# Cisco Umbrella Investigate API

**Canonical:** https://apis.io/apis/cisco-umbrella/investigate-investigate/  
**Provider:** Cisco Umbrella — https://apis.io/providers/cisco-umbrella/  
**Base URL:** https://api.umbrella.com/investigate/v2  
**Documentation:** https://developer.cisco.com/docs/cloud-security/umbrella-api-reference-investigate-overview/

Cisco Umbrella Investigate API is one of 26 APIs that [Cisco Umbrella](https://apis.io/providers/cisco-umbrella/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include AS Information for a Domain, Cisco Secure Malware Analytics Integration, Co-occurrences for a Domain, Domain Status and Categorization, and Domain Volume. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

The Umbrella Investigate API provides a complete view of domains in relation to IP and autonomous system number (ASN) information.

## Machine-readable artifacts (5)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/cisco-umbrella/refs/heads/main/openapi/cisco-umbrella-investigate-investigate-openapi.yml
- **OpenAPI Source** — https://pubhub.devnetcloud.com/media/cloud-security-apis-in-eft/docs/reference/investigate/investigate.yaml
- **Documentation** — https://developer.cisco.com/docs/cloud-security/umbrella-api-reference-investigate-overview/
- **APIReference** — https://developer.cisco.com/docs/cloud-security/umbrella-api-reference-investigate-overview/
- **Overlay** — https://raw.githubusercontent.com/api-evangelist/cisco-umbrella/refs/heads/main/overlays/cisco-umbrella-investigate-investigate-overlay.yaml

## Other Cisco Umbrella APIs (12)

- [Cisco Umbrella Key Admin API](https://apis.io/apis/cisco-umbrella/admin-key-admin/)
- [Cicso Umbrella Managed Providers API](https://apis.io/apis/cisco-umbrella/admin-managed-providers/)
- [Cisco Umbrella Providers API](https://apis.io/apis/cisco-umbrella/admin-providers/)
- [Cisco Umbrella S3 Bucket Key Rotation API](https://apis.io/apis/cisco-umbrella/admin-s3-key-rotation/)
- [Cisco Umbrella Service Providers Console API](https://apis.io/apis/cisco-umbrella/admin-service-providers-console/)
- [Cisco Umbrella Users and Roles API](https://apis.io/apis/cisco-umbrella/admin-users-roles/)
- [Cisco Umbrella Token Authorization API](https://apis.io/apis/cisco-umbrella/auth-token/)
- [Cisco Cloudlock API](https://apis.io/apis/cisco-umbrella/cloudlock-cloudlock/)
- [Cisco Umbrella Internal Domains API](https://apis.io/apis/cisco-umbrella/deployments-internal-domains/)
- [Cisco Umbrella Internal Networks API](https://apis.io/apis/cisco-umbrella/deployments-internal-networks/)
- [Cisco Umbrella Network Devices API](https://apis.io/apis/cisco-umbrella/deployments-network-devices/)
- [Cisco Umbrella Network Tunnels API](https://apis.io/apis/cisco-umbrella/deployments-network-tunnels/)

## Tags

AS Information for a Domain, Cisco Secure Malware Analytics Integration, Co-occurrences for a Domain, Domain Status and Categorization, Domain Volume, Passive DNS, Popularity List-Top Million Domains, Related Domains for a Domain, Search Domain, Security Information for a Domain, Subdomains for a Domain, Tagging Timeline, Umbrella, WHOIS Information for a Domain

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/cisco-umbrella/investigate-investigate/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/cisco-umbrella/.