Every API here is available over the APIs.io API and to AI agents over MCP.
openapi: 3.2.0
info:
title: Comp AI Cloud Security API
description: Compliance automation API for SOC 2, ISO 27001, HIPAA, GDPR, evidence collection, policy workflows, Trust Access, security questionnaires, integrations, cloud checks, and device compliance.
version: '1.0'
contact: {}
servers:
- url: https://api.trycomp.ai
description: Production API Server
tags:
- name: CloudSecurity
description: Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-group: Cloud Security
paths:
/v1/cloud-security/activity:
get:
operationId: CloudSecurityController_getActivity_v1
parameters:
- name: connectionId
required: true
in: query
schema:
type: string
responses:
'200':
description: ''
summary: List recent cloud security activity
tags:
- CloudSecurity
description: List recent cloud security activity in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: List recent cloud security activity | Comp AI API
sidebarTitle: List recent cloud security activity
description: List recent cloud security activity in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.
og:title: List recent cloud security activity | Comp AI API
og:description: List recent cloud security activity in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.
x-speakeasy-mcp:
name: get-activity
/v1/cloud-security/providers:
get:
operationId: CloudSecurityController_getProviders_v1
parameters: []
responses:
'200':
description: ''
summary: List supported cloud providers
tags:
- CloudSecurity
description: List supported cloud providers in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: List supported cloud providers | Comp AI API
sidebarTitle: List supported cloud providers
description: List supported cloud providers in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
og:title: List supported cloud providers | Comp AI API
og:description: List supported cloud providers in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
x-speakeasy-mcp:
name: get-providers
/v1/cloud-security/findings:
get:
operationId: CloudSecurityController_getFindings_v1
parameters: []
responses:
'200':
description: ''
summary: List cloud security findings
tags:
- CloudSecurity
description: List cloud security findings discovered by scans so teams can prioritize remediation before issues become audit findings.
x-mint:
metadata:
title: List cloud security findings | Comp AI API
sidebarTitle: List cloud security findings
description: List cloud security findings discovered by scans so teams can prioritize remediation before issues become audit findings.
og:title: List cloud security findings | Comp AI API
og:description: List cloud security findings discovered by scans so teams can prioritize remediation before issues become audit findings.
x-speakeasy-mcp:
name: get-findings
/v1/cloud-security/findings/{findingId}/exception:
post:
description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the org's owner and the audit log description records the calling key/service name.
operationId: CloudSecurityController_markFindingAsException_v1
parameters:
- name: findingId
required: true
in: path
schema:
type: string
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/MarkExceptionDto'
responses:
'201':
description: ''
summary: Mark a finding as an exception so it no longer appears in the active Scan…
tags:
- CloudSecurity
x-mint:
metadata:
title: Mark a finding as an exception so it no | Comp AI API
sidebarTitle: Mark a finding as an exception so it no longer appears in the active Scan Results list
description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the.
og:title: Mark a finding as an exception so it no | Comp AI API
og:description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the.
x-speakeasy-mcp:
name: mark-finding-as-exception
/v1/cloud-security/connections/{connectionId}/scan-mode:
patch:
description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the org's owner.
operationId: CloudSecurityController_updateAwsScanMode_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/UpdateAwsScanModeDto'
responses:
'200':
description: ''
summary: Switch the AWS scan engine for a connection (Comp AI scanners ↔ Security Hub)
tags:
- CloudSecurity
x-mint:
metadata:
title: Switch the AWS scan engine for a connection | Comp AI API
sidebarTitle: Switch the AWS scan engine for a connection (Comp AI scanners ↔ Security Hub)
description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the.
og:title: Switch the AWS scan engine for a connection | Comp AI API
og:description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the.
x-speakeasy-mcp:
name: update-aws-scan-mode
/v1/cloud-security/exceptions/{exceptionId}:
delete:
description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the org's owner.
operationId: CloudSecurityController_revokeException_v1
parameters:
- name: exceptionId
required: true
in: path
schema:
type: string
responses:
'200':
description: ''
summary: Revoke an exception, reopening the finding
tags:
- CloudSecurity
x-mint:
metadata:
title: Revoke an exception, reopening the finding | Comp AI API
sidebarTitle: Revoke an exception, reopening the finding
description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the.
og:title: Revoke an exception, reopening the finding | Comp AI API
og:description: Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the.
