# Mandiant Actions API

**Canonical:** https://apis.io/apis/mandiant/mandiant-actions-api/  
**Provider:** Mandiant — https://apis.io/providers/mandiant/  
**Base URL:** https://api.intelligence.mandiant.com  
**Documentation:** https://docs.mandiant.com/home/mati-threat-intelligence-api-v3

Mandiant Actions API is one of 61 APIs that [Mandiant](https://apis.io/providers/mandiant/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 12 JSON Schema definitions. Tagged areas include Actions. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and 12 JSON Schemas.

Actions are the smallest units MSV uses and simulate suspicious or malicious network traffic. They can be combined to form Sequences and Evaluations.

## Operations (12)

| Method | Path | Summary |
|---|---|---|
| GET | `/manage_sims/actions` | List actions |
| POST | `/manage_sims/actions` | Create a new Action |
| GET | `/manage_sims/actions/{id}.json` | Lookup Action info by ID or VID |
| PUT | `/manage_sims/actions/{id}.json` | Update an existing Action |
| POST | `/manage_sims/actions/{id}/run` | Run an action |
| GET | `/manage_sims/actions/filtered_actions` | Returns a hash of sim_actions filtered by user provided tags |
| GET | `/manage_sims/actions/vid/{vid}.json` | Return Action IDs for a given VID |
| POST | `/manage_sims/actions/create_sleep_action` | Create a sleep action |
| GET | `/manage_sims/actions_export` | Export CSV or JSON of all actions |
| GET | `/manage_sims/actions/get_dimensions` | Get dimensions assigned to an Action |
| GET | `/manage_sims/actions/queue/actors.json` | Get actor options for a job step |
| GET | `/manage_sims/actions/{id}/actors.json` | Get actor options for a job step |

## Machine-readable artifacts (17)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/openapi/mandiant-actions-api-openapi.yml
- **Documentation** — https://docs.mandiant.com/home/digital-threat-monitoring-api
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-alert-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-monitor-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-verified-domain-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-email-setting-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-doc-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-doc-search-response-schema.json
- **Documentation** — https://docs.mandiant.com/home/asm-api
- **Documentation** — https://docs.mandiant.com/home/ma-sv-api
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-run-job-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-file-library-object-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-integration-type-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-create-bulk-job-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-security-zone-schema.json
- **Documentation** — https://docs.mandiant.com/home/msv-41470-api
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/mandiant/refs/heads/main/json-schema/mandiant-msi-integration-schema.json

## Other Mandiant APIs (12)

- [Mandiant Threat Intelligence API v3](https://apis.io/apis/mandiant/mandiant-threat-intelligence-api-v3/)
- [Mandiant Action user profiles API](https://apis.io/apis/mandiant/mandiant-action-user-profiles-api/)
- [Mandiant Actors API](https://apis.io/apis/mandiant/mandiant-actors-api/)
- [Mandiant Alert Analysis API](https://apis.io/apis/mandiant/mandiant-alert-analysis-api/)
- [Mandiant Alert Audit API](https://apis.io/apis/mandiant/mandiant-alert-audit-api/)
- [Mandiant Alerts API](https://apis.io/apis/mandiant/mandiant-alerts-api/)
- [Mandiant Analyze API](https://apis.io/apis/mandiant/mandiant-analyze-api/)
- [Mandiant Audit Logs API](https://apis.io/apis/mandiant/mandiant-audit-logs-api/)
- [Mandiant Bulk Jobs API](https://apis.io/apis/mandiant/mandiant-bulk-jobs-api/)
- [Mandiant Cloud Profiles API](https://apis.io/apis/mandiant/mandiant-cloud-profiles-api/)
- [Mandiant Collection Runs API](https://apis.io/apis/mandiant/mandiant-collection-runs-api/)
- [Mandiant Collections API](https://apis.io/apis/mandiant/mandiant-collections-api/)

## Tags

Actions

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/mandiant/mandiant-actions-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/mandiant/.