isMalicious

isMalicious Surveillance API

Vulnerability monitoring of the organisation's stack: watched sources (a domain, a lockfile/SBOM project, a manual stack), findings with the affected range and the fix, the alert policy. API key or session; the unit is the watched source, not the request

GitHub OpenAPI

Operations 21

POST /surveillance/analyze Read a domain or parse a lockfile without saving anything #
GET /surveillance/catalog/products Resolve a product name to watchable identities (no CPE knowledge needed) #
DELETE /surveillance/components/{id} Remove a component #
PATCH /surveillance/components/{id} Set a component's version or branch, or stop monitoring it #
GET /surveillance/exposure What touches the organisation's stack now, by proof #
GET /surveillance/findings Findings, filtered and paged #
POST /surveillance/findings/bulk-status Triage up to 200 findings at once #
GET /surveillance/findings/{id} One finding with the why and the fix of each component #
PATCH /surveillance/findings/{id} Triage a finding (acknowledge, snooze, patched, not affected, accepted risk) #
GET /surveillance/policy The organisation's alert policy #
PUT /surveillance/policy Update the alert policy #
POST /surveillance/policy/test Send a test notification to one channel, now #
POST /surveillance/preview Expected alert volume over the last 90 days, and what needs action today #
GET /surveillance/quota Sources used and allowed on the served plan #
GET /surveillance/sources List the organisation's watched sources and the source quota #
POST /surveillance/sources Watch a domain, a lockfile/SBOM project or a manual stack #
GET /surveillance/sources/{id} One source with its components #
DELETE /surveillance/sources/{id} Stop watching a source (its components and their links go with it) #
PATCH /surveillance/sources/{id} Rename, describe, pause or resume a source #
POST /surveillance/sources/{id}/components Add components to a source #
POST /surveillance/sources/{id}/refresh Re-read a domain now, or re-upload a lockfile #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/ismalicious-com/openapi/ismalicious-com-surveillance-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/ismalicious-com/json-schema/ismalicious-com-create-source-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/ismalicious-com/json-schema/ismalicious-com-exposure-response-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/ismalicious-com:ismalicious-com-surveillance-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

ismalicious-com-surveillance-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Ismalicious Com Surveillance API
  version: 1.2.0
  contact:
    name: isMalicious Support
    url: https://ismalicious.com/support
    email: contact@ismalicious.com
  license:
    name: Proprietary
    url: https://ismalicious.com/terms
  description: 'Operations tagged surveillance across 2 of this provider''s published API definitions: ismalicious-com-openapi.json, ismalicious-com-openapi2.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.ismalicious.com
  description: Production server
security:
- ApiKeyAuth: []
- BearerAuth: []
- BasicAuth: []
tags:


# --- truncated at 32 KB (65 KB total) ---
# Full source: https://artifacts.apis.io/ismalicious-com/openapi/ismalicious-com-surveillance-api-openapi.yml