[Acronis Cyber Protect Cloud] Create an alert. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] Dismiss an alert by ID. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] Dismiss the alerts by filter. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts show_deleted_only, source, source_time_stamp, type, updated_at, created_at, category, planId, resourceId, planName, resourceName here. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] Fetch an alert by ID. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal).

[Acronis Cyber Protect Cloud] Fetch alert counters. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal).

[Acronis Cyber Protect Cloud] Fetch resources containing the highest severity alerts. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal).

[Acronis Cyber Protect Cloud] Fetch an alert type by ID. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal).

[Acronis Cyber Protect Cloud] Get count of active alerts and last modification time. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal).

[Acronis Cyber Protect Cloud] Fetch alerts grouped by scope. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). Acronis REQUIRES scopeKey on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] Fetch partner's customer alerts count. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts show_deleted_only, source, source_time_stamp, type, updated_at, created_at, category, planId, resourceId, planName, resourceName here.

[Acronis Cyber Protect Cloud] Fetch categories. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal).

[Acronis Cyber Protect Cloud] Fetch all alert types. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal).

[Acronis Cyber Protect Cloud] Fetch all alerts. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Pass limit to bound the result set (capped at 1000). Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts show_deleted, show_deleted_only, source, source_time_stamp, type, updated_at, created_at, category, planId, resourceId, planName, resourceName, order here.

[Acronis Cyber Protect Cloud] Fetch alerts grouped per customer. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). Acronis REQUIRES customerId on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts show_deleted, show_deleted_only, source, source_time_stamp, type, updated_at, created_at, category, planId, resourceId, planName, resourceName here.

[Acronis Cyber Protect Cloud] Mark alert as false positive. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] Register new alert type. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] Unregister an alert type by ID. Served by the Alert Manager API (partner-wide and per-customer alert roll-ups, alert types and dismissal). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] Fetch an activity. Served by the Task Management API (backup tasks and activities, which is how you answer "did last night's backup run and did it succeed").

[Acronis Cyber Protect Cloud] Fetch a task. Served by the Task Management API (backup tasks and activities, which is how you answer "did last night's backup run and did it succeed").

[Acronis Cyber Protect Cloud] Fetch a list of activities. Served by the Task Management API (backup tasks and activities, which is how you answer "did last night's backup run and did it succeed"). Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts startedBy, policyId, policyName, policyType, resourceId, resourceName, resourceType, taskId, workflowId, parentActivityId, state, resultCode, createdAt, startedAt, and more here.

[Acronis Cyber Protect Cloud] Fetch a list of tasks. Served by the Task Management API (backup tasks and activities, which is how you answer "did last night's backup run and did it succeed"). Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts type, queue, priority, startedBy, policyId, policyName, policyType, resourceId, resourceName, resourceType, workflowId, state, resultCode, enqueuedAt, and more here.

[Acronis Cyber Protect Cloud] DESTRUCTIVE: this deregisters ONE protection agent, named by the agentId path parameter. The agent is removed from Acronis and the machine stops being protected until an operator reinstalls and re-registers it; nothing in StackJack can put it back. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates). Get the agentId from acronis_list_agents and confirm the machine name in that response before you call this. acronis_delete_agent_by_id performs the same deregistration through the agent collection, with id in the query string, and the two are equivalent. Set force to true only when you have accepted that the last agent protecting a resource is going away.

[Acronis Cyber Protect Cloud] DESTRUCTIVE: this deregisters ONE protection agent, named by the required id query parameter. The agent is removed from Acronis and the machine stops being protected until an operator reinstalls and re-registers it; nothing in StackJack can put it back. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates). Acronis REQUIRES id on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave it blank. Get the id from acronis_list_agents and confirm the machine name in that response before you call this. Acronis publishes this as a filtered DELETE on the agent collection, but id is the only selector it accepts and the vendor requires it. acronis_delete_agent performs the same deregistration through the path-scoped endpoint and the two are equivalent. Set force to true only when you have accepted that the last agent protecting a resource is going away.

[Acronis Cyber Protect Cloud] DeleteAgentUpdateSettings. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DeleteAgentUpdateSettingsCollection. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates). Acronis REQUIRES id on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] RunAgentUpdateNow. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] FetchAgent. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates).

[Acronis Cyber Protect Cloud] FetchAgentUpdateSettings. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates).

[Acronis Cyber Protect Cloud] FetchHardwareNode. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates).

[Acronis Cyber Protect Cloud] FetchAgentUpdateReferenceByAttributes. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates). Acronis REQUIRES updateChannel, osFamily, osArch on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] FetchAgents. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts up_to_date here.

