Search Tokens for MCP Servers
You can use the search tokens in the MCP Servers tab to refine your search results.
Generic
The order of precedence for the operators is NOT, AND, OR. However, you can use parenthesis to override the precedence.
Use a boolean query to express your query using NOT logic.
Example
Show detections that are not detected by jailbreak detectionting system
not detection.isJailBreak: PASS
Use a boolean query to express your query using AND logic.
Example
Find assets with certain tag and software installed
tags.name:`Cloud Agent` and software: (name:`Cisco AnyConnect Secure Mobility Client` and version:`3.1.12345`)
Use a boolean query to express your query using OR logic.
Example
Show findings with one of these tag values
tags.name:Cloud Agent or tags.name:Windows
Scans Tokens
Select a severity value to find scans with selected scan severity: HIGH, LOW, MEDIUM, NONE.
Example
Find scans with the specified scan severity LOW
scan.severity: LOW
Use values within quotes or backticks to find scans with the specified scan name.
Examples
Find scans that contain a part of the given name
scan.name: "TestScan"
Find scans with the given name
scan.name: `TestScan`
Use an integer value to find scans with the given scan ID.
Example
Find the scan with the given ID
scan.id: 30
Select status to find scans with selected scan status - ERROR, FINISHED, NO_HOST_ALIVE, PENDING EVALUATION, PENDING REPORTS, PROCESSING, RUNNING, SCANNER_NOT_AVAILABLE, SUBMITTED.
Example
Find scans with the FINISHED status
scan.status: FINISHED
MCP Servers
Use a text value within quotes ot backticks to find MCP Server with the specified URL.
Examples
Find MCP servers that contains the part of given URL.
mcpServer.url:"abc.com"
Find the MCP server with the specified URL.
mcpServer.url:`abc.com`
mcpServer.updatedDatemcpServer.updatedDate
Use a date range or specific date to find MCP servers that were last updated on the specified date or date range.
Examples
Find MCP servers which were last updated in past 6 months
mcpServer.updatedDate: [now-6M .. now]
Find MCP servers which were last updated on a specified date.
mcpServer.updatedDate: "2024-10-20"
Find MCP servers which were were last updated after a specified date.
mcpServer.updatedDate> "2021-07-20"
mcpServer.lastScannedDatemcpServer.lastScannedDate
Use a date range or specific date to find MCP servers that were last scanned on the specified date or date range.
Examples
Find MCP servers which were last scanned in past 6 months
mcpServer.updatedDate: [now-6M .. now]
Find MCP servers which were last scanned on a specified date.
mcpServer.updatedDate: "2024-10-20"
Find MCP servers which were were last scanned after a specified date.
mcpServer.updatedDate> "2021-07-20"
Use an integer value to find MCP server with the specified ID.
Example
Find MCP server with the ID 123
asset.id: 123
Use values within quotes or backticks to search MCP servers with the specified name.
Examples
Find MCP servers containing a part of the specified name.
asset.name:"ServerwithAuth"
Find the MCP server with the specified name.
asset.name:`ServerwithAUth`
Use values within quotes or backticks to find MCP servers that are associated with the specified tag(s).
Examples
Find MCP servers that have part of the tag named "Test" associated.
asset.tag.name:"Test"
Find MCP servers that have part of the tag named "Test" or "Production" associated.
asset.tag.name:["Test", "Production"]
Find MCP servers that have the tag name `Target1` associated.
asset.tag.name:`Target1`