Nord Security Events API is one of 35 APIs that Nord Security publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Event. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, authentication docs, and rate-limit docs.
This API exposes
36 operations
across 36 paths,
and defines 54 schemas.
It is described by OpenAPI 3.2.0, at version 3.
Requests are made against a single base URL, https://platform-integration-api.nordstellar.com.
36 operations36 paths54 schemas33 GET3 PATCH
Metadata
The identity and technical contract details declared by the specification.
Nord Security Events API declares
1 security scheme
for authenticating requests.
It accepts HTTP bearer tokens (JWT) (Bearer).
By default, every request must be authenticated.
Bearer — Please enter a valid token.
Paths & Operations 36
Across 36 paths, the API surfaces 36 operations — 33 GET, 3 PATCH. Each is listed below with its method, path, parameters, and response codes.
Events 36
GET
/v1/events/combo-lists/{event-id}
Retrieves combo list event details.
1 param→ 200400401403500
GET
/v1/events/dark-web-forum-posts/{event-id}
Retrieves dark web forum post event details.
1 param→ 200400401403500
GET
/v1/events/dark-web-marketplace-posts/{event-id}
Retrieves dark web marketplace post event details.
Retrieves attack surface web application vulnerability event details.
1 param→ 200400401403500
GET
/v3/events/combo-lists/{event-id}
Retrieves combo list event details.
1 param→ 200400401403500
GET
/v3/events/consumer-credentials/{event-id}
Retrieves consumer credential event details.
2 params→ 200400401403500
GET
/v3/events/dark-web-forum-posts/{event-id}
Retrieves dark web forum post event details.
1 param→ 200400401403500
GET
/v3/events/dark-web-marketplace-posts/{event-id}
Retrieves dark web marketplace post event details.
1 param→ 200400401403500
GET
/v3/events/dark-web-ransomware-posts/{event-id}
Retrieves dark web Ransomware post event details.
1 param→ 200400401403500
GET
/v3/events/dark-web-telegram-posts/{event-id}
Retrieves dark web Telegram post event details.
1 param→ 200400401403500
GET
/v3/events/data-breaches/{event-id}
Retrieves data breach event details.
1 param→ 200400401403500
GET
/v3/events/domain-permutations/{event-id}
Retrieves domain permutation event details.
1 param→ 200400401403500
GET
/v3/events/malware-infections/{event-id}
Retrieves malware infection event details.
1 param→ 200400401403500
PATCH
/v3/events/{event-id}/is_resolved
Resolves an event
1 parambody→ 200400401403500
Schemas 54
The contract defines 54 schemas that model the data the API accepts and returns. The most detailed are AttackSurfaceVulnerability.AttackSurfaceNetworkServiceVulnerability (44 properties), AttackSurfaceVulnerability.AttackSurfaceWebApplicationVulnerability (39 properties), AttackSurfaceVulnerability.AttackSurfaceDnsVulnerability (38 properties), DomainPermutation.DomainPermutation (20 properties). Each schema is shown below with its type and property counts.
DarkWebRansomware.DarkWebRansomwarePost
object
16 properties16 required
DataBreach.DataPoint
object
2 properties2 required
MalwareInfection.CreditCard
object
4 properties4 required
DomainPermutation.Redirect
object
2 properties2 required
MalwareInfection.DeviceInfo
object
6 properties6 required
ValidationProblemDetails
object
Error information that describes why the request has failed. Format conforms to IETF's RFC 9457.
6 properties4 required
DarkWebMarketplace.DarkWebMarketplacePost
object
20 properties20 required
DarkWebMarketplace.MarketplaceType
string
DomainPermutation.ThreatAnalysis
object
2 properties2 required
DarkWebRansomware.SocialMediaType
string
DarkWebRansomware.Social
object
2 properties2 required
DomainPermutation.AiAnalysis
object
2 properties2 required
Models.Vulnerability
object
18 properties18 required
DataBreach.DataBreachType
string
Models.Asset
object
2 properties2 required
MalwareInfection.Cookie
object
4 properties4 required
DataBreach.DataBreach
object
14 properties11 required
MalwareInfection.File
object
1 property1 required
DomainPermutation.ServiceBanners
object
2 properties2 required
Models.DarkWebTelegramPost
object
17 properties17 required
Models.OpenPort
object
13 properties13 required
Models.ComboList
object
10 properties10 required
DomainPermutation.DomainPermutation
object
20 properties20 required
DarkWebRansomware.Country
object
2 properties2 required
Models.EventType
string
MalwareInfection.DomainCookies
object
4 properties4 required
Resolve.EventState
object
1 property
MalwareInfection.Autofill
object
3 properties3 required
Models.RiskLevel
string
DarkWebRansomware.Victim
object
9 properties9 required
ProblemDetails
object
Error information that describes why the request has failed. Format conforms to IETF's RFC 9457.
Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.
Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.
MCP tools for apis
4 tools reach this content
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
A second provider on the same verified email joins the account you already have.
Your account
ⓘWhere this information came from
This is an independent, third-party profile of Nord Security Events API, published by
API Evangelist. We do not operate, host, resell, or
support these APIs, and we are not affiliated with or endorsed by the company unless stated above.
Everything here is built from publicly available information — the company's own site,
developer portal, documentation, public repositories, and the specifications it publishes for public use.
Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's
public API artifacts, scored against a published rubric. They are not certifications,
endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and
you do not need to justify the request. A removed company is recorded as unrated, never scored
zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy → On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.
