sentinelone-mgmt-console-api

Query and manage SentinelOne Management Console API resources via Python client and CLI wrappers.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/pmoses-s1/claude-skills --skill sentinelone-mgmt-console-api
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sentinelone-mgmt-console-api
Source: https://github.com/pmoses-s1/claude-skills/tree/main/sentinelone-mgmt-console-api
Command: npx skills add https://github.com/pmoses-s1/claude-skills --skill sentinelone-mgmt-console-api

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, python-docx, python-pptx, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a programmable interface to SentinelOne's Management Console API (REST v2.1, Unified Alert Management GraphQL, and Purple AI GraphQL) for querying, updating, creating, and acting on resources.

Core Features & Use Cases

  • Comprehensive API coverage: REST v2.1 endpoints, UAM GraphQL, and Purple AI GraphQL, with a Python client and CLI wrappers.
  • Client and automation: ready-made scripts (s1_client.py, call_endpoint.py, unified_alerts.py) to drive multi-endpoint workflows and validate tenant capabilities.
  • Reference-driven workflows: menus, CAPABILITY_MAP, WORKFLOWS references, and test suites to demonstrate end-to-end scenarios such as threat triage, alert management, and UAM integrations.

Quick Start

Drop this skill into Claude and start querying SentinelOne's Management Console API in a few clicks.

Frequently Asked Questions about sentinelone-mgmt-console-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SentinelOne Management API queries for threats and alerts using Python?

You can automate SentinelOne Management API queries for threats and alerts using a built-in Python client that handles authentication, pagination, and multi-endpoint workflows across REST v2.1, UAM GraphQL, and Purple AI GraphQL.

Does the SentinelOne Python client support Unified Alert Management GraphQL workflows?

Yes, the SentinelOne Python client supports Unified Alert Management GraphQL workflows, providing ready-made scripts like unified_alerts.py to drive multi-endpoint queries and validate tenant capabilities.

Can I manage SentinelOne agent groups and exclusions via command line interface?

You can manage SentinelOne agent groups and exclusions via command line interface wrappers that orchestrate create, update, and act operations across S1 resources using the built-in S1Client.

What is the best way to avoid destructive SentinelOne API actions when updating sites and accounts?

The best way to avoid destructive SentinelOne API actions when updating sites and accounts is to use schema-guided guidance and confirmation checks built into the Python client before executing update operations.

Do I need requests and python-docx dependencies to run SentinelOne API automation scripts?

Yes, you need the requests library for HTTP calls and python-docx and python-pptx for generating documents, as these are required dependencies for running the SentinelOne API automation scripts.