{"openapi":"3.1.0","info":{"title":"Rapid7 Insight Application Security (BYOK) API","version":"0.1.0","description":"Rapid7 Insight Application Security (BYOK) lets an AI assistant read your own Rapid7 Insight Application Security data through the Rapid7 Insight Application Security API with a key you supply (Rapid7 Insight platform API key (user or organization key)). Read-only: 12 tools (list_apps, get_app, list_scans, get_scan, get_scan_execution_details, list_vulnerabilities, get_vulnerability,...\n\nEvery operation is read-only or compute-only. The same tools are available over MCP (streamable HTTP) at https://byok-rapid7-insightappsec.connectorbay.com/mcp.","contact":{"name":"Unify Dynamics LLC","email":"agent@connectorbay.com","url":"https://connectorbay.com/byok-rapid7-insightappsec/docs"},"termsOfService":"https://connectorbay.com/byok-rapid7-insightappsec/terms"},"servers":[{"url":"https://byok-rapid7-insightappsec.connectorbay.com"}],"externalDocs":{"url":"https://connectorbay.com/byok-rapid7-insightappsec/docs"},"security":[{"upstreamKey":[]}],"components":{"securitySchemes":{"bearer":{"type":"http","scheme":"bearer","description":"Optional. A Pro API key raises rate limits; no credentials are required."},"upstreamKey":{"type":"apiKey","in":"header","name":"X-Upstream-Key","description":"Your own key for the service this connector wraps (bring your own key). Used for that one call only; never stored, logged or cached."}},"schemas":{"Error":{"type":"object","properties":{"ok":{"const":false},"error":{"type":"object"}}}}},"paths":{"/v1/tools/list_apps":{"post":{"operationId":"list_apps","summary":"List the web applications defined in InsightAppSec with their ids, names and descriptions. Use for \"Which web applicatio","description":"List the web applications defined in InsightAppSec with their ids, names and descriptions. Use for \"Which web applications are set up in InsightAppSec\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"index":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Page number, starting at 0.","title":"Index"},"size":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"Items per page (1 to 1000; the service may return fewer).","title":"Size"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Sort as key,ORDER pairs, for example name,ASC (supported keys differ per list).","title":"Sort"}},"required":["region"],"title":"list_appsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_app":{"post":{"operationId":"get_app","summary":"Get one application's name and description. Use for \"What is the InsightAppSec application with a given id\".","description":"Get one application's name and description. Use for \"What is the InsightAppSec application with a given id\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"app_id":{"description":"Id of the application (from list_apps).","maxLength":200,"title":"App Id","type":"string"}},"required":["region","app_id"],"title":"get_appArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_scans":{"post":{"operationId":"list_scans","summary":"List scans with application, scan configuration, status, failure reason, submit and completion time. Use for \"What Insig","description":"List scans with application, scan configuration, status, failure reason, submit and completion time. Use for \"What InsightAppSec scans ran recently and did they complete\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"index":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Page number, starting at 0.","title":"Index"},"size":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"Items per page (1 to 1000; the service may return fewer).","title":"Size"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Sort as key,ORDER pairs, for example name,ASC (supported keys differ per list).","title":"Sort"}},"required":["region"],"title":"list_scansArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_scan":{"post":{"operationId":"get_scan","summary":"Get one scan: status, failure reason, type, application, scan configuration and times. Use for \"Did InsightAppSec scan 8","description":"Get one scan: status, failure reason, type, application, scan configuration and times. Use for \"Did InsightAppSec scan 8b0c finish successfully\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"scan_id":{"description":"Id of the scan (from list_scans).","maxLength":200,"title":"Scan Id","type":"string"}},"required":["region","scan_id"],"title":"get_scanArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_scan_execution_details":{"post":{"operationId":"get_scan_execution_details","summary":"Get live progress counters of a scan: links crawled and queued, attacks done, potential findings and request counts. Use","description":"Get live progress counters of a scan: links crawled and queued, attacks done, potential findings and request counts. Use for \"How far along is InsightAppSec scan 8b0c\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"scan_id":{"description":"Id of the scan (from list_scans).","maxLength":200,"title":"Scan Id","type":"string"}},"required":["region","scan_id"],"title":"get_scan_execution_detailsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_vulnerabilities":{"post":{"operationId":"list_vulnerabilities","summary":"List vulnerability findings with severity, status, root cause location, CVSS score and discovery dates. Evidence payload","description":"List vulnerability findings with severity, status, root cause location, CVSS score and discovery dates. Evidence payloads are not returned. Use for \"What high severity vulnerabilities does InsightAppSec have open\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"index":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Page number, starting at 0.","title":"Index"},"size":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"Items