain.
list_all_securityscorecard_assets_ips
List IP address assets discovered in the SecurityScorecard footprint for a given parent domain. Returns a paginated collection of IP entries from the domain's attack surface. Required: parent_domain.
create_a_securityscorecard_assignees_domain
Create a domain assignee for a SecurityScorecard footprint by parent domain. Returns an empty 204 response on success. Required: parent_domain.
create_a_securityscorecard_assignees_ip
Create an IP assignee for a SecurityScorecard footprint identified by its parent domain. Returns: ip, parent_domain, created_at. Required: parent_domain, ip.
list_all_securityscorecard_assignee_assets
List assignee assets for a given parent domain and asset type in SecurityScorecard's footprint. Returns: id, name. Required: parent_domain, asset_type.
list_all_securityscorecard_attribution_logs
List attribution log entries for a SecurityScorecard footprint by parent domain. Returns: id, created_at, updated_at. Required: parent_domain.
securityscorecard_domain_associate_tags_bulk_create
Bulk associate tags with a domain's assets in SecurityScorecard's footprint. Returns an empty 204 response on success. Required: parent_domain.
securityscorecard_ip_associate_tags_bulk_create
Bulk associate tags with IPs for a parent domain footprint in SecurityScorecard. Returns an empty 204 response on success. Required: parent_domain.
list_all_securityscorecard_intake_vendor_forms
List current intake vendor forms in SecurityScorecard. Returns: id, attributes. No required parameters.
list_all_securityscorecard_forms_access_domains
List access domains for the current SecurityScorecard intake vendor form. Returns: id, name.
securityscorecard_forms_access_domains_bulk_update
Update the access domains for the current SecurityScorecard intake vendor form by replacing the existing set. Returns: id, name. Required: entries.
list_all_securityscorecard_forms_publish_status
List the current publish status of intake vendor forms in SecurityScorecard. Returns a paginated collection of publish status entries. The upstream response is paginated with a maximum of 50 items per page.
create_a_securityscorecard_forms_question
Create a new question on the current SecurityScorecard intake vendor form. Returns the created question object including its id.
update_a_securityscorecard_forms_question_by_id
Update an existing question on the current SecurityScorecard intake vendor form by id. Returns the updated question object including its id. Required: id.
delete_a_securityscorecard_forms_question_by_id
Delete a question from the current SecurityScorecard intake vendor form by id. Returns an empty 204 response on success. Required: id.
securityscorecard_forms_questions_reorders_bulk_update
Reorder questions on the current SecurityScorecard intake vendor form by submitting an ordered list of question IDs reflecting the desired new sequence. Returns an empty 204 response on success. Required: a JSON array of question IDs in the new order.
list_all_securityscorecard_forms_risk_settings
List current risk settings for intake vendor forms in SecurityScorecard. Returns a paginated collection of risk setting entries via the entries array, each containing id and name. Max 50 items per page.
securityscorecard_forms_risk_settings_bulk_update
Update current risk settings for intake vendor forms in SecurityScorecard. Returns: id, name. Required: entries.
create_a_securityscorecard_forms_status
Update the status of the current vendor intake form in SecurityScorecard. Returns an empty 204 response on success.
create_a_securityscorecard_forms_setup
Create a forms setup in SecurityScorecard by submitting a POST request to the intake-vendor forms setup endpoint. The response shape is not documented in the available SecurityScorecard API reference; treat the returned body as opaque. No required caller-supplied parameters are documented beyond the request body.
list_all_securityscorecard_intake_vendor_review_items
List intake vendor review items in SecurityScorecard. Returns: id, name.
list_all_securityscorecard_intake_vendor_risk_tier_templates
List risk tier templates for vendor intake in SecurityScorecard. Returns a collection of risk tier template records from the entries array.
securityscorecard_intake_vendor_risk_tier_templates_bulk_update
Update intake vendor risk tier templates in SecurityScorecard by submitting a JSON request body. Returns the updated risk tier template object including its id, name, and tier configuration.
