{
  "build_id": "ql-ea4d2cbf5ec44568",
  "entries": [
    {
      "id": "aws/cloud_control/resource-request-by-token",
      "title": "Cloud Control resource request by token",
      "description": "Gets the progress event for one Cloud Control resource request by its request token; poll it until the operation completes.",
      "providers": [
        "awscc"
      ],
      "services": [
        "cloud_control"
      ],
      "tags": [
        "aws",
        "cloud_control",
        "operations",
        "async"
      ],
      "keywords": [
        "request token",
        "progress event",
        "poll request",
        "async status"
      ],
      "intent_keywords": [
        "check cloud control request status",
        "poll an aws request token",
        "is my cloud control update finished"
      ],
      "mutation": false,
      "verb": "select",
      "status": "draft",
      "required_params": [
        "region",
        "request_token"
      ]
    },
    {
      "id": "aws/cloud_control/resource-requests-by-status",
      "title": "Cloud Control resource requests by status",
      "description": "Lists recent Cloud Control resource requests in a region filtered by operation and status; the follow-up surface for asynchronous AWS mutations.",
      "providers": [
        "awscc"
      ],
      "services": [
        "cloud_control"
      ],
      "tags": [
        "aws",
        "cloud_control",
        "operations",
        "async",
        "inventory"
      ],
      "keywords": [
        "resource request status",
        "async mutation",
        "progress event",
        "failed requests"
      ],
      "intent_keywords": [
        "list failed cloud control requests",
        "check status of my aws mutations",
        "what cloud control operations are in progress"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region",
        "operation",
        "operation_status"
      ]
    },
    {
      "id": "aws/ec2/instance-create",
      "title": "Launch an EC2 instance",
      "description": "Launches an EC2 instance through Cloud Control, returning a progress event to poll; user data must be base64 encoded.",
      "providers": [
        "awscc"
      ],
      "services": [
        "ec2"
      ],
      "tags": [
        "aws",
        "ec2",
        "compute",
        "provisioning",
        "mutation"
      ],
      "keywords": [
        "launch instance",
        "run instances",
        "create vm",
        "provision ec2"
      ],
      "intent_keywords": [
        "launch an ec2 instance",
        "create a new vm in aws",
        "provision an ec2 instance"
      ],
      "mutation": true,
      "verb": "mutation",
      "status": "draft",
      "required_params": [
        "region",
        "image_id",
        "instance_type",
        "subnet_id",
        "user_data",
        "tags"
      ]
    },
    {
      "id": "aws/ec2/instance-state-management",
      "title": "EC2 instance state and lifecycle control",
      "description": "Reports instance state and health checks for a region, and covers the stop and start lifecycle operations that change it.",
      "providers": [
        "aws"
      ],
      "services": [
        "ec2"
      ],
      "tags": [
        "aws",
        "ec2",
        "compute",
        "lifecycle",
        "operations"
      ],
      "keywords": [
        "instance state",
        "status checks",
        "stop instance",
        "start instance",
        "power off"
      ],
      "intent_keywords": [
        "what state are my ec2 instances in",
        "stop an ec2 instance",
        "start an ec2 instance",
        "check instance status checks"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region"
      ]
    },
    {
      "id": "aws/ec2/instance-types-lookup",
      "title": "EC2 instance type specifications",
      "description": "Looks up vCPU, memory, architecture and capability details for named EC2 instance types; the architecture check before launching an instance.",
      "providers": [
        "aws"
      ],
      "services": [
        "ec2"
      ],
      "tags": [
        "aws",
        "ec2",
        "compute",
        "sizing",
        "reference"
      ],
      "keywords": [
        "instance type specs",
        "vcpus",
        "memory",
        "architecture",
        "arm64",
        "graviton",
        "sizing"
      ],
      "intent_keywords": [
        "what are the specs of an instance type",
        "how much memory does an instance type have",
        "is this instance type arm64 or x86"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region",
        "instance_type"
      ]
    },
    {
      "id": "aws/ec2/instances-by-region",
      "title": "EC2 instances in a region",
      "description": "Lists EC2 instances in one region with type, state, addressing and network placement.",
      "providers": [
        "aws"
      ],
      "services": [
        "ec2"
      ],
      "tags": [
        "aws",
        "ec2",
        "compute",
        "inventory"
      ],
      "keywords": [
        "ec2 inventory",
