How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Alloy Investigations API

Investigation lifecycle, assignment, review, archival, and types.

Alloy Investigations API is one of 19 APIs that Alloy publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Investigations. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, a getting-started guide, and authentication docs.

This API exposes 24 operations across 23 paths, and defines 2 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against 3 base URLs: https://sandbox.alloy.co/v1, https://alloy.co/v1, https://api.alloy.co/v1.

24 operations 23 paths 2 schemas 7 GET4 PATCH4 POST9 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://api.alloy.co/v1
Authentication
HTTP Basic, OAuth 2.0, HTTP Basic, HTTP Bearer
Resource Areas
1

Authentication & Security 4

Alloy Investigations API declares 4 security schemes for authenticating requests. It accepts HTTP basic authentication (basic). It supports OAuth 2.0 (oauth2) using the clientCredentials flow. It accepts HTTP basic authentication (basicAuth). It accepts HTTP bearer tokens (bearerAuth).

  • basic — HTTP basic authorization using a workflow token and secret
  • oauth2 — OAuth2 using a workflow token and secret to generate a bearer token
  • basicAuth — HTTP Basic Authentication with workflow or account-level API key as username and secret as password.
  • bearerAuth — OAuth 2.0 bearer token obtained via the OAuth endpoints.

Paths & Operations 24

Across 23 paths, the API surfaces 24 operations — 7 GET, 4 PATCH, 4 POST, 9 PUT. Each is listed below with its method, path, parameters, and response codes.

Investigations 24

Investigations are reviewable items that contain Alerts for suspicious activities for Alloy's Ongoing Monitoring solution.

GET
/investigations/{investigation_token}
Get an Investigation
1 param → 200401404409500503
GET
/investigations
Get list of Investigations
5 params → 200401
POST
/investigations
Create an Investigation
body → 201400
POST
/investigations/{investigation_token}/notes
Add a Note to an Investigation
postInvestigationNote 1 param body → 201
PATCH
/investigations/{investigation_token}/evidences
Update Investigation Evidences
patchInvestigationEvidences 1 param body → 200
PUT
/investigations/{investigation_token}/promote
Promote an Investigation
putInvestigationPromote 1 param → 200
PUT
/investigations/{investigation_token}/review
Review an Investigation
putInvestigationReview 1 param body → 200
PUT
/investigations/archive
Archive Investigations
putInvestigationsArchive → 200
PUT
/investigations/unarchive
Unarchive Investigations
putInvestigationsUnarchive → 200
PUT
/investigations/assign
Assign Investigations
putInvestigationsAssign body → 200
PUT
/investigations/unassign
Unassign Investigations
putInvestigationsUnassign → 200
GET
/investigations/{investigation_token}/alerts/{journey_application_token}
Get an Investigation Alert by Journey Application
getInvestigationAlert 2 params → 200
PUT
/investigations/{investigation_token}/alerts/{journey_application_token}/assign
Assign an Investigation Alert
putInvestigationAlertAssign 2 params → 200
PUT
/investigations/{investigation_token}/alerts/{journey_application_token}/unassign
Unassign an Investigation Alert
putInvestigationAlertUnassign 2 params → 200
PUT
/investigations/{investigation_token}/alerts/{journey_application_token}/review
Review an Investigation Alert
putInvestigationAlertReview 2 params body → 200
POST
/investigations/{investigation_token}/alerts/{journey_application_token}/review/{manual_review_token}/review
Submit a Manual Review on an Investigation Alert
postInvestigationAlertManualReview 3 params body → 201
POST
/investigations/types
Create an Investigation Type
postInvestigationType body → 201
PATCH
/investigations/types/archive
Archive Investigation Types
patchInvestigationTypesArchive → 200
PATCH
/investigations/types/unarchive
Unarchive Investigation Types
patchInvestigationTypesUnarchive → 200
PATCH
/investigations/types/delete
Delete an Investigation Type
patchInvestigationTypeDelete → 200
GET
/investigations/types/list
List Investigation Types
getInvestigationTypes → 200
GET
/investigations/use-cases
List Investigation Use Cases
getInvestigationUseCases → 200
GET
/investigations/filters
List Investigation Filters
getInvestigationFilters → 200
GET
/investigations/assignable-agents
List Assignable Investigation Agents
getInvestigationAssignableAgents → 200

Schemas 2

The contract defines 2 schemas that model the data the API accepts and returns. The most detailed are Investigation (5 properties), Note (3 properties). Each schema is shown below with its type and property counts.

Note
object
3 properties
Investigation
object
5 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

alloy-com-investigations-api-openapi.yml Raw ↑

Other APIs Alloy publishes across the network.

Alloy Bank Accounts API
Alloy Batches API
Alloy Cases API
Alloy Custom Lists API
Alloy Documents API
Alloy Entities API
Alloy Evaluations API
Alloy Events API
Alloy Groups API
Alloy Journeys API
Alloy Lists API
Alloy OAuth API
Where this information came from

This is an independent, third-party profile of Alloy Investigations API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.