depends_on

Graph · From docs/MCP_TOOLS.md on GitHub

Category graph · sensitivity confidential · capabilities read_state · readOnly true, destructive false, idempotent true, openWorld false · outputSchema yes · timeout: layer default (300 s)

Everything one asset needs, breadth-first over the dependency graph: its role, keys, image, subnet, log group, the queue or API that invokes it. Each item is an asset brief plus via (edge type), relationship, depth and parent_id (the node it was reached from). Returns asset, total, returned, truncated and items.

Argument	Type	Default	Constraints	Description
ref	string	required	min length 1	Asset reference: internal id, ARN / cloud resource id, unique name, or unique ARN tail (e.g. 'function:api' or 'i-0abc').
max_depth	integer	3	1..15	Depth limit for the upstream walk.
limit	integer	100	1..500	Maximum items returned.
dataset	string	""		Dataset name (see list_datasets). Empty = the active dataset.

Called with the arguments below, depends_on returned this structuredContent.

{"ref": "api-handler"}

{
  "dataset": "sample",
  "asset": {
    "id": "api-handler",
    "name": "api-handler",
    "type": "LAMBDA_FUNCTION",
    "provider": "AWS",
    "region": "us-east-1",
    "account_id": "111111111111",
    "arn": "arn:aws:lambda:us-east-1:111111111111:function:api-handler",
    "internet_exposed": false,
    "open_findings": 1,
    "max_severity": "LOW",
    "uri": "cloudg://assets/api-handler"
  },
  "total": 7,
  "returned": 7,
  "truncated": false,
  "items": [
    {
      "id": "api-gw",
      "name": "public-api",
      "type": "API_GATEWAY",
      "provider": "AWS",
      "region": "us-east-1",
      "account_id": "111111111111",
      "arn": "arn:aws:apigateway:us-east-1::/restapis/a1b2c3",
      "internet_exposed": true,
      "open_findings": 0,
      "max_severity": null,
      "uri": "cloudg://assets/api-gw",
      "via": "INVOKES",
      "relationship": null,
      "depth": 1,
      "parent_id": "api-handler"
    },
    {
      "id": "data-bucket",
      "name": "prod-data",
      "type": "S3_BUCKET",
      "provider": "AWS",
      "region": "us-east-1",
      "account_id": "111111111111",
      "arn": "arn:aws:s3:::prod-data",
      "internet_exposed": false,
      "open_findings": 0,
      "max_severity": null,
      "uri": "cloudg://assets/data-bucket",
      "via": "INVOKES",
      "relationship": "TRIGGERED_BY",
      "depth": 1,
      "parent_id": "api-handler"
    },
    "... 5 more"
  ]
}