x-speakeasy-mcp:
name: revoke-exception
/v1/cloud-security/history:
get:
operationId: CloudSecurityController_getHistory_v1
parameters:
- name: connectionId
required: true
in: query
schema:
type: string
responses:
'200':
description: ''
summary: List resolution, exception, and regression history for a connection
tags:
- CloudSecurity
description: List resolution, exception, and regression history for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: List resolution, exception, and regression | Comp AI API
sidebarTitle: List resolution, exception, and regression history for a connection
description: List resolution, exception, and regression history for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services.
og:title: List resolution, exception, and regression | Comp AI API
og:description: List resolution, exception, and regression history for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services.
x-speakeasy-mcp:
name: get-history
/v1/cloud-security/findings/{findingId}/check-definition:
get:
operationId: CloudSecurityController_getCheckDefinition_v1
parameters:
- name: findingId
required: true
in: path
schema:
type: string
responses:
'200':
description: ''
summary: Resolve the "About this check" description for a finding (AI-cached for AWS…
tags:
- CloudSecurity
description: Resolve the "About this check" description for a finding (AI-cached for AWS; provider-derived for GCP/Azure) in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
x-mint:
metadata:
title: Resolve the "About this check" description | Comp AI API
sidebarTitle: Resolve the "About this check" description for a finding (AI-cached for AWS; provider-derived for GCP/Azure)
description: Resolve the "About this check" description for a finding (AI-cached for AWS; provider-derived for GCP/Azure) in Comp AI. Run AWS, Azure, and GCP cloud.
og:title: Resolve the "About this check" description | Comp AI API
og:description: Resolve the "About this check" description for a finding (AI-cached for AWS; provider-derived for GCP/Azure) in Comp AI. Run AWS, Azure, and GCP cloud.
x-speakeasy-mcp:
name: get-check-definition
/v1/cloud-security/resolve-session/{connectionId}:
post:
operationId: CloudSecurityController_resolveSession_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Resolve short-lived AWS credentials for a connection (internal only)
tags:
- CloudSecurity
description: Resolve short-lived AWS credentials for a connection (internal only) in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Resolve short-lived AWS credentials for a | Comp AI API
sidebarTitle: Resolve short-lived AWS credentials for a connection (internal only)
description: Resolve short-lived AWS credentials for a connection (internal only) in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services.
og:title: Resolve short-lived AWS credentials for a | Comp AI API
og:description: Resolve short-lived AWS credentials for a connection (internal only) in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services.
x-speakeasy-mcp:
name: resolve-session
/v1/cloud-security/scan/{connectionId}:
post:
operationId: CloudSecurityController_scan_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Run cloud security scan
tags:
- CloudSecurity
description: Trigger a cloud security scan for a connected AWS, Azure, or GCP account and collect findings for compliance remediation.
x-mint:
metadata:
title: Run cloud security scan | Comp AI API
sidebarTitle: Run cloud security scan
description: Trigger a cloud security scan for a connected AWS, Azure, or GCP account and collect findings for compliance remediation.
og:title: Run cloud security scan | Comp AI API
og:description: Trigger a cloud security scan for a connected AWS, Azure, or GCP account and collect findings for compliance remediation.
x-speakeasy-mcp:
name: scan
/v1/cloud-security/detect-services/{connectionId}:
post:
operationId: CloudSecurityController_detectServices_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Detect available cloud services for a connection
tags:
- CloudSecurity
description: Detect available cloud services for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Detect available cloud services for a | Comp AI API
sidebarTitle: Detect available cloud services for a connection
description: Detect available cloud services for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings.
og:title: Detect available cloud services for a | Comp AI API
og:description: Detect available cloud services for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings.
x-speakeasy-mcp:
name: detect-services
/v1/cloud-security/detect-gcp-org/{connectionId}:
post:
operationId: CloudSecurityController_detectGcpOrg_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Detect the GCP organization for a connection
tags:
- CloudSecurity
description: Detect the GCP organization for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Detect the GCP organization for a connection | Comp AI API
sidebarTitle: Detect the GCP organization for a connection
description: Detect the GCP organization for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect.
og:title: Detect the GCP organization for a connection | Comp AI API
og:description: Detect the GCP organization for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect.
x-speakeasy-mcp:
name: detect-gcp-org
/v1/cloud-security/select-gcp-projects/{connectionId}:
post:
operationId: CloudSecurityController_selectGcpProjects_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Select GCP projects for a connection
tags:
- CloudSecurity
description: Select GCP projects for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Select GCP projects for a connection | Comp AI API
sidebarTitle: Select GCP projects for a connection
description: Select GCP projects for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.
