CloudGuard

CloudGuard Security Graph Query API

The Security Graph Query API from CloudGuard — 7 operation(s) for security graph query.

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 7

POST /v2/security-graph/query Execute Toxic Combination Query #
POST /v2/security-graph/query/evidence-path/{queryRunRequestId} Execute Toxic Combination Evidence Query #
GET /v2/security-graph/query/evidence-path/sync/{queryRunRequestId}/{srl} Get Toxic Combination Evidence Sync #
GET /v2/security-graph/query/evidence-path/{requestId} Get Toxic Combination Evidence #
POST /v2/security-graph/query/sync Execute Toxic Combination Query Sync #
GET /v2/security-graph/query/{requestId} Get Toxic Combination Entity Srls #
GET /v2/security-graph/entity-schema Get Entity Schema #

Documentation

📖
Documentation
https://docs.cgn.portal.checkpoint.com/reference
📖
APIReference
https://docs.cgn.portal.checkpoint.com/reference/introduction
📖
Authentication
https://docs.cgn.portal.checkpoint.com/reference/authentication

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/openapi/cloudguard-security-graph-query-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/cloudguard:cloudguard-security-graph-query-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cloudguard-security-graph-query-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Risk Management Security Graph Query API
  version: v2
servers:
- url: https://api.dome9.com/
  description: US region
- url: https://api.{region}.dome9.com/
  description: Other regions
  variables:
    region:
      enum:
      - eu1
      - ap1
      - ap2
      - ap3
      - cace1
      default: eu1
security:
- basic: []
tags:
- name: Security Graph Query
paths:
  /v2/security-graph/query:
    post:
      operationId: QueryController_executeToxicCombinationQuery_post_/v2/security-graph/query
      summary: Execute Toxic Combination Query
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SgqlQueryRunRequestModel'
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: string
      tags:
      - Security Graph Query
      description: Execute a query for toxic combination entities preview
  /v2/security-graph/query/evidence-path/{queryRunRequestId}:
    post:
      operationId: QueryController_executeToxicCombinationEvidenceQuery_post_/v2/security-graph/query/evidence-path/{queryRunRequestId}
      summary: Execute Toxic Combination Evidence Query
      parameters:
      - name: queryRunRequestId
        required: true
        in: path
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SgqlQueryRunEvidencePathRequestModel'
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: string
      tags:
      - Security Graph Query
      description: Execute a query for toxic combination evidence path preview
  /v2/security-graph/query/evidence-path/sync/{queryRunRequestId}/{srl}:
    get:
      operationId: QueryController_getToxicCombinationEvidenceSync_get_/v2/security-graph/query/evidence-path/sync/{queryRunRequestId}/{srl}
      summary: Get Toxic Combination Evidence Sync
      parameters:
      - name: queryRunRequestId
        required: true
        in: path
        schema:
          type: string
      - name: srl
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/QueryExecutionEvidencePathResponseViewModel'
      tags:
      - Security Graph Query
      description: Execute a query for toxic combination issue preview immediately
  /v2/security-graph/query/evidence-path/{requestId}:
    get:
      operationId: QueryController_getToxicCombinationEvidence_get_/v2/security-graph/query/evidence-path/{requestId}
      summary: Get Toxic Combination Evidence
      parameters:
      - name: requestId
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SgqlQueryRunEvidenceResponseViewModel'
      tags:
      - Security Graph Query
      description: Get a query result SRLs by request ID
  /v2/security-graph/query/sync:
    post:
      operationId: QueryController_executeToxicCombinationQuerySync_post_/v2/security-graph/query/sync
      summary: Execute Toxic Combination Query Sync
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SgqlQueryRunRequestModel'
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SgqlQueryRunSrlsEnhancedResponseViewModel'
      tags:
      - Security Graph Query
      description: Execute a query for toxic combination issue preview immediately
  /v2/security-graph/query/{requestId}:
    get:
      operationId: QueryController_getToxicCombinationEntitySrls_get_/v2/security-graph/query/{requestId}
      summary: Get Toxic Combination Entity Srls
      parameters:
      - name: requestId
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SgqlQueryRunSrlsResponseViewModel'
      tags:
      - Security Graph Query
      description: Get a query result SRLs by request ID
  /v2/security-graph/entity-schema:
    get:
      operationId: EntitySchemaController_getEntitySchema_get_/v2/security-graph/entity-schema
      summary: Get Entity Schema
      parameters: []
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EntitySchemaViewModel'
      tags:
      - Security Graph Query
      description: Get the schema of entities and relationships
components:
  schemas:
    GraphDataViewModel:
      type: object
      properties: {}
    EntitySchemaViewModel:
      type: object
      properties:
        EntitySchemas:
          type: object
        RelationshipSchemas:
          type: object
      required:
      - EntitySchemas
      - RelationshipSchemas
    SgqlQueryRunSrlsResponseViewModel:
      type: object
      properties:
        srlResults:
          type: array
          items:
            type: array
        error:
          type: string
    SgqlQueryRunSrlsEnhancedResponseViewModel:
      type: object
      properties:
        srlResults:
          type: array
          items:
            type: array
        error:
          type: string
        queryRunRequestId:
          type: string
      required:
      - queryRunRequestId
    SgqlQueryRunRequestModel:
      type: object
      properties: {}
    SgqlQueryRunEvidencePathRequestModel:
      type: object
      properties: {}
    QueryExecutionEvidencePathResponseViewModel:
      type: object
      properties:
        evidencePath:
          $ref: '#/components/schemas/GraphDataViewModel'
        error:
          type: string
    SgqlQueryRunEvidenceResponseViewModel:
      type: object
      properties:
        evidencePerSrl:
          type: object
        error:
          type: string
  securitySchemes:
    basic:
      type: http
      scheme: basic
x-readme:
  explorer-enabled: true
  proxy-enabled: true