        "instance list",
        "running instances"
      ],
      "intent_keywords": [
        "list ec2 instances",
        "what instances are running",
        "ec2 instance inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region"
      ]
    },
    {
      "id": "aws/ec2/regions-enabled",
      "title": "Enabled AWS regions",
      "description": "Lists the AWS regions enabled for the account with endpoint, country and opt-in status; the valid fan-out list for region-swept queries.",
      "providers": [
        "aws"
      ],
      "services": [
        "ec2"
      ],
      "tags": [
        "aws",
        "ec2",
        "regions",
        "inventory"
      ],
      "keywords": [
        "enabled regions",
        "region sweep",
        "opt-in status",
        "all regions"
      ],
      "intent_keywords": [
        "list enabled aws regions",
        "which regions are enabled",
        "enumerate aws regions"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": []
    },
    {
      "id": "aws/iam/access-keys-age",
      "title": "IAM access key age and rotation status",
      "description": "Lists a user's access keys with their age in days; keys older than the rotation window are the finding.",
      "providers": [
        "aws"
      ],
      "services": [
        "iam"
      ],
      "tags": [
        "aws",
        "iam",
        "security",
        "cspm",
        "credentials",
        "identity"
      ],
      "keywords": [
        "access key age",
        "key rotation",
        "stale credentials",
        "never rotated"
      ],
      "intent_keywords": [
        "find access keys older than 90 days",
        "which access keys need rotating",
        "stale iam access keys"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "user_name"
      ]
    },
    {
      "id": "aws/iam/identity-providers",
      "title": "IAM federated identity providers",
      "description": "Inventories the SAML and OIDC identity providers registered in the account; the trusted federation surface behind assumable roles.",
      "providers": [
        "aws"
      ],
      "services": [
        "iam"
      ],
      "tags": [
        "aws",
        "iam",
        "security",
        "identity",
        "federation",
        "inventory"
      ],
      "keywords": [
        "identity provider",
        "saml",
        "oidc",
        "federation",
        "sso",
        "workload identity"
      ],
      "intent_keywords": [
        "list federated identity providers",
        "what identity providers are trusted",
        "saml and oidc providers in aws"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": []
    },
    {
      "id": "aws/iam/password-policy-cis",
      "title": "IAM account password policy vs CIS benchmark",
      "description": "Assesses the IAM account password policy against CIS AWS Foundations Benchmark password controls, returning raw values and per-control PASS/FAIL verdicts.",
      "providers": [
        "aws"
      ],
      "services": [
        "iam"
      ],
      "tags": [
        "aws",
        "iam",
        "security",
        "cspm",
        "compliance",
        "cis"
      ],
      "keywords": [
        "password policy",
        "cis benchmark",
        "account security posture",
        "compliance audit"
      ],
      "intent_keywords": [
        "check iam password policy against cis",
        "is the aws password policy compliant",
        "audit account password policy"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": []
    },
    {
      "id": "aws/iam/roles-external-trust",
      "title": "IAM roles trusting external accounts",
      "description": "Lists IAM roles whose trust policy admits principals from other AWS accounts, flagging external id and federation use; the cross-account exposure surface.",
      "providers": [
        "aws"
      ],
      "services": [
        "iam"
      ],
      "tags": [
        "aws",
        "iam",
        "security",
        "cspm",
        "identity",
        "trust"
      ],
      "keywords": [
        "cross account trust",
        "assume role policy",
        "external principal",
        "confused deputy"
      ],
      "intent_keywords": [
        "which roles can be assumed by other accounts",
        "find cross account trust relationships",
        "external principals in role trust policies"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "account_id"
      ]
    },
    {
      "id": "aws/iam/users-console-no-mfa",
      "title": "IAM users with console access and no MFA",
      "description": "Lists IAM users alongside whether they have a virtual MFA device registered; console-capable users without MFA are the finding.",
      "providers": [
        "aws"
      ],
      "services": [
        "iam"
      ],
      "tags": [
        "aws",
        "iam",
        "security",
        "cspm",
        "mfa",
        "identity"
      ],
      "keywords": [
        "mfa",
        "console access",
        "unprotected users",
        "multi factor"
      ],
      "intent_keywords": [
