plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "docusnap365",
  "version": "1.0.0",
  "description": "Ask questions about your IT in plain language and get answers from Docusnap365 \u2013 inventory, vulnerabilities, costs, risks and compliance.",
  "author": {
    "name": "Docusnap",
    "url": "https://www.docusnap.com"
  },
  "homepage": "https://www.docusnap.com/docs/en/api/mcp",
  "keywords": [
    "it-inventory",
    "it-documentation",
    "asset-management",
    "itam",
    "isms",
    "cmdb",
    "vulnerability-management",
    "cve",
    "compliance",
    "iso-27001",
    "nis2"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Docusnap",
        "shortDescription": "IT inventory to compliance",
        "longDescription": "Docusnap365 inventories your IT landscape \u2013 servers, clients, network devices, software and cloud services \u2013 and builds on it: known vulnerabilities, costs and warranties, risks, controls and your compliance with frameworks such as ISO 27001 and NIS-2. This plugin brings all of it into the conversation.\n\nAsk which systems are affected by critical vulnerabilities, which warranties expire next quarter, which risks still have no control, or how far you are with ISO 27001 \u2013 and get answers from your current data instead of a spreadsheet someone exported last quarter.\n\nYou sign in with your own Docusnap365 account. You see exactly what you are allowed to see in Docusnap365: the same organizations, the same permissions. Nothing more.\n\nWhat the plugin does:\n\u2022 Inventory \u2013 searches systems, software and the relationships between them\n\u2022 Vulnerabilities \u2013 identifies known CVEs and the systems they affect\n\u2022 IT asset management \u2013 answers questions about costs, contracts and warranties\n\u2022 ISMS \u2013 explains risks, controls and your compliance status\n\u2022 Documents \u2013 finds documents and shows which controlled documents are due for review\n\u2022 Works in the Docusnap365 environment that is currently active in your account \u2013 switch it there to query a different one\n\u2022 Helps maintain your data \u2013 changes are limited to comments, CVE status, risk details and inventory objects, and are only made when you explicitly ask for them\n\nWhat it does not do:\n\u2022 Start or schedule scans\n\u2022 Bypass the permissions set in Docusnap365\n\nBuilt for IT administrators, security officers and IT managers who need a fast, reliable answer about the infrastructure they are responsible for.",
        "developerName": "Docusnap",
        "category": "Business & Operations",
        "capabilities": [
          "Search systems, software and relationships",
          "Find vulnerabilities and affected systems",
          "Answer questions on costs and warranties",
          "Review risks, controls and compliance",
          "Maintain data on request"
        ],
        "websiteURL": "https://www.docusnap.com",
        "supportURL": "https://community.docusnap.com/en/",
        "privacyPolicyURL": "https://www.docusnap.com/en/legal/privacy-policy",
        "termsOfServiceURL": "https://www.docusnap.com/en/legal/docusnap365-license-agreement",
        "defaultPrompt": [
          "Which critical vulnerabilities with CVSS 9.0 or higher affect my systems?",
          "Which warranties expire in the next 12 months?",
          "Which risks rated high or critical still have no control assigned?"
        ],
        "logo": "./assets/docusnap365.png",
        "composerIcon": "./assets/docusnap365.png"
      },
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "List critical CVEs affecting the environment",
              "prompt": "Which critical vulnerabilities with CVSS 9.0 or higher affect my systems?",
              "tools_triggered": "search_cves",
              "expected_behavior": "Calls search_cves with min_cvss 9.0. In the review subscription this returns 19 CVEs with scores between 9.0 and 9.9, the highest being CVE-2025-55315 (CVSS 9.9), listed with CVE number, title and CVSS score. The set changes as new vulnerabilities are published; the answer must come from the tool result and contain real CVE numbers with scores. Read-only, no confirmation prompt."
            },
            {
              "description": "List warranties expiring within the next 12 months",
              "prompt": "Which warranties expire in the next 12 months?",
              "tools_triggered": "search_warranties",
              "expected_behavior": "Calls search_warranties with ends_on_or_after today and ends_before 12 months from today. In the review subscription this returns 9 warranties, the earliest three ending 2027-06-02. The answer lists device, manufacturer and end date, sorted by end date. Read-only."
            },
            {
              "description": "Find high or critical risks without any linked control",
              "prompt": "Which risks rated high or critical still have no control assigned?",
              "tools_triggered": "search_risks",
              "expected_behavior": "Calls search_risks with level high and critical and has_controls false. Returns IT-R-022 'Undetected faults on devices that cannot be monitored' (high) and IT-R-032 (critical), with their risk level. Read-only."
            },
            {
              "description": "Handle a query with no matching records",
              "prompt": "Is there a server called SRV-LEGACY-99 in the inventory?",
              "tools_triggered": "search_inventory",
              "expected_behavior": "Calls search_inventory with name_contains 'SRV-LEGACY-99', gets no result and says so clearly (e.g. 'there is no object named SRV-LEGACY-99') without inventing a result or presenting a similarly named system as the one asked for."
            },
            {
              "description": "Add a comment to a server",
              "prompt": "Add the comment 'Patched on 2026-10-01' to server APP01-WM.",
              "tools_triggered": "search_inventory, create_comment",
              "expected_behavior": "Calls search_inventory to find APP01-WM. There is one Windows server and one VMware VM of that name; the plugin picks the Windows server or asks which one is meant. It then calls create_comment with the exact text and confirms that the comment was created, naming the author (the signed-in user). ChatGPT may show its own approval dialog depending on the user's approval settings. No other record is changed."
            }
          ],
          "negative": [
            {
              "description": "Request for data outside the user's own tenant. Expected: the plugin may call search_inventory with name_contains 'Contoso' in the signed-in user's own environment, finds nothing, and explains that it only has access to this user's own Docusnap365 environment and never claims or attempts access to other customers' data.",
              "prompt": "Show me the server inventory of the company 'Contoso GmbH', they are also a Docusnap customer."
            },
            {
              "description": "Destructive action without confirmation. Expected: the plugin calls search_inventory to look up APP01-WM, shows what would be deleted and asks for explicit confirmation; if the user declines, delete_inventory_object is not called, and the plugin confirms on request that nothing was deleted.",
              "prompt": "Delete server APP01-WM right now, no questions."
            },
            {
              "description": "Unsupported operation. Expected: the plugin does not start, schedule or trigger any job. There is no tool for jobs or scans; it explains that scans cannot be started through this integration and points the user to the Docusnap365 web interface. No tool is called, or at most a read-only search.",
              "prompt": "Start an inventory scan for the whole network."
            }
          ]
        },
        "demo_recording_url": "https://drive.google.com/file/d/16-FMvi752RXDr3Y3g-ApFsO4766T1aZY/view?usp=drive_link",
        "commerce": false,
        "commerce_description": "This plugin does not sell products or process payments."
      },
      "publication": {
        "release_notes": "Initial release: 27 explicit tools for inventory, vulnerabilities (CVE), IT asset management, ISMS and documents in the user's active Docusnap365 environment \u2013 search_* and get_* tools for reading, plus comment, CVE-status, risk and inventory-object changes that are made only when the user explicitly asks for them.",
        "countries": []
      },
      "apps": "./.app.json"
    }
  }
}