CheckPointSW/workforce-ai-mcp

tools

• analyze_shadow_rules

  Find unreachable (shadowed) rules in a rulebase.

• count_assets

  Get the total count of deployed assets, optionally filtered.

• create_agents_rule

  Create a new Agents (MCP Server) rule that governs agent interactions.

• create_ai_access_rule

  Create a new AI Access rule that controls which AI services and applications users can interact with.

• create_chats_rule

  Create a new Chats (GenAI DLP) rule.

• create_dlp_rule

  Create a new Browse DLP rule for data loss prevention during web browsing.

• create_domains_object

  Create a new domains object containing a list of domain entries for domain-based filtering (allow/block lists).

• create_file_protection_object

  Create a new file-protection object.

• create_secure_browsing_rule

  Create a new Secure Browsing threat-prevention rule.

• delete_object

  Permanently delete a policy object (file-protection or domains) by its UUID.

• delete_rule

  Permanently delete a rule from the rulebase by its UUID.

• get_active_mcp_servers

  List MCP servers that were active (invoked at least once) between from_date and to_date.

• get_agents_invocations_overtime

  Return a time series of total MCP tool invocations between from_date and to_date — one point per time bucket ({time, invocations}).

• get_agents_overview

  High-level summary of agentic (MCP) activity for the tenant between from_date and to_date: the number of active AI agents and the number of discovered MCP servers, each with the absolute and percentag

• get_agents_tool_usage

  Break down MCP tool usage by operation type (Create/Read/Update/Delete/Unknown) between from_date and to_date.

• get_agents_top_platforms

  Return the top_n agent platforms (MCP hosts such as Claude Code or Cursor) by tool-invocation count between from_date and to_date.

• get_apps_by_ids

  Get specific GenAI apps from the catalog by their numeric IDs.

• get_discovered_applications

  List the GenAI applications (e.g.

• get_inactive_mcp_servers

  List MCP servers that are known to the tenant but had no activity between from_date and to_date.

• get_tenant_dlp_datatypes

  Get the tenant-specific DLP datatype configuration showing which data types are currently enabled for detection in this tenant's policies..

• get_top_discovered_applications

  Return the top_n GenAI applications by session count between from_date and to_date.

• list_agents_rules

  List all Agents (MCP Server) rules that govern agent interactions.

• list_ai_access_rules

  List all AI Access rules that control which AI services and applications users are allowed to interact with.

• list_chats_rules

  List all Chats (GenAI DLP) rules.

• list_dlp_rules

  List all Browse DLP (Data Loss Prevention) rules for browser security.

• list_domains_objects

  List all domains policy objects.

• list_file_protection_objects

  List all file-protection policy objects.

• list_secure_browsing_rules

  List all Secure Browsing threat-prevention rules.

• list_web_access_rules

  List all Web Access rules for Browse Security.

• patch_access_policy

  Deep-merge partial changes into an AI Access rule's policy.

• patch_agents_policy

  Deep-merge partial changes into an Agents rule's policy.

• patch_chats_policy

  Deep-merge partial changes into a Chats rule's policy.

• patch_secure_browsing_policy

  Deep-merge partial changes into a Secure Browsing rule's policy.

• reorder_rule

  Move a rule to a new position in the rulebase.

• resolve_matching_rule

  Given a user and target, determine which rule in the rulebase would apply.

• search_apps

  Search the GenAI apps catalog by name, description, or URL.

• search_assets

  Search deployed assets (endpoints/devices) with optional filtering, sorting, text search, and pagination.

• search_dlp_datatypes

  Search DLP data types by name or description with pagination.

• search_users

  Search users in the organization with optional text search and pagination.

• set_access_policy

  Replace the entire policy configuration of an AI Access rule (POLICY_TYPE_ACCESS).

• set_agents_policy

  Replace the entire policy configuration of an Agents rule (also known as 'Agents' — POLICY_TYPE_MCP_SERVER).

• set_chats_policy

  Replace the entire policy configuration of a Chats rule (also known as 'Chats' in AI Security UI — POLICY_TYPE_DLP).

• set_rule_active

  Enable or disable a rule without deleting it.

• set_rule_info

  Update the display name and description of a rule identified by its UUID.

• set_rule_objects

  Replace all objects attached to a rule for a specific feature.

• set_rule_source

  Replace the full source (user/group assignments) list of a rule.

• set_secure_browsing_policy

  Replace the entire policy configuration of a Secure Browsing rule (POLICY_TYPE_THREAT_PREVENTION).

• update_domains_object

  Update an existing domains object.

• update_file_protection_object

  Update an existing file-protection object.