A hosted extractor **source** represents an external source system on the internet. The **source** resource in CDF contains all the information the extractor needs to connect to the external source system.A source can have many jobs, each streaming different data from the source system.
Cognite Sources API declares
5 security schemes
for authenticating requests.
It accepts HTTP bearer tokens (OpenID Connect or OAuth2 token) (oidc-token).
It supports OAuth 2.0 (oauth2-client-credentials) using the clientCredentials flow, exposing 1 scope.
It supports OAuth 2.0 (oauth2-auth-code) using the authorizationCode flow, exposing 1 scope.
It supports OAuth 2.0 (oauth2-open-industrial-data) using the clientCredentials flow, exposing 1 scope.
It supports OpenID Connect (org-oidc-token) discovered at https://auth.cognite.com/.well-known/openid-configuration.
By default, every request must be authenticated.
oidc-token — Access token issued by the CDF project's configured identity provider. Access token must be an OpenID Connect token, and the project must be configured to acce…
oauth2-client-credentials — Access token issued by the CDF project's configured identity provider. Access token must be an OpenID Connect token, and the project must be configured to acce…
oauth2-auth-code — Access token issued by the CDF project's configured identity provider. Access token must be an OpenID Connect token, and the project must be configured to acce…
oauth2-open-industrial-data — Auth flow for Open Industrial Data. Get your client secret from https://hub.cognite.com/open-industrial-data-211.
org-oidc-token — Access token issued by the Cognite authorization server, and valid for the target organization. The token must be an OpenID Connect token, and it can be obtain…
Paths & Operations 5
Across 4 paths, the API surfaces 5 operations — 1 GET, 4 POST. Each is listed below with its method, path, parameters, and response codes.
Sources 5
A hosted extractor source represents an external source system on the internet. The source resource in CDF contains all the information the extractor needs to connect to the exter…
GET
/hostedextractors/sources
List Sources
list_sources2 params→ 200400422
POST
/hostedextractors/sources
Create Sources
create_sourcesbody→ 200400422
POST
/hostedextractors/sources/byIds
Retrieve Sources
retrieve_sourcesbody→ 200400422
POST
/hostedextractors/sources/delete
Delete Sources
delete_sourcesbody→ 200400422
POST
/hostedextractors/sources/update
Update Sources
update_sourcesbody→ 200400422
Schemas 66
The contract defines 66 schemas that model the data the API accepts and returns. The most detailed are MqttV5Source (10 properties), RestSource (10 properties), MqttV3Source (10 properties), KafkaSource (9 properties). Each schema is shown below with its type and property counts.
UpdateEventHubSourceItem
object
3 properties3 required
UpdateKafkaSource
object
5 properties
UpdateItem_RestScheme_
object
Set a new scheme for this source to use
1 property1 required
CreateClientCredentialsAuthentication
object
6 properties5 required
UpdateItem_KafkaAuthentication_
object
Set new credentials for authenticating with the broker.
1 property1 required
SimpleBasicAuthentication
object
Username and password authentication.
2 properties2 required
Items_CreateSource_
object
1 property1 required
UpdateItem_CACertificate_
object
Set a new certificate authority.
1 property1 required
CreateEventHubSource
object
8 properties4 required
CreateHeaderValueAuthentication
object
3 properties3 required
CreateQueryParamAuthentication
object
3 properties3 required
UpdateMqttV5Source
object
6 properties
CreateScramSha256
object
3 properties3 required
KafkaBrokerList
array
List of redundant kafka brokers to connect to.
UpdateKafkaSourceItem
object
3 properties3 required
CreateKafkaSource
object
7 properties3 required
CreateRestSource
object
8 properties3 required
MqttV3Source
object
10 properties5 required
EpochTimestamp
integer
The number of milliseconds since 00:00:00 Thursday, 1 January 1970, Coordinated Universal Time (UTC), minus leap seconds.
CreateMqttV3Source
object
8 properties3 required
CertificateType
string
Type of certificate in the certificate field.