[Acronis Cyber Protect Cloud] FetchHardwareNodes. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates).

[Acronis Cyber Protect Cloud] UploadAgentUpdateSettings. Served by the Agents API (agent inventory, agent health, hardware nodes and agent updates). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] Apply a protection policy to resources. In Resource and Policy Management an application is the link between a policy and the resources it protects, so creating one changes live protection even though the vendor calls the operation a create. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes what is protected on real machines and takes effect at once. Confirm the policy with acronis_get_policy and the targets with acronis_list_resources first; undo it with acronis_revoke_policy_applications.

[Acronis Cyber Protect Cloud] Add a policy to a draft. A draft is a staged set of policy edits that protects nothing until it is applied, which is why this is not marked destructive. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] Create a draft, which is a staging area for policy edits that does not touch live protection until it is applied. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. Read one back with acronis_get_draft.

[Acronis Cyber Protect Cloud] Create a protection policy. A new policy protects nothing until acronis_apply_policy_to_resources links it to resources, which is why this is not marked destructive. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] Delete a draft and the staged edits it holds. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). DESTRUCTIVE: the staged work is lost and cannot be recovered from StackJack. Read acronis_get_draft first. Live protection is unaffected, because a draft is not applied.

[Acronis Cyber Protect Cloud] Remove one policy from a draft. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). DESTRUCTIVE: the staged policy is dropped from the draft and cannot be recovered from StackJack. Read acronis_get_draft first.

[Acronis Cyber Protect Cloud] Delete protection policies selected by filter, not by a single ID. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. DESTRUCTIVE: a deleted policy stops protecting every resource it is applied to, so machines silently lose backup and security coverage. Run acronis_list_policies with the same filters first, and read acronis_list_policy_applications to see what each one currently protects.

[Acronis Cyber Protect Cloud] Delete one protection policy by ID. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). DESTRUCTIVE: every resource the policy protects loses that protection. Read acronis_get_policy and acronis_list_policy_applications first to see what depends on it.

[Acronis Cyber Protect Cloud] Delete resource records selected by filter. A resource is a machine or workload Acronis knows about. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). DESTRUCTIVE: removing a resource record drops it out of the protection inventory and out of every policy application that named it. Run acronis_list_resources with the same filters first.

[Acronis Cyber Protect Cloud] Fetch one draft of policy edits by ID, including the policies staged inside it. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application).

[Acronis Cyber Protect Cloud] Fetch one protection policy by ID. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). See what it currently protects with acronis_list_policy_applications.

[Acronis Cyber Protect Cloud] Fetch one resource by ID. The path takes either the Acronis internal ID or the external ID, which is why the parameter names both. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application).

[Acronis Cyber Protect Cloud] Count the resources matching a filter without listing them. Use it to size a query before running acronis_list_resources. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts search, not_applied_only, applicable_to_policy_id, applicable_to_policy_selection_id, applied_only, applied_to_policy_id, applied_to_policy_selection_id, include_deleted, allowed_actions, updated_at, is_group here.

[Acronis Cyber Protect Cloud] Fetch statistics about issues with policy applications, which is how you find protection that is failing rather than merely assigned. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application).

[Acronis Cyber Protect Cloud] List protection policies. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts search, applicable_to_context_id, applicable_to_context_selection_id, dependency_namespace, dependency_path, os_type, include_settings, include_settings_constraints, include_applied_context, templates_only, include_templates, include_temporaries, favorite, default here. Fetch one policy with acronis_get_policy.

[Acronis Cyber Protect Cloud] List policy applications, that is the links between policies and the resources they protect. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts policy_type, include_temporaries, context_type, deployment_state, execution_state, status, issue_types, enabled_only, direct_only, empty_link_only, include_multiple_applications_conflict, include_validation_issues, include_deployment_errors, include_running_blockers, and more here. Create an application with acronis_apply_policy_to_resources.

[Acronis Cyber Protect Cloud] List application statuses grouped by policy, which answers whether a policy is actually running where it was assigned. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts policy_type, policy_id, policy_selection_id, created_at, updated_at, include_validation_issues, include_aggregate_status, order, links_and_issues here.

[Acronis Cyber Protect Cloud] List the attributes Acronis holds for one resource. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Fetch the resource itself with acronis_get_resource.

[Acronis Cyber Protect Cloud] List the protection status of resources, which is the direct answer to whether a customer machine is protected. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts selection_id, search, include_deleted, include_attributes, include_attribute_namespaces, updated_at, order here.