        "which iam users have no mfa",
        "find users without multi factor authentication",
        "console users missing mfa"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": []
    },
    {
      "id": "aws/iam/users-list",
      "title": "IAM users enumeration",
      "description": "Enumerates IAM users in the account; IAM is global and always served from us-east-1, so the query takes no parameters.",
      "providers": [
        "awscc"
      ],
      "services": [
        "iam"
      ],
      "tags": [
        "aws",
        "iam",
        "identity",
        "security",
        "inventory"
      ],
      "keywords": [
        "user list",
        "iam inventory",
        "account users"
      ],
      "intent_keywords": [
        "list iam users",
        "what users exist in the account",
        "iam user inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": []
    },
    {
      "id": "aws/lambda/function-analytics",
      "title": "Lambda fleet analytics by runtime and architecture",
      "description": "Summarises a region's Lambda functions by runtime and architecture with counts and memory totals; the runtime modernisation and Graviton migration view.",
      "providers": [
        "aws"
      ],
      "services": [
        "lambda"
      ],
      "tags": [
        "aws",
        "lambda",
        "serverless",
        "analytics",
        "inventory"
      ],
      "keywords": [
        "runtime summary",
        "graviton migration",
        "deprecated runtime",
        "fleet profile",
        "arm64"
      ],
      "intent_keywords": [
        "what runtimes are my lambdas using",
        "summarise my lambda functions",
        "how many lambdas are on arm64"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region"
      ]
    },
    {
      "id": "aws/lambda/functions-list",
      "title": "Lambda functions in a region",
      "description": "Lists Lambda functions in one region with runtime, architecture, memory, timeout and execution role in a single call.",
      "providers": [
        "aws"
      ],
      "services": [
        "lambda"
      ],
      "tags": [
        "aws",
        "lambda",
        "serverless",
        "inventory"
      ],
      "keywords": [
        "function list",
        "lambda inventory",
        "serverless functions",
        "runtime"
      ],
      "intent_keywords": [
        "list lambda functions",
        "what lambda functions exist",
        "lambda function inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region"
      ]
    },
    {
      "id": "aws/lambda/public-access-policies",
      "title": "Lambda functions with public resource policies",
      "description": "Reads a Lambda function's resource policy and flags statements granting invoke rights to a wildcard principal; the public-invoke exposure check.",
      "providers": [
        "aws"
      ],
      "services": [
        "lambda"
      ],
      "tags": [
        "aws",
        "lambda",
        "security",
        "cspm",
        "serverless"
      ],
      "keywords": [
        "resource policy",
        "public lambda",
        "wildcard principal",
        "invoke permission",
        "function url"
      ],
      "intent_keywords": [
        "which lambda functions are public",
        "lambda resource policy allowing star principal",
        "can anyone invoke my lambda"
      ],
      "mutation": false,
      "verb": "select",
      "status": "draft",
      "required_params": [
        "region",
        "function_name"
      ]
    },
    {
      "id": "aws/logs/log-group-retention-update",
      "title": "Set CloudWatch log group retention",
      "description": "Updates RetentionInDays on a CloudWatch log group via an asynchronous Cloud Control update.",
      "providers": [
        "awscc"
      ],
      "services": [
        "logs"
      ],
      "tags": [
        "aws",
        "logs",
        "cloudwatch",
        "retention",
        "mutation"
      ],
      "keywords": [
        "log retention",
        "retention policy",
        "cloud control update"
      ],
      "intent_keywords": [
        "set log group retention",
        "change cloudwatch retention days",
        "update log group retention policy"
      ],
      "mutation": true,
      "verb": "mutation",
      "status": "draft",
      "required_params": [
        "region",
        "log_group_name",
        "retention_days"
      ]
    },
    {
      "id": "aws/s3/bucket-detail",
      "title": "S3 bucket security detail",
      "description": "Full security configuration for one bucket: public access block, encryption, versioning, ownership controls and logging.",
      "providers": [
        "awscc"
      ],
      "services": [
        "s3"
      ],
      "tags": [
        "aws",
        "s3",
        "storage",
        "security"
      ],
      "keywords": [
        "bucket encryption",
        "public access block",
        "bucket versioning",
        "object ownership"
      ],
      "intent_keywords": [
        "is my bucket public",
        "bucket security settings",
