How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Cyware

Cyware Threat Data Objects API

Threat Data Objects

Documentation Provider Profile APIs.io OpenAPI GitHub

Cyware Threat Data Objects API is one of 35 APIs that Cyware publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Threat Data Objects. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and authentication docs.

This API exposes 24 operations across 24 paths. It is described by OpenAPI 3.2.0, at version 3.6.2.

Requests are made against a single base URL, https://{ctix_host}/ctixapi.

24 operations 24 paths 0 schemas 22 GET2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
3.6.2
Base URL
https://demo.cyware.com/ctixapi
Authentication
API Key
Contact
Cyware
Terms of Service
View terms
Resource Areas
1

Authentication & Security 1

Cyware Threat Data Objects API declares 1 security scheme for authenticating requests. An API key is passed in the query as AccessID (ctixOpenApiSignature). By default, every request must be authenticated.

  • ctixOpenApiSignature — Intel Exchange Open API credentials. Every request carries three query parameters: AccessID (the access ID of the Open API credential), Expires (an epoch times…

Paths & Operations 24

Across 24 paths, the API surfaces 24 operations — 22 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Threat Data Objects 24

Threat Data Objects

GET
/ingestion/actions/
Get Actions List
listActions 6 params → 200
GET
/ingestion/actions/{object_type}/{object_id}/stats/
Get Action Statistics
actionStatistics 6 params → 200
POST
/ingestion/threat-data/threat-actor/{object_id}/basic/
Add Custom Aliases to Threat Actors
addCustomAliases 1 param body → 200
GET
/ingestion/threat-data/kill_chain_phases/{kill_chain_id}/
Get Kill Chain Details
killChainDetails 3 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/kill_chain_phases/
Get Kill Chain Phases List
listKillChainPhases 4 params → 200
GET
/ingestion/published-collections/{object_type}/{object_id}/
Get Published Collections of a Threat Object List
listPublishedCollectionsOfAThreatObject 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/source_details/
Get Source Details List
listSourceDetails 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/external-references/
Get Source External References List
listSourceExternalReferences 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/basic/
Get Threat Data Object Details List
listThreatDataObjectDetails 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/source-description/
Get Threat Data Object Sources List
listThreatDataObjectSources 4 params → 200
GET
/ingestion/threat-data/source-references/
Get Object Source Details in List View
objectSourceDetailsInListView 6 params → 200
GET
/ingestion/threat-data/source-reference/{id}/
Get Object Source Details
objectSourceDetails 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/advanced-details/
Get Threat Data Object Additional Details
threatDataObjectAdvancedDetails 4 params → 200
GET
/ingestion/threat-data/source-overview/
Get Threat Data Object Details in Table View
threatDataObjectDetailsInTableView 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/refresh-score/
Refresh Confidence Score (Risk Score)
refreshConfidenceScore 2 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/key-evidence/
Get Key Evidence of Confidence Score (Risk Score)
retrieveKeyEvidenceOfConfidenceScore 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/custom_attributes/
Get Custom Attributes List of Threat Data Object
listCustomAttributesOfThreatDataObject 4 params → 200
GET
/integration/apps/update/threatdata/
Get Enriched Threat Data
enrichThreatData 7 params → 200
POST
/ingestion/threat-data/action/{action_type}/
Perform Action on Threat Data Object
performActionOnThreatDataObject 1 param body → 200400
GET
/ingestion/threat-data/{object_type}/{object_id}/quick-actions/
Get Quick Action Details
quickActionDetails 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/source_specific_relations/
Filter Relations by Source
filterRelationsBySource 2 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/relations/
Get Relations List of Threat Data Object
listRelationsOfThreatDataObject 5 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/relations/card
Get Relations List
listRelations 4 params → 200
GET
/ingestion/threat-data/{object_type}/{object_id}/relations/card/
Get Relations Overview
relationsOverview 4 params → 200

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

cyware-threat-data-objects-api-openapi.yml Raw ↑

Other APIs Cyware publishes across the network.

Cyware MCP Server
AE Profile APIs.io
Cyware Administration API
AE Profile APIs.io
Cyware Allowed Indicators API
AE Profile APIs.io
Cyware Analytics API
AE Profile APIs.io
Cyware ATT&CK Navigator API
AE Profile APIs.io
Cyware Authentication API
AE Profile APIs.io
Cyware Code Snippets API
AE Profile APIs.io
Cyware Create Intel via Open API API
AE Profile APIs.io
Cyware Custom Email Templates API
AE Profile APIs.io
Cyware Dashboards API
AE Profile APIs.io
Cyware Detailed Submission API
AE Profile APIs.io
Cyware Events API
AE Profile APIs.io
#Threat Data Objects
← Back to C APIs
API Details
ID
cyware:cyware-threat-data-objects-api
Base URL
https://demo.cyware.com/ctixapi
Docs
https://ctixapiv3.cyware.com/
Provider
Cyware
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=cyware-threat-data-objects-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/cyware-threat-data-objects-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Cyware Threat Data Objects API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.