Intruder Occurrences API

The Occurrences API from Intruder — 1 operation(s) for occurrences.

Operations 1

GET /v1/occurrences/fixed/ Lists fixed occurrences #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/intruder:intruder-occurrences-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

intruder-occurrences-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Intruder Occurrences API
  version: 2.0.0 (v1)
  description: Intruder API documentation
  termsOfService: https://www.intruder.io/legal/terms
  contact:
    email: contact@intruder.io
servers:
- url: https://api.intruder.io
tags:
- name: Occurrences
paths:
  /v1/occurrences/fixed/:
    get:
      operationId: occurrences_fixed_list
      description: Lists fixed occurrences. Fixed occurrences are vulnerabilities that have been resolved.
      summary: Lists fixed occurrences
      parameters:
      - in: query
        name: exclude_deleted_targets
        schema:
          type: boolean
        description: Set to `true` to exclude occurrences on deleted targets. Defaults to `false`.
      - name: limit
        required: false
        in: query
        description: Number of results to return per page (the default is 25).
        schema:
          type: integer
      - name: offset
        required: false
        in: query
        description: The initial index from which to return the results.
        schema:
          type: integer
      - in: query
        name: remediated_after
        schema:
          type: string
          format: date-time
        description: Show only occurrences fixed after this timestamp. Use ISO 8601 format (e.g., 2024-01-15T10:30:00Z).
      - in: query
        name: remediated_before
        schema:
          type: string
          format: date-time
        description: Show only occurrences fixed before this timestamp. Use ISO 8601 format (e.g., 2024-01-15T10:30:00Z).
      - in: query
        name: severity
        schema:
          type: string
          enum:
          - critical
          - high
          - low
          - medium
        description: 'Severity to filter by. The choices are `low`, `medium`, `high` and `critical`.


          * `low` - LOW

          * `medium` - MEDIUM

          * `high` - HIGH

          * `critical` - CRITICAL'
      - in: query
        name: tag_names
        schema:
          type: array
          items:
            type: string
        description: Tag names to filter by, separated by commas.
        explode: false
        style: form
      - in: query
        name: target_addresses
        schema:
          type: array
          items:
            type: string
        description: Target addresses to filter by, separated by commas.
        explode: false
        style: form
      tags:
      - Occurrences
      security:
      - Bearer: []
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PaginatedFixedOccurrenceList'
          description: ''
        '401':
          content:
            application/json:
              schema:
                example:
                  detail: Access token is missing or invalid
          description: ''
components:
  schemas:
    NullEnum:
      type: 'null'
    FixedOccurrence:
      type: object
      properties:
        id:
          type: integer
          readOnly: true
        occurrence_id:
          type: integer
          readOnly: true
        display_address:
          type: string
          readOnly: true
        affected_host:
          type: string
        affected_port:
          type: integer
          readOnly: true
        cvss_score:
          type: number
          format: float
          readOnly: true
        description:
          type: string
        due_date:
          type: string
          format: date
          readOnly: true
        exploit_likelihood:
          readOnly: true
          oneOf:
          - $ref: '#/components/schemas/ExploitLikelihoodEnum'
          - $ref: '#/components/schemas/NullEnum'
        extra_info:
          type:
          - object
          - 'null'
          additionalProperties:
            type: string
        first_seen_at:
          type: string
          format: date-time
        host_state:
          type: string
          readOnly: true
        remediated_at:
          type: string
          format: date-time
        remediation:
          type: string
        severity:
          type: string
          readOnly: true
        tags:
          type: array
          items:
            type: string
          readOnly: true
        target_last_scanned_at:
          type:
          - string
          - 'null'
          format: date-time
          readOnly: true
          description: Date and time this target was last scanned.
        title:
          type: string
      required:
      - affected_host
      - affected_port
      - cvss_score
      - description
      - display_address
      - due_date
      - exploit_likelihood
      - extra_info
      - first_seen_at
      - host_state
      - id
      - occurrence_id
      - remediated_at
      - remediation
      - severity
      - tags
      - target_last_scanned_at
      - title
    ExploitLikelihoodEnum:
      type: string
      enum:
      - rare
      - unlikely
      - likely
      - very_likely
      - known
      - unknown
    PaginatedFixedOccurrenceList:
      type: object
      required:
      - count
      - results
      properties:
        count:
          type: integer
          example: 123
        next:
          type: string
          nullable: true
          format: uri
          example: http://api.example.org/accounts/?offset=400&limit=100
        previous:
          type: string
          nullable: true
          format: uri
          example: http://api.example.org/accounts/?offset=200&limit=100
        results:
          type: array
          items:
            $ref: '#/components/schemas/FixedOccurrence'
  securitySchemes:
    Bearer:
      type: apiKey
      name: Authorization
      in: header
      description: 'Value should be formatted: `Bearer <apiKey>`'
x-provenance:
  method: searched
  source: https://developers.intruder.io/reference
  harvested: '2026-10-20'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://developers.intruder.io/reference/health_list-1.md
  - https://developers.intruder.io/reference/issues_list-1.md
  - https://developers.intruder.io/reference/issues_occurrences_comments_create.md
  - https://developers.intruder.io/reference/issues_occurrences_comments_list.md
  - https://developers.intruder.io/reference/issues_occurrences_list-1.md
  - https://developers.intruder.io/reference/issues_occurrences_scanner_output_list.md
  - https://developers.intruder.io/reference/issues_occurrences_snooze_create.md
  - https://developers.intruder.io/reference/issues_targets_list.md
  - https://developers.intruder.io/reference/licenses_list.md
  - https://developers.intruder.io/reference/occurrences_fixed_list.md
  - https://developers.intruder.io/reference/scans_cancel_create.md
  - https://developers.intruder.io/reference/scans_create-1.md
  - https://developers.intruder.io/reference/scans_list-1.md
  - https://developers.intruder.io/reference/scans_retrieve.md
  - https://developers.intruder.io/reference/scans_schedules_create.md
  - https://developers.intruder.io/reference/scans_schedules_destroy.md
  - https://developers.intruder.io/reference/scans_schedules_list.md
  - https://developers.intruder.io/reference/scans_schedules_partial_update.md
  - https://developers.intruder.io/reference/tags_list.md
  - https://developers.intruder.io/reference/targets_api_schemas_create.md
  - https://developers.intruder.io/reference/targets_api_schemas_destroy.md
  - https://developers.intruder.io/reference/targets_api_schemas_list.md
  - https://developers.intruder.io/reference/targets_api_schemas_partial_update.md
  - https://developers.intruder.io/reference/targets_authentications_create.md
  - https://developers.intruder.io/reference/targets_authentications_destroy.md
  - https://developers.intruder.io/reference/targets_authentications_list.md
  - https://developers.intruder.io/reference/targets_authentications_partial_update.md
  - https://developers.intruder.io/reference/targets_bulk_create.md
  - https://developers.intruder.io/reference/targets_create-1.md
  - https://developers.intruder.io/reference/targets_destroy.md
  - https://developers.intruder.io/reference/targets_list-1.md
  - https://developers.intruder.io/reference/targets_tags_create.md
  - https://developers.intruder.io/reference/targets_tags_destroy.md
  merge:
    pages: 33
    deduped: 72
    conflicts_kept_first: 0