Mandiant

Mandiant Actions API

Actions are the smallest units MSV uses and simulate suspicious or malicious network traffic. They can be combined to form Sequences and Evaluations.

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 12

GET /manage_sims/actions List actions #
POST /manage_sims/actions Create a new Action #
GET /manage_sims/actions/{id}.json Lookup Action info by ID or VID #
PUT /manage_sims/actions/{id}.json Update an existing Action #
POST /manage_sims/actions/{id}/run Run an action #
GET /manage_sims/actions/filtered_actions Returns a hash of sim_actions filtered by user provided tags #
GET /manage_sims/actions/vid/{vid}.json Return Action IDs for a given VID #
POST /manage_sims/actions/create_sleep_action Create a sleep action #
GET /manage_sims/actions_export Export CSV or JSON of all actions #
GET /manage_sims/actions/get_dimensions Get dimensions assigned to an Action #
GET /manage_sims/actions/queue/actors.json Get actor options for a job step #
GET /manage_sims/actions/{id}/actors.json Get actor options for a job step #

Documentation

📖
Documentation
https://docs.mandiant.com/home/digital-threat-monitoring-api
📖
Documentation
https://docs.mandiant.com/home/asm-api
📖
Documentation
https://docs.mandiant.com/home/ma-sv-api
📖
Documentation
https://docs.mandiant.com/home/msv-41470-api

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/openapi/mandiant-actions-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-alert-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-monitor-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-verified-domain-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-email-setting-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-doc-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-doc-search-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-run-job-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-file-library-object-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-integration-type-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-create-bulk-job-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-security-zone-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-msi-integration-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/mandiant:mandiant-actions-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

mandiant-actions-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Mandiant Actions API
  version: '1.0'
  description: 'Operations tagged Actions across 4 of this provider''s published API definitions: mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml, mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml. Each path carries the servers of the definition it was published in.'
tags:


# --- truncated at 32 KB (59 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/openapi/mandiant-actions-api-openapi.yml