API Reference

Intel

Copy Markdown

Open in Claude

Open in ChatGPT

Open in Cursor

---

Copy Markdown

View as Markdown

Indicator Feeds

Get indicator feeds owned by this account

client.intel.indicatorFeeds.list(IndicatorFeedListParams { account_id } params, RequestOptionsoptions?): SinglePage<IndicatorFeedListResponse { id, created_on, description, 5 more } >

GET/accounts/{account_id}/intel/indicator-feeds

Get indicator feed metadata

client.intel.indicatorFeeds.get(numberfeedId, IndicatorFeedGetParams { account_id } params, RequestOptionsoptions?): IndicatorFeedGetResponse { id, created_on, description, 8 more }

GET/accounts/{account_id}/intel/indicator-feeds/{feed_id}

Create new indicator feed

client.intel.indicatorFeeds.create(IndicatorFeedCreateParams { account_id, description, name } params, RequestOptionsoptions?): IndicatorFeedCreateResponse { id, created_on, description, 5 more }

POST/accounts/{account_id}/intel/indicator-feeds

Update indicator feed metadata

client.intel.indicatorFeeds.update(numberfeedId, IndicatorFeedUpdateParams { account_id, description, is_attributable, 3 more } params, RequestOptionsoptions?): IndicatorFeedUpdateResponse { id, created_on, description, 5 more }

PUT/accounts/{account_id}/intel/indicator-feeds/{feed_id}

Get indicator feed data

client.intel.indicatorFeeds.data(numberfeedId, IndicatorFeedDataParams { account_id } params, RequestOptionsoptions?): IndicatorFeedDataResponse

GET/accounts/{account_id}/intel/indicator-feeds/{feed_id}/data

ModelsExpand Collapse

IndicatorFeedListResponse { id, created_on, description, 5 more }

id?: number

The unique identifier for the indicator feed

created_on?: string

The date and time when the data entry was created

formatdate-time

description?: string

The description of the example test

is_attributable?: boolean

Whether the indicator feed can be attributed to a provider

is_downloadable?: boolean

Whether the indicator feed can be downloaded

is_public?: boolean

Whether the indicator feed is exposed to customers

modified_on?: string

The date and time when the data entry was last modified

formatdate-time

name?: string

The name of the indicator feed

IndicatorFeedGetResponse { id, created_on, description, 8 more }

id?: number

The unique identifier for the indicator feed

created_on?: string

The date and time when the data entry was created

formatdate-time

description?: string

The description of the example test

is_attributable?: boolean

Whether the indicator feed can be attributed to a provider

is_downloadable?: boolean

Whether the indicator feed can be downloaded

is_public?: boolean

Whether the indicator feed is exposed to customers

latest_upload_status?: "Mirroring" | "Unifying" | "Loading" | 3 more

Status of the latest snapshot uploaded

One of the following:

"Mirroring"

"Unifying"

"Loading"

"Provisioning"

"Complete"

"Error"

modified_on?: string

The date and time when the data entry was last modified

formatdate-time

name?: string

The name of the indicator feed

provider_id?: string

The unique identifier for the provider

provider_name?: string

The provider of the indicator feed

IndicatorFeedCreateResponse { id, created_on, description, 5 more }

id?: number

The unique identifier for the indicator feed

created_on?: string

The date and time when the data entry was created

formatdate-time

description?: string

The description of the example test

is_attributable?: boolean

Whether the indicator feed can be attributed to a provider

is_downloadable?: boolean

Whether the indicator feed can be downloaded

is_public?: boolean

Whether the indicator feed is exposed to customers

modified_on?: string

The date and time when the data entry was last modified

formatdate-time

name?: string

The name of the indicator feed

IndicatorFeedUpdateResponse { id, created_on, description, 5 more }

id?: number

The unique identifier for the indicator feed

created_on?: string

The date and time when the data entry was created

formatdate-time

description?: string

The description of the example test

is_attributable?: boolean

Whether the indicator feed can be attributed to a provider

is_downloadable?: boolean

Whether the indicator feed can be downloaded

is_public?: boolean

Whether the indicator feed is exposed to customers

modified_on?: string

The date and time when the data entry was last modified

formatdate-time

name?: string

The name of the indicator feed

IndicatorFeedDataResponse = string

Indicator FeedsSnapshots

Update indicator feed data

client.intel.indicatorFeeds.snapshots.update(numberfeedId, SnapshotUpdateParams { account_id, source } params, RequestOptionsoptions?): SnapshotUpdateResponse { file_id, filename, status }

PUT/accounts/{account_id}/intel/indicator-feeds/{feed_id}/snapshot

ModelsExpand Collapse

SnapshotUpdateResponse { file_id, filename, status }

file_id?: number

Feed id

filename?: string

Name of the file unified in our system

status?: string

Current status of upload, should be unified

Indicator FeedsPermissions

List indicator feed permissions

client.intel.indicatorFeeds.permissions.list(PermissionListParams { account_id } params, RequestOptionsoptions?): PermissionListResponse { id, description, is_attributable, 3 more }

GET/accounts/{account_id}/intel/indicator-feeds/permissions/view

Grant permission to indicator feed

client.intel.indicatorFeeds.permissions.create(PermissionCreateParams { account_id, account_tag, feed_id } params, RequestOptionsoptions?): PermissionCreateResponse { success }

PUT/accounts/{account_id}/intel/indicator-feeds/permissions/add

Revoke permission to indicator feed

client.intel.indicatorFeeds.permissions.delete(PermissionDeleteParams { account_id, account_tag, feed_id } params, RequestOptionsoptions?): PermissionDeleteResponse { success }

PUT/accounts/{account_id}/intel/indicator-feeds/permissions/remove

ModelsExpand Collapse

PermissionListResponse = Array<PermissionListResponseItem>

id?: number

The unique identifier for the indicator feed

description?: string

The description of the example test

is_attributable?: boolean

Whether the indicator feed can be attributed to a provider

is_downloadable?: boolean

Whether the indicator feed can be downloaded

is_public?: boolean

Whether the indicator feed is exposed to customers

name?: string

The name of the indicator feed

PermissionCreateResponse { success }

success?: boolean

Whether the update succeeded or not

PermissionDeleteResponse { success }

success?: boolean

Whether the update succeeded or not

Indicator FeedsDownloads