Demisto Incidentfields API
The Incidentfields API from Demisto — 2 operation(s) for incidentfields.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/demisto-incidentfields-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
description: This is the public REST API to integrate with the demisto server.
title: Demisto Incidentfields API
version: 2.0.0
servers:
- url: https://hostname:443
security:
- api_key: []
- csrf_token: []
- x-xdr-auth-id: []
tags:
- name: Incidentfields
paths:
/incidentfields/associatedTypes/{type}:
get:
summary: Get all incident fields associated with incident type
operationId: getIncidentsFieldsByIncidentType
parameters:
- description: the name (case sensitive) of the incident type
name: type
in: path
required: true
schema:
type: string
responses:
'200':
description: Returns a list of incident fields associated with the incident type
content:
application/json:
schema:
type: array
items:
$ref: '#/components/schemas/IncidentField'
tags:
- Incidentfields
/incidentfields/import:
post:
description: Import an incidents field to Cortex XSOAR
summary: Import an incidents field
operationId: importIncidentFields
responses:
'200':
description: The saved incident field
content:
application/json:
schema:
$ref: '#/components/schemas/IncidentField'
requestBody:
content:
multipart/form-data:
schema:
type: object
properties:
file:
type: string
description: file
format: binary
required:
- file
tags:
- Incidentfields
components:
schemas:
IncidentField:
type: object
title: IncidentField ...
properties:
associatedToAll:
type: boolean
x-go-name: AssociatedToAll
associatedTypes:
description: AssociatedTypes - list of incident (case) types IDs related to specific incident field
type: array
items:
type: string
x-go-name: AssociatedTypes
breachScript:
type: string
x-go-name: BreachScript
caseInsensitive:
type: boolean
x-go-name: CaseInsensitive
cliName:
type: string
x-go-name: CliName
closeForm:
type: boolean
x-go-name: CloseForm
columns:
type: array
items:
$ref: '#/components/schemas/GridColumn'
x-go-name: GridColumns
commitMessage:
type: string
x-go-name: CommitMessage
content:
type: boolean
x-go-name: Content
defaultRows:
type: array
items:
type: object
additionalProperties:
type: object
x-go-name: DefaultRows
description:
type: string
x-go-name: Description
editForm:
type: boolean
x-go-name: EditForm
fieldCalcScript:
type: string
x-go-name: FieldCalcScript
group:
$ref: '#/components/schemas/FieldGroup'
hidden:
type: boolean
x-go-name: Hidden
id:
type: string
x-go-name: ID
isReadOnly:
type: boolean
x-go-name: IsReadOnly
locked:
type: boolean
x-go-name: Locked
modified:
type: string
format: date-time
x-go-name: Modified
name:
type: string
x-go-name: Name
neverSetAsRequired:
type: boolean
x-go-name: NeverSetAsRequired
ownerOnly:
type: boolean
x-go-name: OwnerOnly
placeholder:
type: string
x-go-name: Placeholder
prevName:
type: string
x-go-name: PrevName
required:
type: boolean
x-go-name: Required
script:
type: string
x-go-name: Script
selectValues:
type: array
items:
type: string
x-go-name: SelectValues
shouldCommit:
type: boolean
x-go-name: ShouldCommit
sla:
type: integer
format: int64
x-go-name: SLA
sortValues:
type: array
items:
type: string
x-go-name: SortValues
system:
type: boolean
x-go-name: System
systemAssociatedTypes:
type: array
items:
type: string
x-go-name: SystemAssociatedTypes
threshold:
type: number
format: double
x-go-name: Threshold
type:
type: string
x-go-name: Type
unmapped:
type: boolean
x-go-name: Unmapped
unsearchable:
type: boolean
x-go-name: UnSearchable
useAsKpi:
type: boolean
x-go-name: UseAsKpi
validatedError:
type: string
x-go-name: ValidatedError
validationRegex:
type: string
x-go-name: ValidationRegex
vcShouldIgnore:
type: boolean
x-go-name: VCShouldIgnore
version:
type: integer
format: int64
x-go-name: Versn
x-go-package: github.com/demisto/server/domain
FieldGroup:
description: FieldGroup is the field group
type: number
format: double
x-go-package: github.com/demisto/server/domain
GridColumn:
type: object
title: GridColumn ...
properties:
displayName:
type: string
x-go-name: DisplayName
fieldCalcScript:
type: string
x-go-name: FieldCalcScript
isDefault:
type: boolean
x-go-name: IsDefault
isReadOnly:
type: boolean
x-go-name: IsReadOnly
key:
type: string
x-go-name: Key
required:
type: boolean
x-go-name: Required
script:
type: string
x-go-name: Script
selectValues:
type: array
items:
type: string
x-go-name: SelectValues
type:
type: string
x-go-name: Type
width:
type: integer
format: int64
x-go-name: Width
x-go-package: github.com/demisto/server/domain
securitySchemes:
api_key:
type: apiKey
name: Authorization
in: header
csrf_token:
type: apiKey
name: X-XSRF-TOKEN
in: header
x-xdr-auth-id:
type: apiKey
name: x-xdr-auth-id
in: header