How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Oracle

Oracle Threatintel API

The threatintel API from Oracle — 5 operation(s) for threatintel.

Documentation Provider Profile APIs.io OpenAPI GitHub

Oracle Threatintel API is one of 378 APIs that Oracle publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Threat Intel. The published artifact set on APIs.io includes an OpenAPI specification and an API reference.

This API exposes 5 operations across 5 paths, and defines 19 schemas. It is described by OpenAPI 3.2.0, at version 20220901.

Requests are made against 2 base URLs: http://127.0.0.1/20220901, https://127.0.0.1/20220901.

5 operations 5 paths 19 schemas 4 GET1 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
20220901
Base URL
https://{host}:{port}/ords/
Resource Areas
1

Paths & Operations 5

Across 5 paths, the API surfaces 5 operations — 4 GET, 1 POST. Each is listed below with its method, path, parameters, and response codes.

threatintel 5
GET
/indicatorCounts
Get the current count of each threat indicator type. Indicator counts can be sorted in ascending or descending order.
ListIndicatorCounts 3 params → 200400401404429500default
GET
/indicators
Get a list of threat indicator summaries based on the search criteria.
ListIndicators 16 params → 200400401404429500default
POST
/indicators/actions/summarize
Get indicator summaries based on advanced search criteria.
SummarizeIndicators 4 params body → 200400401404429500default
GET
/indicators/{indicatorId}
Get detailed information about a threat indicator with a given identifier
GetIndicator 3 params → 200400401404429500default
GET
/threatTypes
List available threat types
ListThreatTypes 5 params → 200400401404429500default

Schemas 19

The contract defines 19 schemas that model the data the API accepts and returns. The most detailed are SummarizeIndicatorsDetails (15 properties), Indicator (13 properties), IndicatorSummary (12 properties), GeodataDetails (9 properties). Each schema is shown below with its type and property counts.

IndicatorSummary
object
Summary of a data signature observed on a network or host that indicates a potential security threat.
12 properties 9 required
IndicatorSourceSummary
object
Information about the source of threat indicator data.
1 property 1 required
IndicatorRelationship
object
A relationship name and list of releated entities.
3 properties 3 required
ThreatType
object
A threat type along with attribution data that associates it to a threat indicator.
3 properties 3 required
IndicatorAttribute
object
An attribute name and list of values with attribution.
3 properties 3 required
SummarizeIndicatorsDetails
object
Query parameters to filter indicators
15 properties
IndicatorCountCollection
object
A list of indicator counts by indicator type.
1 property 1 required
ThreatTypeSummary
object
The name of a threat type and its ID.
2 properties 2 required
Indicator
object
A data signature observed on a network or host that indicates a potential security threat. Indicators can be plain text or computed (hashed) values.
13 properties 10 required
IndicatorCountDimensions
object
The indicator dimension that was counted, such as the indicator type.
2 properties
IndicatorAttributeSummary
object
An attribute name and list of values.
2 properties 2 required
EntityReference
object
A reference to a resource or other entity.
1 property 1 required
Error
object
Error Information.
2 properties 2 required
DataAttribution
object
The confidence, source information, and visibility for a particular sighting or observation of some data associated with a threat indicator. This associated da…
5 properties 4 required
IndicatorCountSummary
object
A group of indicators with the same dimensions, such as the same indicator type.
2 properties 2 required
DataVisibility
object
The visibility level of attribution data, including its [Traffic Light Protocol (TLP)](https://www.cisa.gov/tlp) color.
2 properties 2 required
IndicatorSummaryCollection
object
List of indicator summary objects.
1 property 1 required
GeodataDetails
object
Geodata information for a given IP address
9 properties 7 required
ThreatTypesCollection
object
List of threat types that can be associated with threat indicators.
1 property 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

oracle-threatintel-api-openapi.yml Raw ↑

Other APIs Oracle publishes across the network.

Oracle Database REST APIs
AE Profile APIs.io
Oracle Integration Cloud API
AE Profile APIs.io
Oracle Fusion Cloud Applications API
AE Profile APIs.io
Oracle Fusion Cloud Financials REST API
AE Profile APIs.io
Oracle Fusion Cloud HCM REST API
AE Profile APIs.io
Oracle Fusion Cloud CX Sales and Service REST API
AE Profile APIs.io
Oracle Fusion Cloud SCM REST API
AE Profile APIs.io
Oracle Fusion Cloud Procurement REST API
AE Profile APIs.io
Oracle Content Management API
AE Profile APIs.io
OCI Generative AI API
AE Profile APIs.io
OCI AI Vision API
AE Profile APIs.io
OCI AI Language API
AE Profile APIs.io
#Threat Intel
← Back to O APIs
API Details
ID
oracle:oracle-threatintel-api
Base URL
https://{host}:{port}/ords/
Docs
https://docs.oracle.com/en/database/oracle/oracle-database/
Provider
Oracle
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=oracle-threatintel-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/oracle-threatintel-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Oracle Threatintel API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.