        "s3 bucket detail"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region",
        "bucket_name"
      ]
    },
    {
      "id": "aws/s3/buckets-list",
      "title": "S3 buckets cheap enumeration",
      "description": "Enumerates every S3 bucket in the account with its ARN, home region and creation date in one account-global call.",
      "providers": [
        "aws"
      ],
      "services": [
        "s3"
      ],
      "tags": [
        "aws",
        "s3",
        "storage",
        "inventory"
      ],
      "keywords": [
        "bucket list",
        "s3 inventory",
        "list buckets",
        "bucket region"
      ],
      "intent_keywords": [
        "list all s3 buckets",
        "bucket inventory",
        "enumerate buckets"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": []
    },
    {
      "id": "aws/s3/public-access-audit",
      "title": "S3 bucket public access block audit",
      "description": "Reports the four block-public-access settings plus object ownership for a bucket; any flag returning 0 leaves a public exposure path open.",
      "providers": [
        "awscc"
      ],
      "services": [
        "s3"
      ],
      "tags": [
        "aws",
        "s3",
        "security",
        "cspm",
        "storage"
      ],
      "keywords": [
        "public bucket",
        "block public access",
        "public acl",
        "bucket policy status",
        "exposure"
      ],
      "intent_keywords": [
        "which s3 buckets are public",
        "find buckets with public access block disabled",
        "s3 buckets with public acls or policies"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region",
        "bucket_name"
      ]
    },
    {
      "id": "aws/tagging/resources-by-tag",
      "title": "Find AWS resource identifiers by tag",
      "description": "Resolves identifiers for ID-centric AWS resource types by querying the tagging API with a resource type and tag filter; returns ARNs, extracted ids and tags.",
      "providers": [
        "awscc"
      ],
      "services": [
        "tagging"
      ],
      "tags": [
        "aws",
        "tagging",
        "identifiers",
        "inventory"
      ],
      "keywords": [
        "tagged resources",
        "resource arn",
        "tag filters",
        "id centric",
        "find by tag"
      ],
      "intent_keywords": [
        "find aws resources by tag",
        "get vpc id from tags",
        "look up resource ids by tag"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "region",
        "resource_type",
        "tag_key",
        "tag_value"
      ]
    },
    {
      "id": "azure/compute/vm-custom-script-extension",
      "title": "Azure VM custom script extension",
      "description": "Runs a shell command on an existing VM via the CustomScript extension, and lists the extensions installed on a VM; the way to load content onto a server after provisioning.",
      "providers": [
        "azure"
      ],
      "services": [
        "compute"
      ],
      "tags": [
        "azure",
        "compute",
        "vms",
        "extension",
        "bootstrap"
      ],
      "keywords": [
        "custom script",
        "vm extension",
        "bootstrap vm",
        "run command on vm",
        "install software"
      ],
      "intent_keywords": [
        "run a script on an azure vm",
        "install software on a vm after creation",
        "list vm extensions"
      ],
      "mutation": false,
      "verb": "select",
      "status": "draft",
      "required_params": [
        "subscription_id",
        "resource_group_name",
        "vm_name"
      ]
    },
    {
      "id": "azure/compute/vms-by-subscription",
      "title": "Azure VMs in a subscription",
      "description": "Lists virtual machines across a subscription with name, location, provisioning state and the profiles describing size, image and networking.",
      "providers": [
        "azure"
      ],
      "services": [
        "compute"
      ],
      "tags": [
        "azure",
        "compute",
        "vms",
        "inventory"
      ],
      "keywords": [
        "vm list",
        "virtual machine inventory",
        "azure vms",
        "vm size"
      ],
      "intent_keywords": [
        "list azure vms",
        "what virtual machines exist in my subscription",
        "azure vm inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "subscription_id"
      ]
    },
    {
      "id": "azure/cosmosdb/table-lifecycle",
      "title": "Azure Cosmos DB table lifecycle",
      "description": "Provisions a serverless Cosmos DB account with the Table API, creates and lists tables, and tears them down; the control-plane half of a Table workload.",
      "providers": [
        "azure"
      ],
      "services": [
        "cosmosdb"
      ],
      "tags": [
        "azure",
        "cosmosdb",
        "table",
        "nosql",
        "lifecycle"
      ],
      "keywords": [
        "cosmos db",
        "table api",
        "serverless cosmos",
        "create table",
        "database account"
