Start investigation plan generation in a background job and return a job ID for streaming and polling.
Documentation Index
Fetch the complete documentation index at: https://docs.cotool.ai/llms.txt
Use this file to discover all available pages before exploring further.
API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here
What the detection should look for and why
1Tool names available to the detection agent (used to infer data sources)
CLI integration ids available to the detection agent (used as data sources at runtime)
Cadence the detection will run on; the runtime prompt derives the primary lookback window from this metadata
hourly, daily, weekly, null Optional detection ID when regenerating a plan for an existing detection
Successful response
Background job ID for this investigation plan generation request