[Acronis Cyber Protect Cloud] List the resources, that is the machines and workloads, known to Resource and Policy Management. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts type, resource_id, search, not_applied_only, applicable_to_policy_id, applicable_to_policy_selection_id, applied_only, applied_to_policy_id, applied_to_policy_selection_id, include_deleted, allowed_actions, updated_at, is_group here. Fetch one with acronis_get_resource.

[Acronis Cyber Protect Cloud] Revoke policy applications, which unlinks policies from the resources they protect. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). DESTRUCTIVE: every matched resource loses the protection that application provided, immediately and without a warning to the customer. List the applications with acronis_list_policy_applications first.

[Acronis Cyber Protect Cloud] Start a policy execution now instead of waiting for its schedule. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this dispatches real work to live machines, for example a backup or a scan, and it consumes storage and endpoint resources. Confirm the target with acronis_list_policy_applications first, then follow the run with acronis_list_tasks.

[Acronis Cyber Protect Cloud] Replace the context of a draft, which is the scope and the resources the staged edits are written against. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this is a PUT that replaces the whole context block, so anything you omit is lost from the draft. Read acronis_get_draft first.

[Acronis Cyber Protect Cloud] Replace the disabled-applications context of a draft, that is the record of which policy applications the draft switches off. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this is a PUT that replaces the whole block, so omitted entries are lost and applying the draft can disable protection you did not intend to disable. Read acronis_get_draft first.

[Acronis Cyber Protect Cloud] Replace the set of policies a draft enables. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this is a PUT that replaces the whole set, so a policy left out of the body is no longer enabled by the draft. Read acronis_get_draft first.

[Acronis Cyber Protect Cloud] Rename a draft. It changes one label on a staged draft and touches no live protection, which is why it is not marked destructive. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] Set the comment on a policy inside a draft. It changes one text field on a staged draft and touches no live protection, which is why it is not marked destructive. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] Enable or disable one policy inside a draft. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: the flag decides whether that policy protects anything once the draft is applied, so clearing it removes protection at apply time. Read acronis_get_draft first.

[Acronis Cyber Protect Cloud] Rename a policy inside a draft. It changes one label on a staged draft, which is why it is not marked destructive. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] Replace the settings of a policy inside a draft, for example its schedule or its retention. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this is a PUT that replaces the whole settings block, so omitted values fall away and the applied policy can protect less than it did. Read acronis_get_draft first and send the whole block back.

[Acronis Cyber Protect Cloud] Set the type of a policy inside a draft, that is which kind of protection it performs. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: changing the type changes what the policy does once the draft is applied, and settings that belonged to the old type do not carry over. Read acronis_get_draft first.

[Acronis Cyber Protect Cloud] Change the state of a draft, which is how a staged draft is moved toward being applied. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: moving a draft into an applied state pushes every staged edit onto live protection at once. Read acronis_get_draft and confirm the staged content before you send this.

[Acronis Cyber Protect Cloud] Change fields on a live protection policy. This is a PATCH, so only the fields you send are merged. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: the policy is live, so a changed schedule or retention takes effect on every resource it protects. Read acronis_get_policy and acronis_list_policy_applications first.

[Acronis Cyber Protect Cloud] Change the favorite order and the related display properties of policies. Served by the Resource and Policy Management API (protected resources, protection policies, policy drafts and policy application). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this writes across the policy set rather than one policy, so it can reorder or re-flag policies you did not name. List them with acronis_list_policies first.

[Acronis Cyber Protect Cloud] GET /incidents/. Served by the Endpoint Detection and Response API (security incidents, investigation state and endpoint response actions). Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts updated_since, with_activities here.

[Acronis Cyber Protect Cloud] GET /incidents//response_action. Served by the Endpoint Detection and Response API (security incidents, investigation state and endpoint response actions). Acronis REQUIRES activityId on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] GET /incidents. Served by the Endpoint Detection and Response API (security incidents, investigation state and endpoint response actions). Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts created_at, updated_at, is_mitigated, mitigation_state, state, severity, positivity, verdict, incident_category, workload_id, analytics_source here.