      ],
      "intent_keywords": [
        "create a cosmos db table",
        "list cosmos db tables",
        "provision a serverless cosmos account"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "subscription_id",
        "resource_group_name",
        "account_name"
      ]
    },
    {
      "id": "azure/network/public-ip-provision",
      "title": "Azure public IP address provisioning",
      "description": "Lists public IP addresses in a resource group, and creates or deletes a static Standard SKU address for attaching to a NIC or load balancer.",
      "providers": [
        "azure"
      ],
      "services": [
        "network"
      ],
      "tags": [
        "azure",
        "network",
        "public-ip",
        "lifecycle",
        "inventory"
      ],
      "keywords": [
        "public ip",
        "static ip",
        "ip allocation",
        "standard sku",
        "exposed address"
      ],
      "intent_keywords": [
        "list azure public ip addresses",
        "create a static public ip",
        "which public ips are allocated"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "subscription_id",
        "resource_group_name"
      ]
    },
    {
      "id": "azure/network/vnet-subnet-provision",
      "title": "Azure virtual network and subnet provisioning",
      "description": "Creates a virtual network and subnet, and lists them with their address ranges; the network substrate VMs and private endpoints attach to.",
      "providers": [
        "azure"
      ],
      "services": [
        "network"
      ],
      "tags": [
        "azure",
        "network",
        "vnet",
        "subnet",
        "lifecycle"
      ],
      "keywords": [
        "virtual network",
        "vnet",
        "subnet",
        "address prefix",
        "cidr"
      ],
      "intent_keywords": [
        "list azure virtual networks",
        "create a vnet and subnet",
        "what subnets exist in my vnet"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "subscription_id",
        "resource_group_name"
      ]
    },
    {
      "id": "azure/resource/resource-groups-lifecycle",
      "title": "Azure resource group lifecycle",
      "description": "Lists resource groups in a subscription, and creates or deletes one; the container every other Azure resource lives in.",
      "providers": [
        "azure"
      ],
      "services": [
        "resource"
      ],
      "tags": [
        "azure",
        "resource",
        "inventory",
        "lifecycle"
      ],
      "keywords": [
        "resource group",
        "rg list",
        "create resource group",
        "delete resource group"
      ],
      "intent_keywords": [
        "list azure resource groups",
        "create a resource group",
        "delete a resource group"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "subscription_id"
      ]
    },
    {
      "id": "azure/storage/storage-account-provision",
      "title": "Azure storage account and blob container provisioning",
      "description": "Lists storage accounts in a subscription, and creates an account with a private blob container; the object storage substrate.",
      "providers": [
        "azure"
      ],
      "services": [
        "storage"
      ],
      "tags": [
        "azure",
        "storage",
        "blob",
        "lifecycle",
        "inventory"
      ],
      "keywords": [
        "storage account",
        "blob container",
        "create storage",
        "object storage"
      ],
      "intent_keywords": [
        "list azure storage accounts",
        "create a storage account",
        "create a blob container"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "subscription_id"
      ]
    },
    {
      "id": "azure/subscription/subscriptions-list",
      "title": "Azure subscription detail",
      "description": "Reads a subscription's name and state; requires owner-level rights, so most service principals cannot call it.",
      "providers": [
        "azure"
      ],
      "services": [
        "subscription"
      ],
      "tags": [
        "azure",
        "subscriptions",
        "inventory"
      ],
      "keywords": [
        "subscription list",
        "tenant subscriptions",
        "subscription state"
      ],
      "intent_keywords": [
        "list azure subscriptions",
        "enumerate subscriptions",
        "what subscriptions can i see"
      ],
      "mutation": false,
      "verb": "select",
      "status": "draft",
      "required_params": [
        "subscription_id"
      ]
    },
    {
      "id": "cloudflare/accounts/api-token-lifecycle",
      "title": "Cloudflare API token creation and scope management",
      "description": "Looks up permission group ids by name and mints or rescopes an account API token from them; builds least-privilege tokens without hardcoding UUIDs.",
      "providers": [
        "cloudflare"
      ],
      "services": [
        "accounts"
      ],
      "tags": [
        "cloudflare",
        "accounts",
        "security",
        "identity",
        "tokens"
      ],
