API Reference

Cloudforce One

Threat Signals

Copy Markdown

Open in Claude

Open in ChatGPT

Open in Cursor

---

Copy Markdown

View as Markdown

Skills

List Threat Signals skills

cloudforce_one.threat_signals.skills.list(SkillListParams**kwargs) -> SyncV4PagePagination[SkillListResponse]

GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills

Create Threat Signals skill

cloudforce_one.threat_signals.skills.create(SkillCreateParams**kwargs) -> SkillCreateResponse

POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills

Get Threat Signals skill

cloudforce_one.threat_signals.skills.get(strskill_id, SkillGetParams**kwargs) -> SkillGetResponse

GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}

Update Threat Signals skill

cloudforce_one.threat_signals.skills.edit(strskill_id, SkillEditParams**kwargs) -> SkillEditResponse

PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}

Delete Threat Signals skill

cloudforce_one.threat_signals.skills.delete(strskill_id, SkillDeleteParams**kwargs) -> SkillDeleteResponse

DELETE/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}

ModelsExpand Collapse

class SkillListResponse: …

count: int

Number of skills on this page.

custom_skills_available: bool

Whether the authenticated account may access custom-skill capabilities under Stakeout’s Threat Signals access-mode policy. This is a policy availability indicator, not a row-existence indicator. False for threat_signals_only mode; true for entitled, allowlisted, cfone_internal, and service modes.

page: int

per_page: int

skills: List[Skill]

id: str

config: Optional[str]

JSON-encoded skill configuration. Always null for default skills.

created_at: str

is_active: int

1 when active, 0 when inactive.

name: str

output_schema: Optional[str]

JSON-encoded JSON Schema the skill output must satisfy.

prompt: str

source: Literal["default", "custom"]

default for Cloudforce One managed skills (read-only), custom for account skills.

One of the following:

"default"

"custom"

type: str

updated_at: str

total_count: int

class SkillCreateResponse: …

id: str

config: Optional[str]

JSON-encoded skill configuration. Always null for default skills.

created_at: str

is_active: int

1 when active, 0 when inactive.

name: str

output_schema: Optional[str]

JSON-encoded JSON Schema the skill output must satisfy.

prompt: str

source: Literal["default", "custom"]

default for Cloudforce One managed skills (read-only), custom for account skills.

One of the following:

"default"

"custom"

type: str

updated_at: str

class SkillGetResponse: …

id: str

config: Optional[str]

JSON-encoded skill configuration. Always null for default skills.

created_at: str

is_active: int

1 when active, 0 when inactive.

name: str

output_schema: Optional[str]

JSON-encoded JSON Schema the skill output must satisfy.

prompt: str

source: Literal["default", "custom"]

default for Cloudforce One managed skills (read-only), custom for account skills.

One of the following:

"default"

"custom"

type: str

updated_at: str

class SkillEditResponse: …

id: str

config: Optional[str]

JSON-encoded skill configuration. Always null for default skills.

created_at: str

is_active: int

1 when active, 0 when inactive.

name: str

output_schema: Optional[str]

JSON-encoded JSON Schema the skill output must satisfy.

prompt: str

source: Literal["default", "custom"]

default for Cloudforce One managed skills (read-only), custom for account skills.

One of the following:

"default"

"custom"

type: str

updated_at: str

class SkillDeleteResponse: …

id: str

config: Optional[str]

JSON-encoded skill configuration. Always null for default skills.

created_at: str

is_active: int

1 when active, 0 when inactive.

name: str

output_schema: Optional[str]

JSON-encoded JSON Schema the skill output must satisfy.

prompt: str

source: Literal["default", "custom"]

default for Cloudforce One managed skills (read-only), custom for account skills.

One of the following:

"default"

"custom"

type: str

updated_at: str

SkillsTag Categories

Get Threat Signals skill tag categories

cloudforce_one.threat_signals.skills.tag_categories.get(Literal["default-tagging-skill"]skill_id, TagCategoryGetParams**kwargs) -> TagCategoryGetResponse

GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories

Replace Threat Signals skill tag categories

cloudforce_one.threat_signals.skills.tag_categories.update(Literal["default-tagging-skill"]skill_id, TagCategoryUpdateParams**kwargs) -> TagCategoryUpdateResponse

PUT/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories

ModelsExpand Collapse

class TagCategoryGetResponse: …

category_uuids: List[str]

skill_id: Literal["default-tagging-skill"]

class TagCategoryUpdateResponse: …

category_uuids: List[str]

skill_id: Literal["default-tagging-skill"]