[Acronis Cyber Protect Cloud] Run an EDR containment or remediation action against the workload behind one security incident. DESTRUCTIVE: action is the verb and it reaches the endpoint itself - WORKLOAD_ISOLATE and WORKLOAD_DEISOLATE cut the machine off the network and put it back, WORKLOAD_SHUTDOWN and WORKLOAD_RESTART stop or reboot it, PROCESS_STOP and PROCESS_STOP_TREE kill a running process and its children, PROCESS_FILE_QUARANTINE and PROCESS_FILE_DELETE move or erase the file on disk, WORKLOAD_ROLLBACK reverts the machine to a restore point, WORKLOAD_PATCH installs a patch, ACQUIRE_FORENSIC_BACKUP takes a memory and disk image, and ADD_TO_ALLOW, ADD_TO_BLOCK and the ADD_ALL_PROCESS_FILE_URL_TO_ALLOW_LIST / ADD_ALL_PROCESS_FILE_URL_TO_BLOCK_LIST pair change the tenant's allow and block lists. None of it can be undone from StackJack. Served by the Endpoint Detection and Response API (security incidents, investigation state and endpoint response actions). Acronis REQUIRES action on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave it blank. Each verb reads its own operands: processes and files for the allow and block list verbs and for PROCESS_STOP, patchId for WORKLOAD_PATCH, restorePointName for WORKLOAD_ROLLBACK, backupLocation with forensicDumpMode and forensicRunningProcessesSnapshot for ACQUIRE_FORENSIC_BACKUP, policyId and delay for the isolation verbs, and workloadId when the incident spans more than one workload. Read the incident with acronis_get_incident first and confirm the workload.

[Acronis Cyber Protect Cloud] POST /incidents//investigation_state. Served by the Endpoint Detection and Response API (security incidents, investigation state and endpoint response actions). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] POST /incidents/investigation_state. Served by the Endpoint Detection and Response API (security incidents, investigation state and endpoint response actions). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] PerformTenantEditionSwitchCheck. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES targetEdition, applicationId on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] CheckPassword. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] CreateClient. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] RegisterInfrastructure. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] CreateInfrastructuresLocation. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint.

[Acronis Cyber Protect Cloud] CreateRegistrationToken_0. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] CreateReport. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] CreateRegistrationToken_1. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] CreateTenant. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] CreateUser. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DeleteTenantApplicationSetting. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DeleteClient. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UnregisterInfrastructure. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES version on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DeleteInfrastructuresLocation. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES version on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DeleteRegistrationToken. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DeleteReport. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES version on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DeleteTenant. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES version on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DeleteUser. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES version on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] TurnOffTenantApplication. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] DisableCustomBranding. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES version on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] TurnOnTenantApplication. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] EnableCustomBranding. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES version on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] FetchApplication. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantApplicationSetting. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchClient. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchInfrastructure. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchInfrastructuresLocation. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchReport. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchStoredReports. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenant. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchCustomBrandingOptions. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantMFAStatus. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchOfferingItemsAvailableForTenantChild. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantOfferingItemsPrices. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantPricingSettings. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchUser. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchUserAccessPolicies. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] CheckLoginNameAvailability. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES username on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] FetchCurrentUserInfo. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). USER-SESSION ONLY: Acronis refuses this endpoint for the API-client token StackJack authenticates with (401, authN flags do not match, have API client), so it cannot succeed on a StackJack connection whatever rights the client has. To identify the calling API client and the tenant it belongs to, call acronis_get_client with the connector's client id instead.

[Acronis Cyber Protect Cloud] FetchApplications. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchClientsBatch. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchInfrastructuresBatch. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES uuids on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] FetchLocationInfrastructures. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchInfrastructuresLocationsBatch. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES uuids on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] Search. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Acronis REQUIRES tenant, text on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. Pass limit to bound the result set (capped at 1000).

[Acronis Cyber Protect Cloud] FetchAvailableTenantApplications. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantChildren. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantInfrastructureLocations. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantOfferingItems. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts status, include_secondary, type here.

[Acronis Cyber Protect Cloud] FetchTenantReports. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantUsages. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantUsers. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status).

[Acronis Cyber Protect Cloud] FetchTenantsBatch. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts with_contacts, with_offering_items, with_infra_offering_items, expand_offering_items, include_relative_path, allow_deleted here.

[Acronis Cyber Protect Cloud] FetchTenantsApplicationsBatch. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Acronis REQUIRES tenants on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] FetchTenantOfferingItemsBatch. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES subtreeRootTenantId on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts allow_deleted here.

[Acronis Cyber Protect Cloud] FetchTenantsUsagesBatch. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Acronis REQUIRES tenants on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank.

[Acronis Cyber Protect Cloud] FetchUsersBatch. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Scope the call to one customer by passing that customer's Acronis tenant id; discover ids with acronis_list_tenants or acronis_list_tenant_children. Paginated: pass limit (capped at 1000) and, to advance, the after cursor echoed back in the previous response's paging.cursors.after. Additional filters go in filtersJson as a JSON object of name/value pairs; Acronis accepts lod, with_access_policies, allow_deleted, inside_organization, access_policies, tenant_kinds, target_tenant_id here.

