qualys-cli 0.1.1__py3-none-any.whl

qualys_cli/commands/asset.py

@@ -0,0 +1,183 @@
+# Auto-generated from api-model.json — run scripts/generate_commands.py to regenerate.
+# Asset Management API  (Basic auth, XML responses)
+from __future__ import annotations
+
+import typer
+
+from .. import client as _c
+from ..formatters import DEFAULT_LIMIT, output
+
+app = typer.Typer(name="asset", help="Asset Management APIs (Basic auth)")
+
+# ── ip ───────────────────────────────────────────────────────────────────────
+_ip = typer.Typer(help="IP address operations")
+app.add_typer(_ip, name="ip")
+
+
+@_ip.command("list")
+def ip_list(
+    ctx: typer.Context,
+    ips: str | None = typer.Option(None, "--ips", help="Filter by IP/range"),
+    network_id: str | None = typer.Option(None, "--network-id"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """List IPs in the subscription.
+
+    Source: https://docs.qualys.com/en/vm/api/assets/asset_ips/list_ips.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    params: dict = {"action": "list"}
+    if ips:
+        params["ips"] = ips
+    if network_id:
+        params["network_id"] = network_id
+    data = client.get_xml("/api/2.0/fo/asset/ip/", params)
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_ip.command("add")
+def ip_add(
+    ctx: typer.Context,
+    ips: str = typer.Argument(..., help="IP(s) or range(s) to add"),
+    tracking_method: str = typer.Option("IP", "--tracking", help="IP|DNS|NETBIOS"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Add IPs to the subscription.
+
+    Source: https://docs.qualys.com/en/vm/api/assets/asset_ips/add_ips.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml("/api/2.0/fo/asset/ip/",
+                           data={"action": "add", "ips": ips, "tracking_method": tracking_method})
+    output(data)
+
+
+# ── network ───────────────────────────────────────────────────────────────────
+_network = typer.Typer(help="Network operations")
+app.add_typer(_network, name="network")
+
+
+@_network.command("list")
+def network_list(
+    ctx: typer.Context,
+    ids: str | None = typer.Option(None, "--ids"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """List networks.
+
+    Source: https://docs.qualys.com/en/vm/api/assets/networks/list_networks.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    params: dict = {"action": "list"}
+    if ids:
+        params["ids"] = ids
+    data = client.get_xml("/api/2.0/fo/network/", params)
+    output(data, format=format, limit=limit)
+
+
+@_network.command("create")
+def network_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name"),
+    description: str | None = typer.Option(None, "--description"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create a network.
+
+    Source: https://docs.qualys.com/en/vm/api/assets/networks/create_network.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    params: dict = {"action": "create", "name": name}
+    if description:
+        params["description"] = description
+    data = client.post_xml("/api/2.0/fo/network/", data=params)
+    output(data)
+
+
+# ── domain ────────────────────────────────────────────────────────────────────
+_domain = typer.Typer(help="Asset domain operations")
+app.add_typer(_domain, name="domain")
+
+
+@_domain.command("list")
+def domain_list(
+    ctx: typer.Context,
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """List asset domains.
+
+    Source: https://docs.qualys.com/en/vm/api/scans/maps/domains_list.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/msp/asset_domain_list.php")
+    output(data, format=format, limit=limit)
+
+
+@_domain.command("create")
+def domain_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create an asset domain.
+
+    Source: https://docs.qualys.com/en/vm/api/assets/domain_v2/Create_Domain.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml("/api/2.0/fo/asset/domain/", data={"action": "create", "name": name})
+    output(data)
+
+
+# ── group ─────────────────────────────────────────────────────────────────────
+_group = typer.Typer(help="Asset group operations")
+app.add_typer(_group, name="group")
+
+
+@_group.command("list")
+def group_list(
+    ctx: typer.Context,
+    ids: str | None = typer.Option(None, "--ids"),
+    title: str | None = typer.Option(None, "--title"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """List asset groups.
+
+    Source: https://docs.qualys.com/en/vm/api/assets/asset_groups/list_asset_groups.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    params: dict = {"action": "list"}
+    if ids:
+        params["ids"] = ids
+    if title:
+        params["title"] = title
+    data = client.get_xml("/api/2.0/fo/asset/group/", params)
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_group.command("delete")
+def group_delete(
+    ctx: typer.Context,
+    ids: str = typer.Argument(...),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete asset group(s).
+
+    Source: https://docs.qualys.com/en/vm/api/assets/asset_groups/delete_asset_group.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete asset group(s) {ids}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml("/api/2.0/fo/asset/group/",
+                           data={"action": "delete", "ids": ids})
+    output(data)

qualys_cli/commands/ca.py

@@ -0,0 +1,403 @@
+# Hand-edited — do NOT regenerate from api-model.json (codegen will skip this file).