      "keywords": [
        "api token",
        "permission groups",
        "least privilege",
        "token scopes",
        "rotate token"
      ],
      "intent_keywords": [
        "create a cloudflare api token",
        "what permission groups are available",
        "change the scopes on an api token"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "account_id"
      ]
    },
    {
      "id": "cloudflare/ips/edge-ip-ranges",
      "title": "Cloudflare edge IP ranges",
      "description": "Returns Cloudflare's published IPv4 and IPv6 edge ranges as one CIDR per row; the source list for origin firewall allowlists.",
      "providers": [
        "cloudflare"
      ],
      "services": [
        "ips"
      ],
      "tags": [
        "cloudflare",
        "network",
        "security",
        "allowlist",
        "reference"
      ],
      "keywords": [
        "cloudflare ip ranges",
        "edge ips",
        "origin allowlist",
        "cidr",
        "firewall rules"
      ],
      "intent_keywords": [
        "what are cloudflare's ip ranges",
        "cloudflare ips to allowlist on my origin",
        "cloudflare edge cidr list"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": []
    },
    {
      "id": "cloudflare/kv/kv-lifecycle",
      "title": "Cloudflare KV namespace and value lifecycle",
      "description": "Creates a KV namespace, writes and reads a value, lists keys and deletes both; the full control-plane to data-plane cycle in one surface.",
      "providers": [
        "cloudflare"
      ],
      "services": [
        "kv"
      ],
      "tags": [
        "cloudflare",
        "kv",
        "storage",
        "lifecycle",
        "dataplane"
      ],
      "keywords": [
        "workers kv",
        "key value store",
        "kv namespace",
        "write value",
        "read value"
      ],
      "intent_keywords": [
        "list cloudflare kv namespaces",
        "write a value to kv",
        "read a kv key"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "account_id",
        "namespace_id"
      ]
    },
    {
      "id": "cloudflare/rulesets/rate-limit-ruleset",
      "title": "Cloudflare rate limit ruleset",
      "description": "Reads the rate limiting rules on a zone's http_ratelimit phase, and sets or clears them; the entrypoint ruleset pattern used for edge throttling.",
      "providers": [
        "cloudflare"
      ],
      "services": [
        "rulesets"
      ],
      "tags": [
        "cloudflare",
        "rulesets",
        "rate-limit",
        "security",
        "edge"
      ],
      "keywords": [
        "rate limiting",
        "ruleset phase",
        "throttle",
        "http_ratelimit",
        "entrypoint ruleset"
      ],
      "intent_keywords": [
        "show my cloudflare rate limit rules",
        "set a rate limit on a zone",
        "is rate limiting configured"
      ],
      "mutation": false,
      "verb": "select",
      "status": "draft",
      "required_params": [
        "zone_id"
      ]
    },
    {
      "id": "cloudflare/zones/http-analytics",
      "title": "Cloudflare HTTP request analytics by country and status",
      "description": "Returns HTTP request volume for a zone grouped by minute, country, method and response status; the GraphQL analytics replacement for the sunset dashboard endpoint.",
      "providers": [
        "cloudflare"
      ],
      "services": [
        "zones"
      ],
      "tags": [
        "cloudflare",
        "analytics",
        "zones",
        "traffic",
        "graphql"
      ],
      "keywords": [
        "http analytics",
        "requests by country",
        "traffic analysis",
        "adaptive groups",
        "edge status"
      ],
      "intent_keywords": [
        "how much traffic is my site getting",
        "cloudflare requests by country",
        "http status code breakdown"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "zone_tag",
        "since",
        "until"
      ]
    },
    {
      "id": "cloudflare/zones/zones-list",
      "title": "Cloudflare zones",
      "description": "Lists all Cloudflare zones visible to the API token with status and pause state; the zone id keys every per-zone API.",
      "providers": [
        "cloudflare"
      ],
      "services": [
        "zones"
      ],
      "tags": [
        "cloudflare",
        "dns",
        "zones",
        "inventory"
      ],
      "keywords": [
        "zone list",
        "domains on cloudflare",
        "dns zones",
        "zone id"
      ],
      "intent_keywords": [
        "list cloudflare zones",
        "what domains are on cloudflare",
        "cloudflare zone inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": []
    },
    {
      "id": "databricks/iam/workspace-assignments",
      "title": "Databricks workspace access assignments",
      "description": "Lists the principals assigned to a Databricks workspace with their permission level, resolving users, groups and service principals into one view.",
      "providers": [
        "databricks_account"
      ],