get_single_securityscorecard_intake_vendor_submission_by_id
Get a specific SecurityScorecard intake vendor submission by id. Returns the submission object with content-type-specific fields including id and attributes. Required: id.
update_a_securityscorecard_intake_vendor_submission_by_id
Update a SecurityScorecard intake vendor submission by id with partial data. Returns the updated submission object with content-type-specific fields including id and attributes. Required: id.
list_all_securityscorecard_jira_leen_installs
List SecurityScorecard Jira Leen installs. Returns install records including id and additional attributes whose individual fields are not enumerated in the upstream API documentation. Max 50 items per page.
list_all_securityscorecard_jira_leen_installation_errors
List Jira Leen installation errors in SecurityScorecard. Returns: id, name. Max 50 items per page.
list_all_securityscorecard_jira_leen_redirect_from_sscs
List redirect entries from SecurityScorecard for the Jira Leen integration. Returns: id.
list_all_securityscorecard_leen_callbacks
List leen callbacks in SecurityScorecard filtered by app, organization, and status. Returns a paginated collection of callback entries with id and name. Required: app_id, organization_id, status.
delete_a_securityscorecard_managed_services_customer_by_id
Delete a managed services customer in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
list_all_securityscorecard_managed_services_customers
List managed services customers in SecurityScorecard. Returns: id, created_at, updated_at.
get_single_securityscorecard_managed_services_document_by_id
Get a specific managed services document in SecurityScorecard by id. Returns: id, created_at, updated_at. Required: id.
securityscorecard_managed_services_documents_bulk_delete
Delete managed services documents in SecurityScorecard. Returns an empty 204 response on success.
get_single_securityscorecard_documents_download_by_id
Download a managed services document in SecurityScorecard by id. Returns: report_url, status. Required: id.
create_a_securityscorecard_documents_upload
Upload a document to SecurityScorecard managed services via POST. Returns: id, created_at, updated_at.
securityscorecard_documents_uploads_bulk_update
Update an uploaded document in SecurityScorecard managed services via PUT. Returns: id, created_at, updated_at.
get_managed_services_managed_customer_by_id
Get a SecurityScorecard managed customer by id. Returns the managed customer record including its id and other customer attributes. Required: id.
securityscorecard_reports_likelihood_assessments_bulk_update
Update a SecurityScorecard likelihood assessment report. Returns: report_url, status. Required: report_url, status.
securityscorecard_reports_likelihood_assessments_bulk_delete
Delete a SecurityScorecard likelihood assessment report. Returns: report_url, status. Required: report_url.
securityscorecard_reports_remediation_plans_bulk_update
Update a remediation plan report in SecurityScorecard by submitting a report URL and status. Returns: report_url, status. Required: report_url, status.
list_all_securityscorecard_max_breaches
List breach entries from the SecurityScorecard Max platform. Returns: id, name. The response is paginated; the upstream API wraps results in an entries array.
securityscorecard_max_breaches_bulk_update
Update SecurityScorecard breach partner findings via the Max platform. Returns: report_url, status.
get_single_securityscorecard_breaches_report_by_id
Get a SecurityScorecard breach report by id. Returns: report_url, status. Required: id.
list_all_securityscorecard_customer_breaches
List customer breach records from SecurityScorecard. Returns a paginated collection of breach entries. No required parameters.
list_all_securityscorecard_customer_executive_summaries
List customer executive summaries from SecurityScorecard's MAX platform. Returns the executive summary object with content-type-specific fields; the available fields depend on the upstream MAX schema and are not individually documented in the public API reference. Entries are paginated.
securityscorecard_customer_executive_summaries_bulk_update
Update a customer's executive summary in SecurityScorecard's MAX platform. Returns: id, attributes. Required: customer_id.
list_all_securityscorecard_customer_findings
List customer security findings from SecurityScorecard's MAX platform. Returns a paginated list of finding entries, each including its id. Max 50 entries per page.
list_all_securityscorecard_customer_historical_scores
List historical SecurityScorecard scores for a customer scorecard over a date range within the last 12 months. Returns: score, grade, date. Required: scorecard_identifier. Optional timing granularity (daily, weekly, or monthly) defaults to daily.