UpdateItem_AuthCertificate_
object
Set a new authentication certificate.
1 property1 required
UpdateEventHubSource
object
6 properties
ClientCredentialsAuthentication
object
5 properties4 required
EventhubAuthentication
object
Authentication details for eventhub. Basic authentication uses a shared access key, where the username is the key name. The kay value is not returned for secur…
ItemsWithIgnoreUnknownIdsAndForce_ExternalId_
object
3 properties1 required
UpdateItem_Host_
object
Set a new host or IP address.
1 property1 required
Items_Source_
object
1 property1 required
ExternalIdWrapper
object
1 property1 required
Items_UpdateSource_
object
1 property1 required
UpdateMqttV5SourceItem
object
3 properties3 required
KafkaSource
object
9 properties5 required
CACertificate
object
Custom certificate authority certificate to let the source use a self signed certificate.
2 properties2 required
SimpleBasicAuthenticationWrite
object
Username and password authentication.
3 properties2 required
UpdateRestSourceItem
object
3 properties3 required
EventhubAuthenticationWrite
object
Authentication details for eventhub. Basic authentication uses a shared access key, where the username is the key name, and the password is the key value.
QueryParamAuthentication
object
2 properties2 required
MqttV5Source
object
10 properties5 required
BasicAuthentication
object
2 properties2 required
CreateMqttV5Source
object
8 properties3 required
ItemsWithCursor_Source_
object
2 properties1 required
MqttAuthentication
object
Method used for authenticating with the mqtt broker. This may be used together with auth certificate.
CreateScramSha512
object
3 properties3 required
ScramSha256
object
2 properties2 required
ItemsWithIgnoreUnknownIds_ExternalId_
object
2 properties1 required
CogniteExternalId
string
The external ID provided by the client. Must be unique for the resource type.
MqttAuthenticationWrite
object
Method used for authenticating with the mqtt broker. This may be used together with auth certificate.
UpdateMqttV3SourceItem
object
3 properties3 required
KafkaBroker
object
2 properties2 required
UpdateMqttV3Source
object
6 properties
RestSource
object
10 properties6 required
UpdateItem_MqttAuthentication_
object
Set new credentials for authenticating with the broker.
1 property1 required
ValidationErrorContent
object
Cognite API error.
2 properties2 required
ScramSha512
object
2 properties2 required
KafkaAuthentication
object
Method used for authenticating with the kafka brokers. This may be used together with auth certificate.
Error
object
Cognite API error.
4 properties2 required
HeaderValueAuthentication
object
2 properties2 required
EventHubSource
object
9 properties6 required
UpdateItem_Port_
object
Set a new port this source should connect to.
1 property1 required
UpdateRestSource
object
4 properties
KafkaAuthenticationWrite
object
Method used for authenticating with the kafka brokers. This may be used together with auth certificate.
UpdateItem_KafkaBrokers_
object
Set a new list of redundant kafka brokers.
1 property1 required
CreateBasicAuthentication
object
3 properties3 required
CertificateDetails
object
Excerpt of certificate details
2 properties2 required
AuthCertificate
object
Authentication certificate (if configured) used to authenticate to source.
4 properties3 required
UpdateSetNull
object
1 property1 required
Specification
The full machine-readable OpenAPI contract behind this narrative.
Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.
Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.
MCP tools for apis
4 tools reach this content
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
A second provider on the same verified email joins the account you already have.
Your account
ⓘWhere this information came from
This is an independent, third-party profile of Cognite Sources API, published by
API Evangelist. We do not operate, host, resell, or
support these APIs, and we are not affiliated with or endorsed by the company unless stated above.
Everything here is built from publicly available information — the company's own site,
developer portal, documentation, public repositories, and the specifications it publishes for public use.
Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's
public API artifacts, scored against a published rubric. They are not certifications,
endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and
you do not need to justify the request. A removed company is recorded as unrated, never scored
zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy → On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.