Graph Correlate
graph_correlateCombine multiple scan snapshots into one bounded, provenance-rich correlation snapshot with freshness bounds and an audit trail.
Instructions
Create one bounded, provenance-rich correlation snapshot.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Human-readable correlation run name. | |
| reason | Yes | Human audit reason for creating the correlation. | |
| scan_ids | Yes | Two to 32 exact immutable source snapshot ids. | |
| tenant_id | No | Tenant scope bound by MCP authentication context. | default |
| allow_stale | No | Admit stale evidence while preserving its stale label. | |
| max_age_hours | Yes | Required source-evidence freshness bound in hours. | |
| operator_role | No | Operator role for this write action (audit). | viewer |
| idempotency_key | Yes | Caller-stable retry key for this exact correlation request. | |
| operator_scopes | No | Comma-separated operator scopes (audit). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |