Mandiant

Mandiant Notification formats API

Monitors generate notifications of two different formats: email and syslog. Notification formats let you customize the messages sent when a monitor creates a notification.

Documentation GitHub OpenAPI

Operations 4

GET /alert_formats List notification formats #

POST /alert_formats Create a notification format #

GET /alert_formats/{id} Show a notification format #

DELETE /alert_formats/{id} Destroy a notification format #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/mandiant:mandiant-notification-formats-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Mandiant Notification formats API
  version: '1.0'
  description: 'Operations tagged Notification formats across 4 of this provider''s published API definitions: mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml, mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml. Each path carries the servers of the definition it was published in.'
tags:
- name: Notification formats
  description: 'Monitors generate notifications of two different formats: email and syslog. Notification formats let you customize the messages sent when a monitor creates a notification.'
paths:
  /alert_formats:
    get:
      summary: List notification formats
      tags:
      - Notification formats
      responses:
        '200':
          description: Success
          content:
            application/json:
              example:
              - id: 14
                organization_id: 5
                name: Additional example
                alert_type: email
                from_address: test@test.com
                subject: test subject
                message: Notification format message
                created_at: '2020-02-10T15:10:44.768Z'
                updated_at: '2020-02-10T15:10:44.768Z'
                syslog_facility: null
                syslog_severity: null
                disabled: false
              - id: 13
                organization_id: 5
                name: testname
                alert_type: email
                from_address: test@test.com
                subject: test subject
                message: test message
                created_at: '2020-02-10T15:10:44.766Z'
                updated_at: '2020-02-10T15:10:44.766Z'
                syslog_facility: null
                syslog_severity: null
                disabled: false
              - id: 12
                organization_id: 5
                name: AEDA Notification With Missing Events
                alert_type: email
                from_address: placeholder@example.com
                subject: AEDA Notification With Missing Events
                message: 'Monitor Name: %monitor_def_name%

                  Monitor ID: %monitor_def_id%

                  Monitor State: %monitor_state%

                  Job: %job_link%

                  Job Action Timestamp: %action_timestamp%


                  Expected Blocked: %expected_blocked%

                  Monitor Blocked: %monitor_blocked%

                  Expected Detected: %expected_detected%

                  Monitor Detected: %monitor_detected%


                  Missed Expected Events:

                  %missed_expected_events%

                  '
                created_at: '2020-02-10T15:10:42.238Z'
                updated_at: '2020-02-10T15:10:42.238Z'
                syslog_facility: null
                syslog_severity: null
                disabled: false
              - id: 11
                organization_id: 5
                name: Common Event Format
                alert_type: syslog
                from_address: null
                subject: null
                message: '%monitor_result_state_change_timestamp% director CEF:0|Verodin|planner|4.2.0.0a11|%monitor_def_id%|%monitor_def_name%|1|'
                created_at: '2020-02-10T15:10:42.233Z'
                updated_at: '2020-02-10T15:10:42.233Z'
                syslog_facility: null
                syslog_severity: info
                disabled: false
      operationId: getAlertFormats
      x-operation-id-source: derived
    post:
      summary: Create a notification format
      tags:
      - Notification formats
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/alert_format_wrapped'
            example:
              alert_format:
                name: Example Notification Format
                from_address: earlene_hermiston@cole.info
                subject: Monitor %monitor_def_name%
                message: 'monitor: %monitor_def_name%, failed: %monitor_result_failed%, vid: %sequence_vid%'
                alert_type: email
      responses:
        '201':
          description: Created
          content:
            application/json:
              example:
                id: 7
                organization_id: 3
                name: Example Notification Format
                alert_type: email
                from_address: earlene_hermiston@cole.info
                subject: Monitor %monitor_def_name%
                message: 'monitor: %monitor_def_name%, failed: %monitor_result_failed%, vid: %sequence_vid%'
                created_at: '2020-02-10T15:10:19.064Z'
                updated_at: '2020-02-10T15:10:19.064Z'
                syslog_facility: null
                syslog_severity: null
                disabled: false
      operationId: postAlertFormats
      x-operation-id-source: derived
  /alert_formats/{id}:
    get:
      summary: Show a notification format
      tags:
      - Notification formats
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: integer
      responses:
        '200':
          description: Success
          content:
            application/json:
              example:
                id: 17
                organization_id: 6
                name: testname
                alert_type: email
                from_address: test@test.com
                subject: test subject
                message: test message
                created_at: '2020-02-10T15:10:57.502Z'
                updated_at: '2020-02-10T15:10:57.502Z'
                syslog_facility: null
                syslog_severity: null
                disabled: false
      operationId: getAlertFormatsById
      x-operation-id-source: derived
    delete:
      summary: Destroy a notification format
      tags:
      - Notification formats
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: integer
      responses:
        '200':
          description: Success
          content:
            application/json:
              example:
                result: success
      operationId: deleteAlertFormatsById
      x-operation-id-source: derived
components:
  schemas:
    alert_format_wrapped:
      type: object
      properties:
        alert_format:
          $ref: '#/components/schemas/alert_format'
    alert_format:
      type: object
      properties:
        name:
          type: string
        message:
          type: string
          description: "Message for the content of the notification.  Must be a string.  You can include placeholders in the message to be replaced with the attributes of the individual monitor.  These are the available placeholders:\n\n  %monitor_def_id%\n  %monitor_def_name%\n  %monitor_def_desc%\n  %monitor_result_id%\n  %monitor_result_state_change_timestamp%\n  %monitor_result_failed%\n  %sequence_id%\n  %sequence_vid%\n"
        alert_type:
          type: string
          enum:
          - email
          - syslog
          description: String indicating type of notification
        syslog_severity:
          type: string
          enum:
          - emerg
          - alert
          - crit
          - err
          - warning
          - notice
          - info
          - debug
          description: Required if alert_type is syslog
        from_address:
          type: string
          description: Required if alert_type is email
        subject:
          type: string
          description: Required if alert_type is email
x-refined-from:
- mandiant-ma-sv-openapi.yml
- mandiant-msv-openapi.yml
- mandiant-ma-sv-openapi.yml
- mandiant-msv-openapi.yml