list_all_customer_incident_likelihood_over_times
List SecurityScorecard Max customer incident-likelihood time-series entries. Returns: date, likelihood. The response is paginated via the standard entries wrapper.
list_all_securityscorecard_customer_incident_likelihood_trends
List SecurityScorecard customer incident likelihood trends over time. Returns: date, likelihood.
list_all_securityscorecard_customer_likelihood_assessments
List customer likelihood assessments in SecurityScorecard. Returns: id, attributes. The response field set for each assessment record is not documented in the available API reference; consult the SecurityScorecard MAX API docs for the field-level breakdown.
get_customer_likelihood_assessment_by_id
Get a specific SecurityScorecard customer likelihood assessment by id. Returns the likelihood assessment object including its id. Required: id.
list_all_securityscorecard_raw_findings_daily_avgs
List daily-average raw findings for a customer in SecurityScorecard. Returns a paginated collection of entries, each representing a daily-average raw finding record. No required parameters.
list_all_securityscorecard_raw_findings_daily_counts
List daily counts of raw findings in SecurityScorecard. Returns: date, count.
list_all_securityscorecard_customer_remediation_plans
List customer remediation plans in SecurityScorecard. Returns a paginated collection where each entry includes: id.
get_single_securityscorecard_customer_remediation_plan_by_id
Get a single customer remediation plan in SecurityScorecard by id. Returns: id. Required: id.
list_all_securityscorecard_reports_downloads
List SecurityScorecard customer report download entries. Returns: report_url, status. Once a report's status indicates completion, use the report_url to download the generated file (e.g. CSV, PDF).
list_all_securityscorecard_reports_vendors
List SecurityScorecard vendor reports. Returns: report_url, status. No required parameters.
list_all_securityscorecard_customer_tags_counts
List customer tags counts in SecurityScorecard. Returns a paginated collection of tag count entries extracted from the entries array. No required parameters.
list_all_securityscorecard_customer_vendors
List customer vendors in SecurityScorecard. Returns a paginated collection of vendor records via the entries array. Returns: id, name.
get_single_securityscorecard_customer_vendor_by_id
Get a single customer vendor by id in SecurityScorecard. Returns: id, name. Required: id.
list_all_securityscorecard_customer_vendors_improvements
List vendor score improvements in SecurityScorecard. Returns: id, domain, name, score, grade, improvement, created_at. Entries are paginated using the standard SecurityScorecard page/size pagination structure.
list_all_securityscorecard_customer_vendors_risk_highlights
List vendor risk highlights for customers in SecurityScorecard. Returns: id, created_at, updated_at. No required parameters.
list_all_vendors_risk_matrix_incident_likelihoods
List incident likelihood entries for the vendors risk matrix in SecurityScorecard MAX. Returns a paginated collection of incident likelihood records unwrapped from the entries array. No required parameters.
list_all_vendors_risk_matrix_indicator_severities
List indicator severity entries for the vendors risk matrix in SecurityScorecard. Returns a paginated collection of indicator severity entries (unwrapped from the `entries` array) with id, name, and severity. No required parameters.
list_all_securityscorecard_slots
List slots for a SecurityScorecard customer by customer_id. Returns a paginated collection of slot records; each entry includes id. Required: customer_id.
securityscorecard_slots_bulk_update
Update slots for a SecurityScorecard customer by customer_id via a JSON request body. Returns the updated slot record including id. Required: customer_id.
list_all_securityscorecard_customer_acceses
List customer access records for a specific SecurityScorecard customer. Returns: id, name. Required: customer_id.
create_a_securityscorecard_customer_accese
Create customer access for a SecurityScorecard customer by customer id. Returns: id. Required: customer_id.
list_all_securityscorecard_customer_managed_questionnaires
List managed questionnaires for a SecurityScorecard customer. Returns a paginated collection of questionnaire records (via the entries array) with id and name. Required: customer_id.
