# Recorded Future Collective Insights API

**Canonical:** https://apis.io/apis/recorded-future/collective-insights/  
**Provider:** Recorded Future — https://apis.io/providers/recorded-future/  
**Base URL:** https://api.recordedfuture.com/collective-insights/  
**Documentation:** https://docs.recordedfuture.com/reference/collective-insights/llms.txt

Recorded Future Collective Insights API is one of 25 APIs that [Recorded Future](https://apis.io/providers/recorded-future/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Threat Intelligence and Cybersecurity. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, and 6 JSON Schemas.

Submit events captured by your security tools to your organization's Recorded Future enterprise. Collective Insights enriches submissions with threat context from Recorded Future Intelligence Graph to provide your organization's enterprise with enhanced and actionable intelligence. - **Usage Details**: * This API throttles the amount of detections you can send, the default is a max burst of 100k IOCs, or ~1 IOCs per second. Please contact your customer success manager if you feel this limit is not meeting your needs. * Organizations using Collective Insights benefit by having their Recorded Future intelligence enhanced by shared data. In addition, non-attributable data from their submissions can be used to benefit other Recorded Future clients. - **Prerequisites**: * Recorded Future module license * Recorded Future API [token](https://docs.recordedfuture.com/reference/get-starte

## Operations (7)

| Method | Path | Summary |
|---|---|---|
| POST | `/detections` | Submit detected IOCs to the Collective Insights |
| POST | `/exclusions/{organization}` | Create an exclusion list item |
| GET | `/exclusions/{organization}/all` | List exclusion list items for an organization |
| GET | `/exclusions/{organization}/audit/all` | List audit log records for an organization's exclusion list |
| DELETE | `/exclusions/{organization}/{id}` | Delete an exclusion list item |
| PUT | `/exclusions/{organization}/{id}` | Update the comment on an exclusion list item |
| POST | `/search` | Search Collective Insights events |

## Machine-readable artifacts (8)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-collective-insights-api-openapi.yml
- **APIReference** — https://docs.recordedfuture.com/reference
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-search-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-submit-detections-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-submit-detections-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-search-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-list-exclusions-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-audit-log-response-schema.json

## Other Recorded Future APIs (12)

- [Recorded Future Intelligence Cloud API](https://apis.io/apis/recorded-future/recorded-future-connect-api/)
- [Recorded Future Alert API](https://apis.io/apis/recorded-future/alert/)
- [Recorded Future Analyst Note API](https://apis.io/apis/recorded-future/analyst-note/)
- [Recorded Future ASI Project API](https://apis.io/apis/recorded-future/asi-project/)
- [Recorded Future Autonomous Threat Operations API](https://apis.io/apis/recorded-future/autonomous-threat-operations/)
- [Recorded Future Case](https://apis.io/apis/recorded-future/case/)
- [Recorded Future Common Platform Enumeration APIs V0](https://apis.io/apis/recorded-future/common-platform-enumeration-apis-v0/)
- [Recorded Future Customer APIs V0](https://apis.io/apis/recorded-future/customer-apis-v0/)
- [Recorded Future Customer APIs V2](https://apis.io/apis/recorded-future/customer-apis-v2/)
- [Recorded Future Detection Rule API](https://apis.io/apis/recorded-future/detection-rule/)
- [Recorded Future Detection Rule Relation API](https://apis.io/apis/recorded-future/detection-rule-relation/)
- [Recorded Future Entity Match API](https://apis.io/apis/recorded-future/entity-match/)

## Tags

Threat Intelligence, Cybersecurity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/recorded-future/collective-insights/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/recorded-future/.