+# Cloud Agent APIs  (Basic auth for agent ops, JWT for activation-key/config)
+# Originally generated from api-model.json; corrections:
+#   - agent count/list: filter is now overridable via --tag and --filter so
+#     accounts without the default "Cloud Agent" tag can still get data
+#   - bulk-activate/deactivate: path /am/hostasset → /am/asset (per docs)
+#   - act-key create: body field renamed `modules` → `licenses` (per docs)
+#   - config create: body shape {"name": x} → {"basicDetails": {"profileName": x}}
+from __future__ import annotations
+
+import typer
+
+from .. import client as _c
+from ..formatters import DEFAULT_LIMIT, output, output_success
+
+app = typer.Typer(name="ca", help="Cloud Agent APIs — agent lifecycle, activation keys, config profiles")
+
+# ── agent ─────────────────────────────────────────────────────────────────────
+_agent = typer.Typer(help="Cloud agent operations")
+app.add_typer(_agent, name="agent")
+
+
+def _agent_filter_xml(
+    tag: str | None,
+    tag_id: str | None,
+    tracking_method: str | None,
+    extra: list[tuple[str, str, str]] | None = None,
+    fields: str | None = None,
+) -> str:
+    """Build a hostasset ServiceRequest body with at least one filter criterion.
+
+    Defaults to `tagName EQUALS "Cloud Agent"` (Qualys-recommended) when no
+    explicit filter is provided. Users can override with --tag (different name),
+    --tag-id (more reliable), --tracking-method, or --filter.
+    """
+    parts: list[str] = [
+        '<?xml version="1.0" encoding="UTF-8"?>',
+        "<ServiceRequest>",
+        "<filters>",
+    ]
+    if tag_id:
+        parts.append(f'<Criteria field="tagId" operator="EQUALS">{tag_id}</Criteria>')
+    elif tracking_method:
+        parts.append(
+            f'<Criteria field="trackingMethod" operator="EQUALS">{tracking_method}</Criteria>'
+        )
+    elif tag:
+        parts.append(f'<Criteria field="tagName" operator="EQUALS">{tag}</Criteria>')
+    else:
+        parts.append('<Criteria field="tagName" operator="EQUALS">Cloud Agent</Criteria>')
+    for f, op, v in (extra or []):
+        parts.append(f'<Criteria field="{f}" operator="{op}">{v}</Criteria>')
+    parts.append("</filters>")
+    if fields:
+        parts.append(f"<fields><set>{fields}</set></fields>")
+    parts.append("</ServiceRequest>")
+    return "\n".join(parts)
+
+
+@_agent.command("list")
+def agent_list(
+    ctx: typer.Context,
+    tag: str | None = typer.Option(
+        None, "--tag",
+        help='Tag NAME filter (default: "Cloud Agent" — override if your account uses a different tag)',
+    ),
+    tag_id: str | None = typer.Option(
+        None, "--tag-id", help="Tag ID filter (more reliable than name)"
+    ),
+    tracking_method: str | None = typer.Option(
+        None, "--tracking-method",
+        help="Filter by tracking method (e.g. AGENT) — alternative to --tag",
+    ),
+    fields: str | None = typer.Option(
+        None, "--fields", help="Comma-separated fields to include in the response"
+    ),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """List cloud agents (POST search).
+
+    Returns assets matching a tag filter. Defaults to the Qualys-standard
+    "Cloud Agent" tag; pass --tag, --tag-id, or --tracking-method AGENT if
+    your account uses a different identifier.
+
+    Source: https://docs.qualys.com/en/ca/api/agents/list_agents.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = _agent_filter_xml(tag, tag_id, tracking_method, fields=fields)
+    data = client.post_xml("/qps/rest/2.0/search/am/hostasset", data=xml_body)
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_agent.command("count")
+def agent_count(
+    ctx: typer.Context,
+    tag: str | None = typer.Option(
+        None, "--tag",
+        help='Tag NAME filter (default: "Cloud Agent" — override if your account uses a different tag)',
+    ),
+    tag_id: str | None = typer.Option(
+        None, "--tag-id", help="Tag ID filter (more reliable than name)"
+    ),
+    tracking_method: str | None = typer.Option(
+        None, "--tracking-method",
+        help="Filter by tracking method (e.g. AGENT) — alternative to --tag",
+    ),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of cloud agents in the account.
+
+    Defaults to filtering by the Qualys-standard "Cloud Agent" tag. If your
+    subscription doesn't have that tag (or you use a custom one), pass
+    --tag <NAME>, --tag-id <ID>, or --tracking-method AGENT instead.