securityscorecard_customer_managed_questionnaires_bulk_update
Update a managed questionnaire for a SecurityScorecard customer. Returns: id, updated_at. Required: customer_id.
list_all_securityscorecard_customer_users
List users belonging to a specific SecurityScorecard customer. Returns: id, created_at, updated_at. Required: customer_id.
list_all_securityscorecard_indicators_exclusions
List SecurityScorecard indicator exclusions. Returns: id, created_at, updated_at.
create_a_securityscorecard_indicators_exclusion
Create a new SecurityScorecard indicator exclusion. Returns: id, created_at, updated_at.
securityscorecard_indicators_exclusions_bulk_delete
Bulk delete SecurityScorecard indicator exclusions. Returns an empty 204 response on success.
update_a_securityscorecard_indicators_exclusion_by_id
Update a SecurityScorecard indicator exclusion by id. Returns: id, created_at, updated_at. Required: id.
get_single_securityscorecard_max_management_request_by_id
Get a specific SecurityScorecard management request by id. Returns: id. Required: id.
list_all_securityscorecard_notification_preferences
List notification preferences for a SecurityScorecard contact. Returns: id, created_at, updated_at. Required: contact_id.
securityscorecard_notification_preferences_bulk_update
Update notification preferences for a SecurityScorecard contact. Returns: id, created_at, updated_at. Required: contact_id.
list_all_securityscorecard_partner_contacts
List partner contacts in SecurityScorecard. Returns: id, created_at, updated_at. Max 50 per page.
create_a_securityscorecard_contacts_bulk_escalation_toggle
Toggle escalation status for multiple SecurityScorecard contacts in bulk via the partner API. Returns a confirmation response indicating the result of the bulk escalation toggle operation.
list_all_securityscorecard_vendors
List vendor entries for a specific customer and vendor domain in SecurityScorecard's Max partner API. Returns: vendor_domain, customer_id, attributes. Required: customer_id, vendor_domain.
securityscorecard_vendors_bulk_update
Update a vendor for a specific customer and vendor domain in SecurityScorecard's Max partner API. Returns the updated vendor record including vendor_domain, customer_id, and attributes. Required: customer_id, vendor_domain.
list_all_securityscorecard_customer_default_ccs
List default CC (carbon copy) email addresses configured for a SecurityScorecard Max partner customer. Returns: email. Required: customer_id.
create_a_securityscorecard_customer_default_cc
Add a default CC (carbon copy) email address for a SecurityScorecard Max partner customer. Returns: email, customer_id. Required: customer_id.
securityscorecard_customer_default_ccs_bulk_create
Bulk add default CC (carbon copy) email addresses for a SecurityScorecard Max partner customer. Accepts an array of CC email records. Returns: email, customer_id. Required: customer_id.
securityscorecard_customer_default_ccs_bulk_delete
Delete a default CC (carbon copy) email address for a SecurityScorecard Max partner customer by CC email. Returns an empty 204 response on success. Required: customer_id, cc_email.
list_all_securityscorecard_vendor_cc_extras
List CC email extras for a vendor in SecurityScorecard. Returns: cc_email. Required: customer_id, vendor_id.
create_a_securityscorecard_vendor_cc_extra
Create a CC email extra for a vendor in SecurityScorecard. Returns: cc_email. Required: customer_id, vendor_id, cc_email.
No tools match your search.
How it works
From SecurityScorecard account to governed MCP endpoint
Connect
Link a SecurityScorecard account through Elaichi's hosted connect flow. Credentials are vaulted, so nobody, including the AI, ever sees them.
Compose
The connection becomes a toolbox instantly. Curate which SecurityScorecard tools are exposed, rename them, or freeze arguments.
Authorize
Point Claude, ChatGPT, Cursor, or any MCP client at the one Elaichi endpoint and sign in with OAuth, governed by roles, restrictions, and audit logs.
Put your agents to work in the tools you already use
Start a 14-day Gold trial. Connect a product, curate a toolbox, and paste a governed MCP endpoint into Claude, ChatGPT, or Cursor in minutes.