      "services": [
        "iam"
      ],
      "tags": [
        "databricks",
        "iam",
        "security",
        "identity",
        "access",
        "views"
      ],
      "keywords": [
        "workspace assignment",
        "who has access",
        "admin permission",
        "service principal",
        "entitlements"
      ],
      "intent_keywords": [
        "who has access to my databricks workspace",
        "list workspace admins",
        "databricks workspace permissions"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "account_id",
        "workspace_id"
      ]
    },
    {
      "id": "databricks/provisioning/account-infrastructure",
      "title": "Databricks account credentials and storage configurations",
      "description": "Lists the cross-account credentials and root storage configurations registered in a Databricks account; the prerequisites a workspace is built from.",
      "providers": [
        "databricks_account"
      ],
      "services": [
        "provisioning"
      ],
      "tags": [
        "databricks",
        "provisioning",
        "inventory",
        "iam",
        "views"
      ],
      "keywords": [
        "cross account role",
        "credentials id",
        "storage configuration",
        "root bucket",
        "workspace prerequisites"
      ],
      "intent_keywords": [
        "list databricks credentials",
        "what storage configurations exist",
        "databricks cross account roles"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "account_id"
      ]
    },
    {
      "id": "databricks/provisioning/workspaces-list",
      "title": "Databricks workspaces in an account",
      "description": "Lists Databricks workspaces via the provider's vw_workspaces view with status, cloud placement and pricing tier; the account-level inventory entry point.",
      "providers": [
        "databricks_account"
      ],
      "services": [
        "provisioning"
      ],
      "tags": [
        "databricks",
        "workspaces",
        "inventory",
        "views"
      ],
      "keywords": [
        "workspace list",
        "databricks account",
        "workspace inventory",
        "provisioning status"
      ],
      "intent_keywords": [
        "list databricks workspaces",
        "what workspaces exist in my databricks account",
        "databricks workspace inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "account_id"
      ]
    },
    {
      "id": "github/issues/issue-velocity",
      "title": "GitHub issue creation velocity",
      "description": "Sequences a repository's issues by creation date with a cumulative count and the gap since the previous issue; the intake rate and quiet-period view.",
      "providers": [
        "github"
      ],
      "services": [
        "issues"
      ],
      "tags": [
        "github",
        "issues",
        "analytics",
        "velocity",
        "community"
      ],
      "keywords": [
        "issue velocity",
        "issue growth",
        "intake rate",
        "backlog growth",
        "time between issues"
      ],
      "intent_keywords": [
        "how fast are issues being raised",
        "issue growth over time",
        "gaps between issue reports"
      ],
      "mutation": false,
      "verb": "select",
      "status": "draft",
      "required_params": [
        "owner",
        "repo"
      ]
    },
    {
      "id": "github/repos/commit-activity-trend",
      "title": "GitHub weekly commit activity trend",
      "description": "Reports the last year of weekly commit counts with a four-week moving average and cumulative total; the project momentum view.",
      "providers": [
        "github"
      ],
      "services": [
        "repos"
      ],
      "tags": [
        "github",
        "repos",
        "analytics",
        "activity",
        "delivery"
      ],
      "keywords": [
        "commit activity",
        "moving average",
        "project momentum",
        "weekly commits",
        "trend"
      ],
      "intent_keywords": [
        "how active is this repository",
        "commit trend over time",
        "weekly commit activity"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "owner",
        "repo"
      ]
    },
    {
      "id": "github/repos/contributor-analytics",
      "title": "GitHub contributor ranking and concentration",
      "description": "Ranks a repository's contributors by commit count with running totals and share of the whole; the bus-factor and contribution concentration view.",
      "providers": [
        "github"
      ],
      "services": [
        "repos"
      ],
      "tags": [
        "github",
        "repos",
        "analytics",
        "contributors",
        "community"
      ],
      "keywords": [
        "contributor ranking",
        "bus factor",
        "contribution concentration",
        "top contributors",
        "window functions"
      ],
      "intent_keywords": [
        "who are the top contributors to this repo",
        "how concentrated are contributions",