+
+    Source: https://docs.qualys.com/en/ca/api/agents/agent_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = _agent_filter_xml(tag, tag_id, tracking_method)
+    data = client.post_xml("/qps/rest/2.0/count/am/hostasset", data=xml_body)
+    output(data, format=format, output_file=output_file)
+
+
+@_agent.command("activate")
+def agent_activate(
+    ctx: typer.Context,
+    asset_id: str = typer.Argument(..., help="Asset ID of the agent"),
+    module: str = typer.Option(..., "--module", help="Module(s): AGENT_VM,AGENT_PC,AGENT_FIM,AGENT_EDR,AGENT_SCA"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Activate a cloud agent for one or more modules.
+
+    Source: https://docs.qualys.com/en/ca/api/agents/activate_agent.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = '<?xml version="1.0" encoding="UTF-8"?><ServiceRequest></ServiceRequest>'
+    data = client.post_xml(f"/qps/rest/2.0/activate/am/asset/{asset_id}?module={module}", data=xml_body)
+    output(data)
+
+
+@_agent.command("deactivate")
+def agent_deactivate(
+    ctx: typer.Context,
+    asset_id: str = typer.Argument(..., help="Asset ID of the agent"),
+    module: str = typer.Option(..., "--module", help="Module(s): AGENT_VM,AGENT_PC,AGENT_FIM,AGENT_EDR,AGENT_SCA"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Deactivate a cloud agent for one or more modules.
+
+    Source: https://docs.qualys.com/en/ca/api/agents/deactivate_agent.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = '<?xml version="1.0" encoding="UTF-8"?><ServiceRequest></ServiceRequest>'
+    data = client.post_xml(f"/qps/rest/2.0/deactivate/am/asset/{asset_id}?module={module}", data=xml_body)
+    output(data)
+
+
+@_agent.command("uninstall")
+def agent_uninstall(
+    ctx: typer.Context,
+    asset_id: str = typer.Argument(..., help="Asset ID of the agent"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Uninstall a cloud agent.
+
+    Source: https://docs.qualys.com/en/ca/api/agents/uninstall_agent.htm
+    """
+    if not yes:
+        typer.confirm(f"Uninstall agent {asset_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = '<?xml version="1.0" encoding="UTF-8"?><ServiceRequest></ServiceRequest>'
+    data = client.post_xml(f"/qps/rest/2.0/uninstall/am/asset/{asset_id}", data=xml_body)
+    output(data)
+
+
+@_agent.command("bulk-activate")
+def agent_bulk_activate(
+    ctx: typer.Context,
+    module: str = typer.Option(..., "--module", help="Module(s) to activate"),
+    tag_name: str = typer.Option("Cloud Agent", "--tag", help="Tag name filter"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Bulk activate agents matching a tag.
+
+    Source: https://docs.qualys.com/en/ca/api/agents/bulk_activation.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?><ServiceRequest><filters>'
+        f'<Criteria field="tagName" operator="EQUALS">{tag_name}</Criteria>'
+        "</filters></ServiceRequest>"
+    )
+    data = client.post_xml(f"/qps/rest/2.0/activate/am/asset?module={module}", data=xml_body)
+    output(data)
+
+
+@_agent.command("bulk-deactivate")
+def agent_bulk_deactivate(
+    ctx: typer.Context,
+    module: str = typer.Option(..., "--module", help="Module(s) to deactivate"),
+    tag_name: str = typer.Option("Cloud Agent", "--tag", help="Tag name filter"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Bulk deactivate agents matching a tag.
+
+    Source: https://docs.qualys.com/en/ca/api/agents/bulk_deactivation.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?><ServiceRequest><filters>'
+        f'<Criteria field="tagName" operator="EQUALS">{tag_name}</Criteria>'
+        "</filters></ServiceRequest>"
+    )
+    data = client.post_xml(f"/qps/rest/2.0/deactivate/am/asset?module={module}", data=xml_body)
+    output(data)
+
+
+# ── scan ──────────────────────────────────────────────────────────────────────
+_scan = typer.Typer(help="On-demand scan operations")
+app.add_typer(_scan, name="scan")
+
+
+@_scan.command("launch-ods")
+def scan_launch_ods(
+    ctx: typer.Context,
+    scan_type: str = typer.Option(..., "--scan-type",
+                                  help="Inventory_Scan|Vulnerability_Scan|PolicyCompliance_Scan|UDC_Scan|SCA_Scan|SWCA_scan"),
+    tag_name: str = typer.Option("Cloud Agent", "--tag", help="Tag name filter for target assets"),
+    override_cpu: bool = typer.Option(False, "--override-cpu", help="Override CPU throttle limits"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Launch an on-demand scan for agents matching a tag.
