SentinelOne
Endpoint detection and response operations for agents, isolation, threats, and incidents.
Tools
| Name | Description |
|---|---|
list_agentsList SentinelOne agents with bounded pagination and optional site/group filters. | List SentinelOne agents with bounded pagination and optional site/group filters. |
get_agentGet a SentinelOne agent by exact agent ID. | Get a SentinelOne agent by exact agent ID. |
set_agent_isolationIsolate or de-isolate exact SentinelOne agent IDs. | Isolate or de-isolate exact SentinelOne agent IDs. |
list_threatsList SentinelOne threats for triage with optional mitigation and incident filters. | List SentinelOne threats for triage with optional mitigation and incident filters. |
update_threat_incidentUpdate SentinelOne threat incident status for exact threat IDs. | Update SentinelOne threat incident status for exact threat IDs. |
Triggers
| Name | Description |
|---|---|
new_threatTriggers when SentinelOne threat polling observes a new threat after the first baseline run. | Triggers when SentinelOne threat polling observes a new threat after the first baseline run. |
Quick Start
import { WeavzClient } from '@weavz-io/sdk'
const weavz = new WeavzClient({ apiKey: 'wvz_...' })
const result = await weavz.actions.execute('sentinelone', 'list_agents', {
workspaceId: '550e8400-e29b-41d4-a716-446655440000',
integrationAlias: 'sentinelone',
input: { /* ... */ },
})Related Integrations
Works well with
Frequently Asked Questions
How do I connect SentinelOne to my app?
Use Weavz Hosted Connect for Custom authentication. Install the SDK, create a connection through the connect portal or API, then execute tools programmatically.
What tools does SentinelOne support?
SentinelOne supports 5 tools including List Agents, Get Agent, Set Agent Isolation, List Threats, Update Threat Incident.
Can I use SentinelOne with AI agents?
Yes. Add SentinelOne to an MCP server in Tool Mode or Code Mode. Code Mode provides 3 meta-tools with on-demand API discovery so agents can compose stateful workflows without loading every action schema up front.
Can SentinelOne be used in stateful agent workflows?
Yes. Agents can combine SentinelOne tools with Filesystem, State KV, Human Gates, input partials, and other workspace integrations while keeping execution scoped to the selected workspace or end user.
What authentication does SentinelOne use?
SentinelOne uses Custom. Weavz stores credentials securely and uses them for authorized action execution.
How much does the SentinelOne integration cost?
The SentinelOne integration is included on all Weavz plans including the free tier with 20,000 actions per month. No credit card required.
What triggers does SentinelOne support?
SentinelOne supports 1 triggers including New Threat.
Connect SentinelOne in minutes
Get 20,000 free action executions every month. No credit card required.