Recorded Future

Recorded Future Customer APIs V0

Customer APIs V0 — part of the Recorded Future API documented at docs.recordedfuture.com.

GitHub OpenAPI

Operations 2

GET /v0/portfolio/member/toe_id/{toe_id} Portfolio member data including company description and domain ratings by security domain. If you are reading this and were filtering by analysis_id, please switch over to TOE_ID a #

Documentation

📖
APIReference
https://docs.recordedfuture.com/reference

Specifications

⚙
OpenAPI
Customer APIs V0 OpenAPI

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-industry-trends-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-portfolio-member-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/recorded-future:customer-apis-v0"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

recorded-future-customer-apis-v0-api-openapi.yml Raw ↑ 
openapi: 3.0.1
info:
  title: Customer APIs V0
  version: '0'
servers:
- url: https://api.sandbox.riskrecon.com
  variables:
    protocol:
      enum:
      - http
      - https
      default: https
- url: /
  variables:
    protocol:
      enum:
      - http
      - https
      default: https
security:
- bearerAuth: []
paths:
  /v0/industry_trends/toe_id/{toe_id}:
    get:
      tags:
      - IndustryTrends
      summary: Gets Industry trends data given a TOE id
      description: Gets Industry trends data given a TOE id
      operationId: CustomerApisWeb.V0.IndustryTrendsController.industry_trends
      parameters:
      - name: toe_id
        in: path
        description: Toe ID
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IndustryTrends'
        '401':
          description: Unauthorized
          content: {}
        '403':
          description: Forbidden
          content: {}
        '404':
          description: Not found
          content: {}
  /v0/portfolio/member/toe_id/{toe_id}:
    get:
      tags:
      - Portfolio
      summary: Portfolio member data including company description and domain ratings by security domain. If you are reading this and were filtering by analysis_id, please switch over to TOE_ID at your earliest convenience
      description: Portfolio member data including company description and domain ratings by security domain. If you are reading this and were filtering by analysis_id, please switch over to TOE_ID at your earliest convenience
      operationId: CustomerApisWeb.V0.PortfolioController.portfolio_member_by_analysis_id
      parameters:
      - name: toe_id
        in: path
        description: Toe ID
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PortfolioMember'
        '401':
          description: Unauthorized
          content: {}
        '404':
          description: Not found
          content: {}
components:
  schemas:
    IndustryTrendsSecurityCriteria:
      type: object
      properties:
        web_encryption:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        web_app_security:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        threat_intel:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        system_hosting:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        software_patching:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        overall:
          type: number
        governance:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        email_security:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        dns_security:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        defensibility:
          allOf:
          - type: object
            properties:
              overall:
                type: number
        data_loss:
          allOf:
          - type: object
            properties:
              overall:
                type: number
    IndustryTrends:
      type: object
      properties:
        toe_id:
          type: string
        industry_trends:
          allOf:
          - type: object
            properties:
              toe_id:
                type: string
              industry_min:
                $ref: '#/components/schemas/IndustryTrendsSecurityCriteria'
              industry_mean:
                $ref: '#/components/schemas/IndustryTrendsSecurityCriteria'
              industry_max:
                $ref: '#/components/schemas/IndustryTrendsSecurityCriteria'
              industry:
                type: string
              date:
                type: string
              analysis_rating:
                $ref: '#/components/schemas/IndustryTrendsSecurityCriteria'
              analysis_percentile:
                $ref: '#/components/schemas/IndustryTrendsSecurityCriteria'
              analysis_id:
                type: string
    SecurityDomainRatings:
      type: object
      properties:
        web_encryption:
          $ref: '#/components/schemas/SecurityDomainRating'
        web_app_security:
          $ref: '#/components/schemas/SecurityDomainRating'
        threat_intell:
          $ref: '#/components/schemas/SecurityDomainRating'
        system_hosting:
          $ref: '#/components/schemas/SecurityDomainRating'
        software_patching:
          $ref: '#/components/schemas/SecurityDomainRating'
        governance:
          $ref: '#/components/schemas/SecurityDomainRating'
        email_security:
          $ref: '#/components/schemas/SecurityDomainRating'
        dns_security:
          $ref: '#/components/schemas/SecurityDomainRating'
        defensibility:
          $ref: '#/components/schemas/SecurityDomainRating'
        data_loss:
          $ref: '#/components/schemas/SecurityDomainRating'
    SecurityDomainRating:
      type: object
      properties:
        security_domain_rating_numeric:
          type: number
        security_domain_rating:
          type: string
    PortfolioMemberToes:
      type: array
      items:
        $ref: '#/components/schemas/PortfolioMemberToe'
    PortfolioMemberToe:
      type: object
      properties:
        toe_short_name:
          type: string
        toe_id:
          type: string
        security_domain_ratings:
          $ref: '#/components/schemas/SecurityDomainRatings'
        overall_rating_numeric:
          type: number
        overall_rating:
          type: string
        last_analysis_ts:
          type: string
        frequency:
          type: string
        description:
          type: string
        analysis_id:
          type: string
    PortfolioMember:
      title: PortfolioMember
      type: object
      properties:
        toes:
          $ref: '#/components/schemas/PortfolioMemberToes'
        customer_name:
          type: string
        customer_id:
          type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
x-provenance:
  method: searched
  source: https://docs.recordedfuture.com/reference
  harvested: '2026-10-20'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://docs.recordedfuture.com/reference/customerapiswebv0industrytrendscontrollerindustry_trends.md
  - https://docs.recordedfuture.com/reference/customerapiswebv0portfoliocontrollerportfolio_member_by_analysis_id.md
  merge:
    pages: 2
    deduped: 1
    conflicts_kept_first: 0