ZEzeropath
Integrations

Get Wiz integration settings

Retrieve the organization's Wiz CSPM integration configuration: whether Wiz is configured, the Wiz GraphQL/token endpoints, which Wiz project IDs are scoped for ZeroPath enrichment, and whether SAST enrichment is enabled. The Wiz clientSecret value is never returned — only hasClientSecret: boolean indicates whether one is stored. Use this tool to verify Wiz setup, to discover the enrolled wizProjectIds, or to diff against integrations.listWizProjects to spot projects visible to Wiz creds but not yet enrolled in ZeroPath. Note: the wizProjectIds allowlist applies to searchWizAssets and SAST enrichment; searchWizExposures is tenant-wide because the Wiz API does not accept project-scoped filters on network exposures.

post/api/v2/integrations/getWizSettings

Request

  • Base URL
    https://zeropath.com
  • Auth
    API key in header X-ZeroPath-API-Token-Id and API key in header X-ZeroPath-API-Token-Secret

Request body

organizationIdstring

Organization whose Wiz integration settings to read. The official ZeroPath MCP server injects this from ZEROPATH_ORG_ID when configured.

Response

Wiz settings for the organization.

idstring required
clientIdstring required

Wiz OAuth2 client identifier.

audiencestring required

Wiz OAuth2 audience.

tokenUrlstring required

Wiz OAuth2 token endpoint URL.

graphqlUrlstring required

Wiz GraphQL API endpoint URL.

isEnableSASTEnrichmentboolean required

Whether ZeroPath enriches SAST findings with Wiz exposure data during scans.

wizProjectIdsstring[] required

Wiz project IDs scoped for ZeroPath enrichment. searchWizAssets and SAST enrichment filter to these projects server-side. searchWizExposures runs tenant-wide — the Wiz API does not support project-scoped filters on networkExposures, so this allowlist does NOT constrain exposure-search results.

hasClientSecretboolean required

True if a Wiz clientSecret is configured. The value itself is never returned.

Changes

No recorded changes to this operation across all 1 revision of this API.