How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Abnormal AI

Abnormal AI Dashboard Aggregations API

APIs to manage Dashboard metrics

Documentation Provider Profile APIs.io OpenAPI GitHub

Abnormal AI Dashboard Aggregations API is one of 17 APIs that Abnormal AI publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Dashboard Aggregations. The published artifact set on APIs.io includes an OpenAPI specification and an API reference.

This API exposes 15 operations across 15 paths, and defines 30 schemas. It is described by OpenAPI 3.2.0, at version 1.4.3.

Requests are made against 2 base URLs: https://api.abnormalplatform.com/v1, https://eu.rest.abnormalsecurity.com/v1.

15 operations 15 paths 30 schemas 15 GET

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.4.3
Base URL
https://api.abnormalplatform.com/v1
Authentication
HTTP Bearer
Contact
Abnormal Security Support
Terms of Service
View terms
Resource Areas
1

Authentication & Security 1

Abnormal AI Dashboard Aggregations API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (BearerAuth). By default, every request must be authenticated.

Paths & Operations 15

Across 15 paths, the API surfaces 15 operations — 15 GET. Each is listed below with its method, path, parameters, and response codes.

Dashboard Aggregations 15

APIs to manage Dashboard metrics

GET
/aggregations/attack_frequency
Retrieve the frequency of specific attack types for a given period.
v1_aggregations_attack_frequency_retrieve 2 params → 200401403404429
GET
/aggregations/attack_stopped
Retrieve aggregated counts of distinct attack types that were successfully stopped, including current and previous periods.
v1_aggregations_attack_stopped_retrieve 2 params → 200401403404429
GET
/aggregations/attack_strategy_breakdown
Retrieve the breakdown of attacks based on their strategy.
v1_aggregations_attack_strategy_breakdown_retrieve 2 params → 200401403404429
GET
/aggregations/attack_vector_breakdown
Retrieve the breakdown of attacks based on their vectors.
v1_aggregations_attack_vector_breakdown_retrieve 2 params → 200401403404429
GET
/aggregations/attacker_origin
Retrieve the origin countries of attackers for a given period.
v1_aggregations_attacker_origin_retrieve 2 params → 200401403404429
GET
/aggregations/dashboard_summary
Retrieve an aggregated summary of multiple security data points for the dashboard.
v1_aggregations_dashboard_summary_retrieve 2 params → 200401403404429
GET
/aggregations/most_impersonated_employee
Retrieve the most impersonated employees for a specified period.
v1_aggregations_most_impersonated_employee_retrieve 2 params → 200401403404429
GET
/aggregations/most_impersonated_employee_non_vip
Retrieve the most impersonated non-VIP employees for a specified period.
v1_aggregations_most_impersonated_employee_non_vip_retrieve 2 params → 200401403404429
GET
/aggregations/most_impersonated_employee_vip
Retrieve the most impersonated VIP employees for a specified period.
v1_aggregations_most_impersonated_employee_vip_retrieve 2 params → 200401403404429
GET
/aggregations/most_impersonated_vendor
Retrieve a list of the most impersonated vendors in attacks.
v1_aggregations_most_impersonated_vendor_retrieve 2 params → 200401403404429
GET
/aggregations/recipient_employees
Retrieve a list of the employees who were recipients of attacks, based on their job titles.
v1_aggregations_recipient_employees_retrieve 2 params → 200401403404429
GET
/aggregations/recipient_employees_non_vip
Retrieve a list of the non-VIP employees who were recipients of attacks, based on their job titles.
v1_aggregations_recipient_employees_non_vip_retrieve 2 params → 200401403404429
GET
/aggregations/recipient_employees_vip
Retrieve a list of the VIP employees who were recipients of attacks, based on their job titles.
v1_aggregations_recipient_employees_vip_retrieve 2 params → 200401403404429
GET
/aggregations/sender_impersonation_breakdown
Retrieve a breakdown of attacks based on sender impersonation.
v1_aggregations_sender_impersonation_breakdown_retrieve 2 params → 200401403404429
GET
/aggregations/trending_attacks
Retrieve the list of trending attacks for a specified period.
v1_aggregations_trending_attacks_retrieve 2 params → 200401403404429

Schemas 30

The contract defines 30 schemas that model the data the API accepts and returns. The most detailed are DashboardSummary (14 properties), Country (6 properties), RecipientEmployeeNonVIP (4 properties), RecipientEmployee (4 properties). Each schema is shown below with its type and property counts.

AttackerOriginResponse
object
1 property 1 required
SenderImpersonationBreakdown
object
2 properties 2 required
AttackStrategyBreakdown
object
3 properties 3 required
MostImpersonatedEmployeeVIP
object
3 properties 3 required
SenderImpersonationResponse
object
1 property 1 required
TrendingAttacks
object
4 properties 4 required
RecipientEmployeeVIPResponse
object
1 property 1 required
MostImpersonatedEmployeeNonVIPResponse
object
1 property 1 required
AttackFrequencyResponse
object
1 property 1 required
AttackStoppedResponse
object
1 property 1 required
AttackVectorBreakdownResponse
object
1 property 1 required
RecipientEmployeeResponse
object
1 property 1 required
RecipientEmployeeNonVIP
object
4 properties 4 required
MostImpersonatedEmployeeNonVIP
object
3 properties 3 required
DashboardSummary
object
14 properties 14 required
MostImpersonatedEmployeeVIPResponse
object
1 property 1 required
AttackVectorBreakdown
object
2 properties 2 required
MostImpersonatedEmployeeResponse
object
1 property 1 required
RecipientEmployeeVIP
object
4 properties 4 required
RecipientEmployee
object
4 properties 4 required
MostImpersonatedEmployee
object
3 properties 3 required
MostImpersonatedVendor
object
3 properties 3 required
RecipientEmployeeNonVIPResponse
object
1 property 1 required
AttackerOrigin
object
3 properties 3 required
AttackFrequency
object
3 properties 3 required
AttackStopped
object
3 properties 3 required
AttackStrategyBreakdownResponse
object
1 property 1 required
MostImpersonatedVendorResponse
object
1 property 1 required
TrendingAttacksResponse
object
1 property 1 required
Country
object
6 properties 6 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

abnormal-dashboard-aggregations-api-openapi.yml Raw ↑

Other APIs Abnormal AI publishes across the network.

Abnormal AI AI Security Mailbox (formerly known as Abuse Mailbox) API
AE Profile APIs.io
Abnormal AI Audit Logs API
AE Profile APIs.io
Abnormal AI Cases API
AE Profile APIs.io
Abnormal AI Detection360 API
AE Profile APIs.io
Abnormal AI Employee Insights API
AE Profile APIs.io
Abnormal AI Messages API
AE Profile APIs.io
Abnormal AI Resources API
AE Profile APIs.io
Abnormal AI Roles API
AE Profile APIs.io
Abnormal AI Search and Respond API
AE Profile APIs.io
Abnormal AI Security Settings API
AE Profile APIs.io
Abnormal AI SPM API
AE Profile APIs.io
Abnormal AI Threats API
AE Profile APIs.io
#Dashboard Aggregations
← Back to A APIs
API Details
ID
abnormal:abnormal-dashboard-aggregations-api
Base URL
https://api.abnormalplatform.com/v1
Docs
https://app.swaggerhub.com/apis-docs/abnormal-security/abx/1.4.3
Provider
Abnormal AI
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=abnormal-dashboard-aggregations-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/abnormal-dashboard-aggregations-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Abnormal AI Dashboard Aggregations API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.