GAdvisory

Fetch one advisory in full by the id search returned: its summary, description, severity and CVSS, affected products and versions, CWEs, references and credits.

fetch

Get one group, organization or project by id or slug, with its visibility, parent and settings. Ids are not unique across the three levels, so the type is required.

get_scope

Get one advisory with optional expanded context.

get_advisory

Get instance-wide settings (instance admin only).

get_instance_settings

Get profile of current authenticated user.

get_me

Invite or add a member to a scope.

invite_membership

List CNA publish attempts for an advisory or globally.

list_cna_attempts

List OAuth apps owned by current user.

list_oauth_apps

List advisories accessible to the authenticated actor.

list_advisories

List collaborators for advisory.

list_collaborators

List comments for an advisory.

list_advisory_comments

List memberships for a scope.

list_memberships

List in-app notifications for current user.

list_notifications

List repo links for project.

list_repo_links

List disclosure submissions with filters.

list_disclosures

List the current user's saved views for a list (advisories by default).

list_saved_views

List scope hierarchy visible to the authenticated actor.

list_scopes

List MCP tools with optional category filtering and required-scope metadata.

mcp_list_tools

List the webhooks configured on one scope, with their event subscriptions and enabled state. Does not return any secret.

list_webhooks

Lookup CWE by exact id or free-text query.

get_cwe

Mark a single in-app notification as read.

mark_notification_read

Mark all in-app notifications as read.

mark_all_notifications_read

Publish an advisory: move it to PUBLISHED, which is the ONE call that exposes it outside this instance. Until this runs, a draft is invisible to the public at every visibility. What happens next depends on the advisory's own visibility: PUBLIC lists it publicly, UNLISTED serves it only at its secret URL, PRIVATE publishes it to nobody. Publishing also assigns the permanent public identifier and can trigger notifications and webhooks, so treat it as irreversible in effect even though the state can be changed afterwards.

publish_advisory

Queue the submission of an advisory's CVE record to a CNA registry through one of the person's CNA configurations. Unless draft is true this is a real submission: it mints a CVE identifier that cannot be reclaimed and, depending on the configuration, makes the record public. Confirm the advisory, the configuration and draft with the person before calling.

publish_cna

Create OAuth app for current user.

create_oauth_app

Remove collaborator from advisory.

remove_collaborator

Remove a membership from a scope.

remove_membership

Create a saved view for a list.

create_saved_view

Score a CVSS vector with the server's own calculator, the one GAdvisory publishes scores from. Takes a 3.1 or 4.0 vector, whole or partial, and answers each base metric with its accepted values and current value, which metrics are still missing, and the base score and severity once every metric is set. Use it before update_advisory's cvss argument rather than computing a score yourself: 4.0 has no closed form.

cvss_calculator

Search the security advisories you can see in GAdvisory by title, summary, advisory ID or CVE ID. Returns up to 20 matches, each with an id to pass to fetch for the full text.

search

Search advisories by free text and scope constraints.

search_advisories

Search users by query string.

search_users

Show one advisory to the person as an interactive view: severity and CVSS, affected products, weaknesses, references, credits and timeline, with its state actions. Call it only when the person asks to see, show or open an advisory. To read one for your own work, use get_advisory, which answers in text.

show_advisory

Overview of the advisories the caller can see: totals by state and severity, how many were published in the last 30 days, the ten most recently updated, plus the caller's unread notification count and the number of new requests waiting for triage. Narrow it to one project, organization or group with the filters.

get_dashboard

Unlink a repository from its project. The repository itself is untouched; this removes the link and any credential stored on it.

remove_repo_link

Update an existing group, organization, or project.

update_scope

Update an advisory. Scalar fields (title, summary, description, internalDescription, visibility) and the STRUCTURED collections: references, credits, impacts, timeline, and CVSS v3/v4. Each collection takes {mode, items}; mode is 'append' (the default, adds to what is stored) or 'replace' (overwrites, deleting anything not sent). Prefer these fields over describing the same facts in prose.

update_advisory

Patch instance settings.

update_instance_settings

Update current user profile fields.

update_me