# Nord Security Subscription Management API

**Canonical:** https://apis.io/apis/nord-security/nord-security-subscription-management-api/  
**Provider:** Nord Security — https://apis.io/providers/nord-security/  
**Base URL:** https://enterprise-data-api.nordstellar.com  
**Documentation:** https://docs.nordstellar.com/enterprise-apis/product-integrations

Nord Security Subscription Management API is one of 35 APIs that [Nord Security](https://apis.io/providers/nord-security/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Subscription Management. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, authentication docs, and rate-limit docs.

Endpoints for managing user subscriptions to data breach monitoring services. These operations enable administrators to create, update, and delete subscriptions for email addresses, phone numbers, domains, and sensitive data types. When a subscription is created, Serity automatically sends requests to the user’s webhook whenever new or updated data matches the subscription criteria. The webhook destination must be specified through the APIs user-management endpoints. ### Webhook Requirements To ensure reliable delivery under high load, user webhooks **must support very high request throughput** — at least `100 requests per second`. Serity operates at scale and will **not throttle outbound traffic** based on slow client responses. Frequent `429 Too Many Requests` responses are retried, but they can **clog internal delivery queues**, thus, it is strongly recommended that webhook endpoints are backed by a **message queue** or similar buffering system that can **acknowledge requests immediately** and **process them asynchronously** at the desired pace. This ensures resilience and prevents backpressure issues during high traffic periods. ### Delivery Semantics and Retry Policy - `2XX responses (200–299)` are treated as successful acknowledgements and are not retried. - `404 responses` trigger internal alerts and are **not retried**, as they typically indicate an invalid or deprecated endpoint. - `429 (Too Many Requests)` responses are retried with backoff, but can cause delivery delays if they persist. - `All other 4XX and 5XX responses` are **retried** with exponential backoff. - After prolonged retry failure, events are moved to a **DLQ**. In such cases, the platform team will contact the user. ### Webhook Payload ``` { "subscription_id": "string", "document_type": "email-sha256 | phone-sha256 | cc-argon2id | nin-argon2id | cc-sha1 | nin-sha1", "document_identifier": "string", "operation_type": "update | insert", "databases": [], "credential_lists": [], "malware_logs": [], } ``` By default, users receive only documents with the *insert* operation type. If the corresponding subscription has the dispatch_on_update option enabled, the webhook also sends update events.

## Operations (14)

| Method | Path | Summary |
|---|---|---|
| GET | `/subscription` | Get user subscriptions |
| POST | `/subscription/email-sha256` | Create email subscription |
| POST | `/subscription/phone-sha256` | Create phone subscription |
| POST | `/subscription/domain` | Create domain subscription |
| POST | `/subscription/{cc-hash-type}` | Create zero knowledge credit card subscription |
| POST | `/subscription/{nin-hash-type}` | Create zero knowledge national identification number subscription |
| POST | `/subscription/email-sha256/bulk` | Create email subscriptions |
| POST | `/subscription/phone-sha256/bulk` | Create phone subscriptions |
| POST | `/subscription/domain/bulk` | Create domain subscriptions |
| POST | `/subscription/{cc-hash-type}/bulk` | Create zero knowledge credit card subscriptions |
| POST | `/subscription/{nin-hash-type}/bulk` | Create zero knowledge national identification number subscriptions |
| DELETE | `/subscription/bulk` | Delete subscriptions |
| GET | `/subscription/{id}` | Get subscription |
| DELETE | `/subscription/{id}` | Delete subscription |

## Machine-readable artifacts (14)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/nord-security/refs/heads/main/openapi/nord-security-subscription-management-api-openapi.yml
- **Documentation** — https://docs.nordstellar.com/enterprise-apis/product-integrations
- **APIReference** — https://docs.nordstellar.com/enterprise-apis/product-integrations/swagger
- **Authentication** — https://docs.nordstellar.com/enterprise-apis/product-integrations/authentication
- **RateLimits** — https://raw.githubusercontent.com/api-evangelist/nord-security/refs/heads/main/rate-limits/nord-security-rate-limits.yml
- **Examples** — https://docs.nordstellar.com/enterprise-apis/product-integrations/code-examples
- **DataModel** — https://raw.githubusercontent.com/api-evangelist/nord-security/refs/heads/main/data-model/nord-security-data-model.yml
- **ErrorCatalog** — https://raw.githubusercontent.com/api-evangelist/nord-security/refs/heads/main/errors/nord-security-problem-types.yml
- **APIReference** — https://docs.nordstellar.com/enterprise-apis/crs/swagger
- **APIReference** — https://docs.nordstellar.com/enterprise-apis/cybersec/swagger
- **APIReference** — https://docs.nordstellar.com/enterprise-apis/partner/swagger
- **Documentation** — https://docs.nordstellar.com/platform/integrations-api
- **APIReference** — https://docs.nordstellar.com/platform/integrations-api/swagger
- **Examples** — https://docs.nordstellar.com/platform/integrations-api/code-examples

## Other Nord Security APIs (12)

- [NordStellar MCP Server](https://apis.io/apis/nord-security/nordstellar-mcp-server/)
- [NordLayer Partner / MSP API](https://apis.io/apis/nord-security/nordlayer-partner-msp-api/)
- [NordLayer SCIM 2.0 Provisioning](https://apis.io/apis/nord-security/nordlayer-scim-20-provisioning/)
- [NordPass Provider API](https://apis.io/apis/nord-security/nordpass-provider-api/)
- [NordVPN Public Server API](https://apis.io/apis/nord-security/nordvpn-public-server-api/)
- [Nord Security API User Management API](https://apis.io/apis/nord-security/nord-security-api-user-management-api/)
- [Nord Security Applications API](https://apis.io/apis/nord-security/nord-security-applications-api/)
- [Nord Security AUC API](https://apis.io/apis/nord-security/nord-security-auc-api/)
- [Nord Security Breached Databases API](https://apis.io/apis/nord-security/nord-security-breached-databases-api/)
- [Nord Security Company Details API](https://apis.io/apis/nord-security/nord-security-company-details-api/)
- [Nord Security Cookie Intelligence API](https://apis.io/apis/nord-security/nord-security-cookie-intelligence-api/)
- [Nord Security Cookies API](https://apis.io/apis/nord-security/nord-security-cookies-api/)

## Tags

Subscription Management

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/nord-security/nord-security-subscription-management-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/nord-security/.