Recorded Future

Recorded Future Collective Insights API

Submit events captured by your security tools to your organization's Recorded Future enterprise. Collective Insights enriches submissions with threat context from Recorded Future Intelligence Graph to provide your organization's enterprise with enhanced and actionable intelligence. - **Usage Details**: * This API throttles the amount of detections you can send, the default is a max burst of 100k IOCs, or ~1 IOCs per second. Please contact your customer success manager if you feel this limit is not meeting your needs. * Organizations using Collective Insights benefit by having their Recorded Future intelligence enhanced by shared data. In addition, non-attributable data from their submissions can be used to benefit other Recorded Future clients. - **Prerequisites**: * Recorded Future module license * Recorded Future API [token](https://docs.recordedfuture.com/reference/get-starte

GitHub OpenAPI
Business capability
Threat Detection & Response Management BC-620.30

Operations 7

POST /detections Submit detected IOCs to the Collective Insights #
POST /exclusions/{organization} Create an exclusion list item #
GET /exclusions/{organization}/all List exclusion list items for an organization #
GET /exclusions/{organization}/audit/all List audit log records for an organization's exclusion list #
DELETE /exclusions/{organization}/{id} Delete an exclusion list item #
PUT /exclusions/{organization}/{id} Update the comment on an exclusion list item #

Documentation

📖
APIReference
https://docs.recordedfuture.com/reference

Specifications

⚙
OpenAPI
Collective Insights API OpenAPI

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-search-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-submit-detections-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-submit-detections-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-search-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-list-exclusions-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-audit-log-response-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/recorded-future:collective-insights"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

recorded-future-collective-insights-api-openapi.yml Raw ↑ 
info:
  contact:
    name: Recorded Future Support
    url: https://support.recordedfuture.com/
  description: "Submit events captured by your security tools to your organization's Recorded Future enterprise.\nCollective Insights enriches submissions with threat context from Recorded Future Intelligence Graph to provide your organization's enterprise with enhanced and actionable intelligence.\n\n- **Usage Details**:\n  * This API throttles the amount of detections you can send, the default is a max burst of 100k IOCs, or ~1 IOCs per second. Please contact your customer success manager if you feel this limit is not meeting your needs.\n  * Organizations using Collective Insights benefit by having their Recorded Future intelligence enhanced by shared data. In addition, non-attributable data from their submissions can be used to benefit other Recorded Future clients.\n- **Prerequisites**:\n  * Recorded Future module license\n  * Recorded Future API [token](https://docs.recordedfuture.com/reference/get-started) for Collective Insights API"
  title: Collective Insights API
  version: 1.1.0
  x-rf-service-id: service:collective-insights
openapi: 3.1.0
servers:


# --- truncated at 32 KB (48 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-collective-insights-api-openapi.yml