+
+    Source: https://docs.qualys.com/en/ca/api/scans/ods_for_multiple_asset.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?><ServiceRequest><filters>'
+        f'<Criteria field="tagName" operator="EQUALS">{tag_name}</Criteria>'
+        "</filters></ServiceRequest>"
+    )
+    path = f"/qps/rest/1.0/ods/ca/agentasset?scan={scan_type}&overrideConfigCpu={str(override_cpu).lower()}"
+    data = client.post_xml(path, data=xml_body)
+    output(data)
+
+
+# ── act-key ───────────────────────────────────────────────────────────────────
+_act_key = typer.Typer(help="Activation key operations (new UI — JWT auth)")
+app.add_typer(_act_key, name="act-key")
+
+
+@_act_key.command("list")
+def act_key_list(
+    ctx: typer.Context,
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Search/list activation keys.
+
+    Source: https://docs.qualys.com/en/ca/api/act_key/act_key_apis.htm
+    """
+    client = _c.make(ctx.obj, auth_type="jwt", verbose=verbose, use_gateway=True)
+    data = client.post_json("/caui/v1/activation-keys/manage", {})
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_act_key.command("get")
+def act_key_get(
+    ctx: typer.Context,
+    key_id: str = typer.Argument(..., help="Activation key ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get activation key details.
+
+    Source: https://docs.qualys.com/en/ca/api/act_key/get_act_key_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="jwt", verbose=verbose, use_gateway=True)
+    data = client.get_json(f"/caui/v1/activation-keys/manage/{key_id}")
+    output(data, format=format)
+
+
+@_act_key.command("create")
+def act_key_create(
+    ctx: typer.Context,
+    title: str = typer.Option(..., "--title", help="Activation key title"),
+    licenses: str | None = typer.Option(
+        None, "--licenses",
+        help="Comma-separated license types (e.g. VM,PC,FIM,EDR,SCA)",
+    ),
+    network_id: str | None = typer.Option(None, "--network-id"),
+    expire_date: str | None = typer.Option(
+        None, "--expire-date", help="ISO datetime e.g. 2026-12-31T23:59:59Z"
+    ),
+    max_agents: int | None = typer.Option(
+        None, "--max-agents", help="Maximum agents allowed for this key"
+    ),
+    tags: str | None = typer.Option(None, "--tags", help="Comma-separated tag IDs"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create a new activation key.
+
+    Source: https://docs.qualys.com/en/ca/api/act_key/create_act_key.htm
+    """
+    client = _c.make(ctx.obj, auth_type="jwt", verbose=verbose, use_gateway=True)
+    body: dict = {"title": title}
+    if licenses:
+        body["licenses"] = [m.strip() for m in licenses.split(",") if m.strip()]
+    if network_id:
+        body["networkId"] = network_id
+    if expire_date:
+        body["expireDate"] = expire_date
+    if max_agents is not None:
+        body["maxAgentsAllowed"] = max_agents
+    if tags:
+        body["tags"] = [t.strip() for t in tags.split(",") if t.strip()]
+    data = client.post_json("/caui/v1/activation-keys/manage/activation-key", body)
+    output(data, format=format)
+
+
+@_act_key.command("delete")
+def act_key_delete(
+    ctx: typer.Context,
+    key_id: str = typer.Argument(..., help="Activation key ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete an activation key.
+
+    Source: https://docs.qualys.com/en/ca/api/act_key/delete_act_key.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete activation key {key_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="jwt", verbose=verbose, use_gateway=True)
+    client.delete_json(f"/caui/v1/activation-keys/manage/{key_id}")
+    output_success(f"Activation key {key_id} deleted.")
+
+
+# ── config ────────────────────────────────────────────────────────────────────
+_config = typer.Typer(help="Configuration profile operations (new UI — JWT auth)")
+app.add_typer(_config, name="config")
+
+
+@_config.command("list")
+def config_list(
+    ctx: typer.Context,
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """List configuration profiles.
+
+    Source: https://docs.qualys.com/en/ca/api/config/config_apis.htm
+    """
+    client = _c.make(ctx.obj, auth_type="jwt", verbose=verbose, use_gateway=True)
+    data = client.get_json("/caui/v1/config-profiles")
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_config.command("create")
+def config_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="Profile name"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create a configuration profile.
+
+    Source: https://docs.qualys.com/en/ca/api/config/config_api/create_config_profile.htm
+    """
+    client = _c.make(ctx.obj, auth_type="jwt", verbose=verbose, use_gateway=True)
+    data = client.post_json(
+        "/caui/v1/config-profiles",
+        {"basicDetails": {"profileName": name}},
+    )
+    output(data, format=format)
+
+
+@_config.command("delete")
+def config_delete(
+    ctx: typer.Context,
+    profile_id: str = typer.Argument(..., help="Profile ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete a configuration profile.
+
+    Source: https://docs.qualys.com/en/ca/api/config/config_api/delete_profile.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete config profile {profile_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="jwt", verbose=verbose, use_gateway=True)
+    client.delete_json(f"/caui/v1/config-profiles/{profile_id}")
+    output_success(f"Config profile {profile_id} deleted.")