Mandiant

Mandiant Action user profiles API

Action User Profiles allow running certain types of actions as other users. For example, to run a Host CLI action as a non-System or non-root user, you would configure an Action User Profile and select it when running an action

Documentation GitHub OpenAPI

Operations 5

GET /action_user_profiles List action user profiles #

POST /action_user_profiles Create an action user profile #

GET /action_user_profiles/{id} Get action user profile #

PUT /action_user_profiles/{id} Update an action user profile #

DELETE /action_user_profiles/{id} Destroy an action user profile #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/mandiant:mandiant-action-user-profiles-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Mandiant Action user profiles API
  version: '1.0'
  description: 'Operations tagged Action user profiles across 4 of this provider''s published API definitions: mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml, mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml. Each path carries the servers of the definition it was published in.'
tags:
- name: Action user profiles
  description: Action User Profiles allow running certain types of actions as other users. For example, to run a Host CLI action as a non-System or non-root user, you would configure an Action User Profile and select it when running an action
paths:
  /action_user_profiles:
    get:
      summary: List action user profiles
      tags:
      - Action user profiles
      responses:
        '200':
          description: Success
          content:
            application/json:
              example:
              - id: 2
                username: nodeone
                description: ''
                domain: ''
                user_type: ''
                friendly_name: Linux image user
              - id: 3
                username: exampleusername
                description: Example description
                domain: exampledomain
                user_type: User
                friendly_name: Example Friendly Name
      operationId: getActionUserProfiles
      x-operation-id-source: derived
    post:
      summary: Create an action user profile
      tags:
      - Action user profiles
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/action_user_profile_wrapped'
            example:
              action_user_profile:
                username: exampleusername
                password: examplepassword
                user_type: User
                domain: exampledomain
                friendly_name: Example Friendly Name
                description: Example description
      responses:
        '201':
          description: Created
          content:
            application/json:
              example:
                id: 3
                username: exampleusername
                description: Example description
                created_at: '2022-10-20T19:40:34.768Z'
                updated_at: '2022-10-20T19:40:34.768Z'
                organization_id: 1
                disabled: false
                domain: exampledomain
                user_type: User
                friendly_name: Example Friendly Name
        '422':
          description: Unprocessable Entity
          content:
            application/json:
              example:
                friendly_name:
                - has already been taken
      operationId: postActionUserProfiles
      x-operation-id-source: derived
  /action_user_profiles/{id}:
    get:
      summary: Get action user profile
      tags:
      - Action user profiles
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: integer
      responses:
        '200':
          description: Success
          content:
            application/json:
              example:
                id: 3
                username: exampleusername
                description: Example description
                created_at: '2022-10-20T19:40:34.768Z'
                updated_at: '2022-10-20T19:40:34.768Z'
                organization_id: 1
                disabled: false
                domain: exampledomain
                user_type: User
                friendly_name: Example Friendly Name
        '404':
          description: Not Found
      operationId: getActionUserProfilesById
      x-operation-id-source: derived
    put:
      summary: Update an action user profile
      tags:
      - Action user profiles
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: integer
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/action_user_profile_wrapped'
            example:
              action_user_profile:
                friendly_name: Updated friendly name
      responses:
        '204':
          description: No content
          content:
            application/json:
              example: null
        '404':
          description: Not Found
        '422':
          description: Unprocessable Entity
          content:
            application/json:
              example:
                friendly_name:
                - has already been taken
      operationId: putActionUserProfilesById
      x-operation-id-source: derived
    delete:
      summary: Destroy an action user profile
      tags:
      - Action user profiles
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: integer
      responses:
        '200':
          description: Success
          content:
            application/json:
              example:
                result: success
        '404':
          description: Not Found
      operationId: deleteActionUserProfilesById
      x-operation-id-source: derived
components:
  schemas:
    action_user_profile:
      type: object
      required:
      - username
      - password
      properties:
        username:
          type: string
          description: A user account on the Actor
        password:
          type: string
          description: Password of the user account
        description:
          type: string
          description: Description of the action user profile
        domain:
          type: string
          description: Domain controller name
        user_type:
          type: string
          description: Type of user
          enum:
          - User
          - Admin
          - Root
        friendly_name:
          type: string
          description: Human-readable identifier
    action_user_profile_wrapped:
      type: object
      properties:
        action_user_profile:
          $ref: '#/components/schemas/action_user_profile'
x-refined-from:
- mandiant-ma-sv-openapi.yml
- mandiant-msv-openapi.yml
- mandiant-ma-sv-openapi.yml
- mandiant-msv-openapi.yml