---
title: "Get Wiz integration settings"
method: POST
path: "/api/v2/integrations/getWizSettings"
tags: ["Integrations"]
---

# Get Wiz integration settings

`POST /api/v2/integrations/getWizSettings`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/integrations/getWizSettings`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Retrieve the organization's Wiz CSPM integration configuration: whether Wiz is configured, the Wiz GraphQL/token endpoints, which Wiz project IDs are scoped for ZeroPath enrichment, and whether SAST enrichment is enabled. The Wiz `clientSecret` value is never returned — only `hasClientSecret: boolean` indicates whether one is stored. Use this tool to verify Wiz setup, to discover the enrolled `wizProjectIds`, or to diff against `integrations.listWizProjects` to spot projects visible to Wiz creds but not yet enrolled in ZeroPath. Note: the `wizProjectIds` allowlist applies to `searchWizAssets` and SAST enrichment; `searchWizExposures` is tenant-wide because the Wiz API does not accept project-scoped filters on network exposures.

## Request body

- WizGetSettingsRequest
  - `organizationId` string: Organization whose Wiz integration settings to read. The official ZeroPath MCP server injects this from `ZEROPATH_ORG_ID` when configured.

## Response `200`

Wiz settings for the organization.

- WizSettingsResponse: The organization's Wiz integration configuration. The Wiz `clientSecret` value is never returned — only the `hasClientSecret` boolean indicates whether one is stored. A `404` response indicates the organization has no Wiz integration configured.
  - `id` string, required
  - `clientId` string, required: Wiz OAuth2 client identifier.
  - `audience` string, required: Wiz OAuth2 audience.
  - `tokenUrl` string, required: Wiz OAuth2 token endpoint URL.
  - `graphqlUrl` string, required: Wiz GraphQL API endpoint URL.
  - `isEnableSASTEnrichment` boolean, required: Whether ZeroPath enriches SAST findings with Wiz exposure data during scans.
  - `wizProjectIds` string[], required: Wiz project IDs scoped for ZeroPath enrichment. `searchWizAssets` and SAST enrichment filter to these projects server-side. `searchWizExposures` runs tenant-wide — the Wiz API does not support project-scoped filters on `networkExposures`, so this allowlist does NOT constrain exposure-search results.
  - `hasClientSecret` boolean, required: True if a Wiz `clientSecret` is configured. The value itself is never returned.

## Other responses

- `400`: Error Response
- `401`: Error Response
- `404`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)