og:title: Select GCP projects for a connection | Comp AI API
og:description: Select GCP projects for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.
x-speakeasy-mcp:
name: select-gcp-projects
/v1/cloud-security/setup-gcp/{connectionId}:
post:
operationId: CloudSecurityController_setupGcp_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Set up GCP for a connection
tags:
- CloudSecurity
description: Set up GCP for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Set up GCP for a connection | Comp AI API
sidebarTitle: Set up GCP for a connection
description: Set up GCP for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
og:title: Set up GCP for a connection | Comp AI API
og:description: Set up GCP for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
x-speakeasy-mcp:
name: setup-gcp
/v1/cloud-security/setup-gcp/{connectionId}/resolve-step:
post:
operationId: CloudSecurityController_resolveGcpSetupStep_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Resolve a GCP setup step
tags:
- CloudSecurity
description: Resolve a GCP setup step in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Resolve a GCP setup step | Comp AI API
sidebarTitle: Resolve a GCP setup step
description: Resolve a GCP setup step in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
og:title: Resolve a GCP setup step | Comp AI API
og:description: Resolve a GCP setup step in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
x-speakeasy-mcp:
name: resolve-gcp-setup-step
/v1/cloud-security/setup-azure/{connectionId}:
post:
operationId: CloudSecurityController_setupAzure_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Set up Azure for a connection
tags:
- CloudSecurity
description: Set up Azure for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Set up Azure for a connection | Comp AI API
sidebarTitle: Set up Azure for a connection
description: Set up Azure for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
og:title: Set up Azure for a connection | Comp AI API
og:description: Set up Azure for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.
x-speakeasy-mcp:
name: setup-azure
/v1/cloud-security/validate-azure/{connectionId}:
post:
operationId: CloudSecurityController_validateAzure_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Validate Azure credentials for a connection
tags:
- CloudSecurity
description: Validate Azure credentials for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Validate Azure credentials for a connection | Comp AI API
sidebarTitle: Validate Azure credentials for a connection
description: Validate Azure credentials for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect.
og:title: Validate Azure credentials for a connection | Comp AI API
og:description: Validate Azure credentials for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect.
x-speakeasy-mcp:
name: validate-azure
/v1/cloud-security/trigger/{connectionId}:
post:
operationId: CloudSecurityController_triggerScan_v1
parameters:
- name: connectionId
required: true
in: path
schema:
type: string
responses:
'201':
description: ''
summary: Trigger a cloud security run for a connection
tags:
- CloudSecurity
description: Trigger a cloud security run for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Trigger a cloud security run for a connection | Comp AI API
sidebarTitle: Trigger a cloud security run for a connection
description: Trigger a cloud security run for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings.
og:title: Trigger a cloud security run for a connection | Comp AI API
og:description: Trigger a cloud security run for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings.
x-speakeasy-mcp:
name: trigger-scan
/v1/cloud-security/runs/{runId}:
get:
operationId: CloudSecurityController_getRunStatus_v1
parameters:
- name: runId
required: true
in: path
schema:
type: string
- name: connectionId
required: true
in: query
schema:
type: string
responses:
'200':
description: ''
summary: Get a cloud security scan run by ID
tags:
- CloudSecurity
description: Get a cloud security scan run by ID in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.
x-mint:
metadata:
title: Get a cloud security scan run by ID | Comp AI API
sidebarTitle: Get a cloud security scan run by ID
description: Get a cloud security scan run by ID in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.
og:title: Get a cloud security scan run by ID | Comp AI API
og:description: Get a cloud security scan run by ID in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.
x-speakeasy-mcp:
name: get-run-status
components:
schemas:
MarkExceptionDto:
type: object
properties:
reason:
type: string
description: Documentation for why this finding does not apply or is being accepted. Minimum 20 non-whitespace characters.
example: Bucket hosts intentionally public marketing assets; writes restricted to the marketing IAM role.
reviewedBy:
type: string
description: Free-text reviewer or approval reference.
example: Approved by CISO 2026-Q1
expiresAt:
type: string
description: ISO date when this exception should auto-expire. Null/missing = never.
example: '2026-08-13'
required:
- reason
UpdateAwsScanModeDto:
type: object
properties:
mode:
type: string
description: Which scan engine to use for this AWS connection.
enum:
- comp_scanners
- security_hub
example: security_hub
required:
- mode
securitySchemes:
apikey:
type: apiKey
in: header
name: X-API-Key
description: API key for authentication
x-speakeasy-timeout: 120000