per page (1 to 1000; the service may return fewer).","title":"Size"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Sort as key,ORDER pairs, for example name,ASC (supported keys differ per list).","title":"Sort"}},"required":["region"],"title":"list_vulnerabilitiesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_vulnerability":{"post":{"operationId":"get_vulnerability","summary":"Get one vulnerability finding: severity, status, location, CVSS score and discovery dates. Use for \"How severe is Insigh","description":"Get one vulnerability finding: severity, status, location, CVSS score and discovery dates. Use for \"How severe is InsightAppSec vulnerability 0e0d and when was it first found\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"vulnerability_id":{"description":"Id of the vulnerability (from list_vulnerabilities).","maxLength":200,"title":"Vulnerability Id","type":"string"}},"required":["region","vulnerability_id"],"title":"get_vulnerabilityArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_schedules":{"post":{"operationId":"list_schedules","summary":"List scan schedules: name, enabled flag, scan configuration, first and last start and repeat rule. Use for \"Which Insigh","description":"List scan schedules: name, enabled flag, scan configuration, first and last start and repeat rule. Use for \"Which InsightAppSec scans are scheduled\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"index":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Page number, starting at 0.","title":"Index"},"size":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"Items per page (1 to 1000; the service may return fewer).","title":"Size"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Sort as key,ORDER pairs, for example name,ASC (supported keys differ per list).","title":"Sort"}},"required":["region"],"title":"list_schedulesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_scan_configs":{"post":{"operationId":"list_scan_configs","summary":"List scan configurations with name, application, attack template and engine assignment. Use for \"What scan configuration","description":"List scan configurations with name, application, attack template and engine assignment. Use for \"What scan configurations exist in InsightAppSec\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"index":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Page number, starting at 0.","title":"Index"},"size":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"Items per page (1 to 1000; the service may return fewer).","title":"Size"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Sort as key,ORDER pairs, for example name,ASC (supported keys differ per list).","title":"Sort"}},"required":["region"],"title":"list_scan_configsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_targets":{"post":{"operationId":"list_targets","summary":"List scan targets (fully qualified domain names) with enabled and archived flags. Use for \"Which domains are InsightAppS","description":"List scan targets (fully qualified domain names) with enabled and archived flags. Use for \"Which domains are InsightAppSec scan targets\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"index":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Page number, starting at 0.","title":"Index"},"size":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"Items per page (1 to 1000; the service may return fewer).","title":"Size"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Sort as key,ORDER pairs, for example name,ASC (supported keys differ per list).","title":"Sort"}},"required":["region"],"title":"list_targetsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_engine_groups":{"post":{"operationId":"list_engine_groups","summary":"List engine groups (the pools that run scans) with name and description. Use for \"Which InsightAppSec engine groups exis","description":"List engine groups (the pools that run scans) with name and description. Use for \"Which InsightAppSec engine groups exist\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"index":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Page number, starting at 0.","title":"Index"},"size":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"Items per page (1 to 1000; the service may return fewer).","title":"Size"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Sort as key,ORDER pairs, for example name,ASC (supported keys differ per list).","title":"Sort"}},"required":["region"],"title":"list_engine_groupsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_blackouts":{"post":{"operationId":"list_blackouts","summary":"List blackout windows that stop scans: scope, enabled and active flags, start and end times, repeat rule. Use for \"Are t","description":"List blackout windows that stop scans: scope, enabled and active flags, start and end times, repeat rule. Use for \"Are there InsightAppSec blackout windows active\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"region":{"description":"Rapid7 region code of your data: us, us2, us3, eu, ca, au, ap, aps2 or me1 (the first part of your Insight platform URL).","maxLength":200,"pattern":"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$","title":"Region","type":"string"},"index":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Page number, starting at 0.","title":"Index"},"size":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"Items per page (1 to 1000; the service may return fewer).","title":"Size"},"sort":{"anyOf":[{"maxLength":100,"type":"string"},{"type":"null"}],"default":null,"description":"Sort as key,ORDER pairs, for example name,ASC (supported keys differ per list).","title":"Sort"}},"required":["region"],"title":"list_blackoutsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}}}}