{"command":{"effect":"read","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Retrieves a paginated list of RFIs with filtering and sorting options.","properties":{"path":{"type":"object","properties":{"account_id":{"description":"Account ID.","type":"string"},"project_type":{"description":"RFI project type","type":"string","enum":["threat-intelligence","incident-response","ir-emergency-response","table-top","pentest","irp","threat-hunting","cybersecurity-assessment","react-general","legal-response","soc-alerts","demo"],"examples":["threat-intelligence"]}},"required":["account_id","project_type"],"additionalProperties":false},"query":{"type":"object","properties":{"page":{"type":"number"},"pageSize":{"type":"number"},"status":{"description":"Status filter. Projects with a narrowed dashboard vocabulary accept only their customer-facing values.","type":"string"},"search":{"type":"string"},"createdBy":{"description":"Filter by creator email. NOTE: For the `legal-response` project type this query parameter is **rejected with HTTP 400** — the server derives the filter from the authenticated user's JWT automatically and does not accept a client-supplied value. Requests to `legal-response` with no valid JWT identity are rejected with HTTP 401.","type":"string"},"assignee":{"type":"string"},"requestType":{"type":"string"},"priority":{"type":"string"},"tlp":{"type":"string"},"id":{"type":"string"},"readableId":{"type":"string"},"summary":{"type":"string"},"accountId":{"type":"string"},"metadata":{"description":"JSON string object of metadata filters. Supports two formats: 1) Simple values for exact match (backward compatible): {\"status\": \"open\"} 2) Operator objects for advanced filtering: {\"identifiers\": {\"operator\": \"contains_line\", \"value\": \"blah.com\"}}. Available operators: 'eq' (exact match, default), 'contains' (substring match), 'contains_line' (match complete line in newline-separated text). Date fields are automatically normalized to YYYY-MM-DD format.","type":"string"},"orderBy":{"description":"Sort field. SOC Communications support customer-safe latest_activity ordering.","type":"string"},"order":{"type":"string"}},"required":[],"additionalProperties":false}},"required":["path"],"additionalProperties":false},"name":"List RFIs","id":"cloudflare.get_requestlist","example":{"path":{"account_id":"example","project_type":"threat-intelligence"}},"maxRequests":1,"summary":false}}