ZEzeropath
Integrations

Search Wiz network exposures

Find live Wiz network-exposure findings whose exposed entity name matches a substring (e.g. 'payments-api'). Defaults to PUBLIC_INTERNET exposures — the most common operator question is "what's reachable from the internet?". Wiz's network-exposure API does not accept project-scoped filters, so the search runs across the customer's whole Wiz tenant and filters by name server-side; bounded to a fixed-page scan with a truncated flag when more matches likely exist. Use to answer "what's exposed on host X?" or to investigate a SAST finding's live cloud blast radius. For pre-computed exposure data already attached to a ZeroPath finding, prefer issues.get (which returns wizExposure.exposedURIs).

post/api/v2/integrations/searchWizExposures

Request

  • Base URL
    https://zeropath.com
  • Auth
    API key in header X-ZeroPath-API-Token-Id and API key in header X-ZeroPath-API-Token-Secret

Request body

organizationIdstring

Organization whose Wiz credentials are used to query exposures. The official ZeroPath MCP server injects this from ZEROPATH_ORG_ID when configured.

entityNamestring required

Case-insensitive substring matched against the name of each exposure's exposed entity (e.g. 'payments-api', 'redis-prod').

exposureTypestring[]

Optional Wiz network-exposure type filter. Defaults to ['PUBLIC_INTERNET'] which is the most common operator-relevant case.

limitinteger

Maximum number of matching exposures to return. Defaults to 20.

Response

Matching Wiz network exposures.

truncatedboolean required

True when Wiz had more matching exposures than the bounded server-side scan could examine; refine the entityName filter for more precise results.

reason'ok' required

Always ok when the call succeeded; absence of matches is returned as an empty exposures array.

Changes

No recorded changes to this operation across all 1 revision of this API.