[Acronis Cyber Protect Cloud] RestoreDeletedTenant. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] RestoreDeletedUser. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] SendActivationEmail. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] SetUserPassword. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] SwitchTenantEdition. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateTenantApplicationSetting. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateClient. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateInfrastructure. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateInfrastructuresLocation. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateReport. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateTenant. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] ModifyCustomBranding. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Acronis REQUIRES version on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank. Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateTenantDefaultIdpId. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] ManageTenantMFAStatus. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] SetTenantOfferingItems. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateTenantOfferingItemsPrices. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateTenantPricingSettings. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateTenantsUsages. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateUser. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] UpdateUserAccessPolicies. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] ManageUserMFAStatus. Served by the Account Management API (tenant tree, users, offering items, quotas, usage, pricing, reports, branding and MFA status). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. DESTRUCTIVE: this changes or removes live Acronis data and cannot be undone from StackJack. Confirm the target with the matching read tool first.

[Acronis Cyber Protect Cloud] Replace the credentials Acronis uses to reach the storage behind a vault. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. Read the vault with acronis_get_vault and its settings with acronis_get_vault_config before you change anything. DESTRUCTIVE: the new pair replaces the stored one immediately. Credentials the storage rejects leave every archive in the vault unreachable, and StackJack cannot put the previous pair back.

[Acronis Cyber Protect Cloud] Change the encryption password of an encrypted vault, supplying the current password and the new one. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. Compare with acronis_replace_vault_password, which overwrites the stored password without proving the current one. DESTRUCTIVE: the password protects the encryption key of the vault. Acronis cannot recover data in an encrypted vault whose password is lost, so record the new password before you send this.

[Acronis Cyber Protect Cloud] Check whether a user account can reach a storage node. This is a POST that only reads: the account to test travels in the request body, which is why it is not a GET. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. Find the node IDs with acronis_list_storage_nodes.

[Acronis Cyber Protect Cloud] Register a storage node with the Vault Manager, so vaults can be created on it. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. Check what is already registered with acronis_list_storage_nodes.

[Acronis Cyber Protect Cloud] Create a vault, or attach a storage location that already holds backups as a vault. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). Provide the request body as a JSON object in fieldsJson, shaped as the Acronis API documents for this endpoint. Run acronis_list_vaults first so an attach does not duplicate a vault that is already registered.

[Acronis Cyber Protect Cloud] Unregister an Acronis Backup Gateway storage. ABGW in the path is the vendor abbreviation for that gateway. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). DESTRUCTIVE: unregistering the gateway detaches every vault served through it, so agents can no longer write backups to it or restore from it. Confirm the target with acronis_list_vaults and acronis_get_vault first.

[Acronis Cyber Protect Cloud] Delete backup archives belonging to one protected resource. DESTRUCTIVE: every backup inside a matched archive goes with it and nothing in StackJack can bring it back. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). Acronis REQUIRES resourceId and changeTag on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank, and setting either to null inside filtersJson is refused for the same reason. resourceId is the machine whose archives are destroyed, so this is not a partner-wide sweep unless you point it at each resource in turn. Narrow it further with vaultId. Run acronis_list_archives for the same resource first and read the result, because one call destroys the whole backup history of that machine.

[Acronis Cyber Protect Cloud] Delete individual backups, that is single recovery points, belonging to one protected resource. DESTRUCTIVE: each matched recovery point is removed permanently, so a restore to that point in time becomes impossible. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). Acronis REQUIRES resourceID on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave it blank, and setting it to null inside filtersJson is refused for the same reason. Confirm the exact set with acronis_list_backups for the same resource first.

[Acronis Cyber Protect Cloud] Delete one vault by ID. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). DESTRUCTIVE: deleting a vault removes the storage destination and every archive it holds. Read acronis_get_vault and acronis_list_vault_archives first, and check acronis_list_vault_agents, because agents still pointed at the vault fail their next backup.

[Acronis Cyber Protect Cloud] Delete named recovery points from one archive in one vault. This tool and acronis_delete_vault_archive_backups_by_id are two spellings of the SAME destructive act, published twice by Acronis; the difference is the request shape, never the blast radius. Served by the Vault Manager API (vaults, archives, backups, storage nodes, storage usage, antimalware scan statistics and backup validation). DESTRUCTIVE: the named recovery points are deleted permanently from the archive. Acronis REQUIRES backupId and changeTag on this call and there is no unscoped form; the call is refused before it reaches Acronis if you leave one blank, and setting either to null inside filtersJson is refused for the same reason. backupId is what limits the call to the recovery points you named rather than the whole archive. List them with acronis_list_vault_archive_backups first.