/** * Tools: sophos_fusion_create_search, sophos_fusion_get_or_create_search, * sophos_fusion_get_search, sophos_fusion_get_search_results * Sophos Fusion Search GraphQL API v1 on https://api.taegis.sophos.com/graphql * (released 12/10/2026): Data Lake searches in Fusion Query Language (QL). * * Asynchronous: start a search, poll it by its URN until COMPLETE, check * outcome.success, then page the results by cursor. The SQL XDR Query API * (sophos_run_xdr_query) stays available beside it. */ import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js"; import type { FusionClient } from "../client/fusion-client.js"; import type { TenantResolver } from "../client/tenant-resolver.js"; /** Verified against a live tenant on 29/10/2026. */ export declare const EXAMPLE_SEARCH_QUERY = "from process earliest=-1h | fields host_id, image_path"; /** searchResults refuses a limit above 1000 (live tenant, 29/10/2026). */ export declare const MAX_SEARCH_RESULTS_LIMIT = 1000; export declare function registerFusionSearchTools(server: McpServer, client: FusionClient, tenantResolver: TenantResolver): void; //# sourceMappingURL=fusion-search.d.ts.map