Armor

Armor Security Incidents API

The Security Incidents API from Armor — 2 operation(s) for security incidents.

Documentation GitHub OpenAPI

Business capability

Threat Detection & Response Management BC-620.30

Operations 2

GET /security-incidents #

GET /security-incidents/severity-count #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/armor-security-incidents-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  version: v1
  title: Armor Services Security Incidents API
servers:
- url: https://api.armor.com
tags:
- name: Security Incidents
paths:
  /security-incidents:
    get:
      tags:
      - Security Incidents
      operationId: SecurityIncidents_GetSecurityIncidents
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FireHost.Services.Common.Infrastructure.PagedResultSet%5BFireHost.Infrastructure.SecurityIncidents.Models.SecurityIncident%5D'
              example:
                total: 3
                page: 1
                items:
                - ticketNumber: IMS-1
                  ticketSummary: Test Ticket 1
                  ticketPriority: '1'
                  ticketStatus: Waiting For Support
                  createdDate: '2026-02-12T16:26:00.1698072+00:00'
                  enabled: true
                  ticketLink: null
                - ticketNumber: IMS-2
                  ticketSummary: Test Ticket 2
                  ticketPriority: '0'
                  ticketStatus: Waiting For Customer Action
                  createdDate: '2026-02-12T16:26:00.1698072+00:00'
                  enabled: true
                  ticketLink: null
                - ticketNumber: IMS-3
                  ticketSummary: Test Ticket 3
                  ticketPriority: '2'
                  ticketStatus: Resolved
                  createdDate: '2026-02-12T16:26:00.1698072+00:00'
                  enabled: false
                  ticketLink: null
            text/json:
              schema:
                $ref: '#/components/schemas/FireHost.Services.Common.Infrastructure.PagedResultSet%5BFireHost.Infrastructure.SecurityIncidents.Models.SecurityIncident%5D'
        '400':
          description: Bad Request
      deprecated: false
  /security-incidents/severity-count:
    get:
      tags:
      - Security Incidents
      operationId: SecurityIncidents_GetSecurityIncidentsSeverityCount
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FireHost.Infrastructure.SecurityIncidents.Models.OpenSecurityIncidentStats'
              example:
                totalCriticalStatus: 10
                totalHighStatus: 10
                totalMediumStatus: 10
                totalLowStatus: 10
            text/json:
              schema:
                $ref: '#/components/schemas/FireHost.Infrastructure.SecurityIncidents.Models.OpenSecurityIncidentStats'
        '400':
          description: Bad Request
      deprecated: false
components:
  schemas:
    FireHost.Infrastructure.SecurityIncidents.Models.OpenSecurityIncidentStats:
      type: object
      properties:
        totalCriticalStatus:
          format: int32
          type: integer
        totalHighStatus:
          format: int32
          type: integer
        totalMediumStatus:
          format: int32
          type: integer
        totalLowStatus:
          format: int32
          type: integer
  securitySchemes:
    Authorization:
      type: apiKey
      description: Authorization Token
      name: Authorization
      in: header
    X-Account-Context:
      type: apiKey
      description: X-Account-Context
      name: X-Account-Context
      in: header