        "rank contributors by commits"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "owner",
        "repo"
      ]
    },
    {
      "id": "github/repos/org-repos-list",
      "title": "GitHub repositories in an organization",
      "description": "Lists all repositories in a GitHub organization with visibility, archive state and activity signals, filtered and sorted server-side.",
      "providers": [
        "github"
      ],
      "services": [
        "repos"
      ],
      "tags": [
        "github",
        "repos",
        "inventory"
      ],
      "keywords": [
        "repo list",
        "org repositories",
        "repository inventory",
        "stale repos",
        "forks"
      ],
      "intent_keywords": [
        "list repos in my github org",
        "what repositories does the organization have",
        "github repository inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "org"
      ]
    },
    {
      "id": "github/repos/release-cadence",
      "title": "GitHub release cadence and gaps",
      "description": "Lists a repository's releases with the previous and next tag alongside the interval between them; the shipping rhythm and release drought view.",
      "providers": [
        "github"
      ],
      "services": [
        "repos"
      ],
      "tags": [
        "github",
        "repos",
        "analytics",
        "releases",
        "delivery"
      ],
      "keywords": [
        "release cadence",
        "time between releases",
        "release gap",
        "shipping frequency",
        "lag lead"
      ],
      "intent_keywords": [
        "how often does this repo release",
        "time between releases",
        "when was the last release"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "owner",
        "repo"
      ]
    },
    {
      "id": "google/cloudresourcemanager/projects-by-parent",
      "title": "GCP projects under an org or folder",
      "description": "Lists projects directly under a parent organization or folder with state, display name and labels; the fan-out dimension for any org-wide GCP audit.",
      "providers": [
        "google"
      ],
      "services": [
        "cloudresourcemanager"
      ],
      "tags": [
        "google",
        "gcp",
        "projects",
        "inventory"
      ],
      "keywords": [
        "project list",
        "org descent",
        "gcp projects",
        "project state"
      ],
      "intent_keywords": [
        "list gcp projects",
        "projects in my organization",
        "enumerate google projects"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "parent"
      ]
    },
    {
      "id": "google/compute/instances-by-zone",
      "title": "GCE instances in a project",
      "description": "Lists Compute Engine instances across every zone in a project in one call, with status, machine type and placement.",
      "providers": [
        "google"
      ],
      "services": [
        "compute"
      ],
      "tags": [
        "google",
        "gcp",
        "compute",
        "inventory"
      ],
      "keywords": [
        "gce inventory",
        "vm list",
        "compute instances",
        "aggregated list"
      ],
      "intent_keywords": [
        "list gce instances",
        "what vms are running in gcp",
        "compute engine instance inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "project"
      ]
    },
    {
      "id": "google/iam/service-accounts-by-project",
      "title": "GCP service accounts in a project",
      "description": "Lists IAM service accounts in one project with email, display name and unique id; the workload principal inventory for a privilege audit.",
      "providers": [
        "google"
      ],
      "services": [
        "iam"
      ],
      "tags": [
        "google",
        "gcp",
        "iam",
        "identity",
        "security",
        "inventory"
      ],
      "keywords": [
        "service account list",
        "robot accounts",
        "sa inventory",
        "workload identity"
      ],
      "intent_keywords": [
        "list gcp service accounts",
        "what service accounts exist",
        "service account inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "project"
      ]
    },
    {
      "id": "google/storage/buckets-by-project",
      "title": "GCS buckets in a project",
      "description": "Lists Cloud Storage buckets in one project with location, storage class and creation time; the per-project storage inventory.",
      "providers": [
        "google"
      ],
      "services": [
        "storage"
      ],
      "tags": [
        "google",
        "gcp",
        "storage",
        "inventory"
      ],
      "keywords": [
        "gcs inventory",
        "bucket list",
        "cloud storage buckets",
        "storage class"
      ],
      "intent_keywords": [
        "list gcs buckets",
        "what buckets exist in my project",
        "cloud storage bucket inventory"
      ],
      "mutation": false,
      "verb": "select",
      "status": "stable",
      "required_params": [
        "project"
      ]
    }
  ]
}