Recorded Future

Recorded Future Malware Intelligence

A Recorded Future API for Malware Intelligence. The Malware Intelligence API provides programmatic access to the functionality of Recorded Future Malware Intelligence.

GitHub OpenAPI
Business capability
Threat Detection & Response Management BC-620.30

Operations 16

POST /v1/auto-sigma/get_jobs Get all jobs created by user #
POST /v1/auto-sigma/jobs Create a Auto Sigma job #
DELETE /v1/auto-sigma/jobs/{jobId} Delete a Job #
GET /v1/auto-sigma/jobs/{jobId} Get result of a job #
POST /v1/auto-sigma/jobs/{jobId}/retry Retry a Job #
POST /v1/auto-sigma/jobs/{jobId}/{ruleId} Update a Sigma Rule #
POST /v1/auto-yara/jobs Create an Auto YARA job #
GET /v1/auto-yara/jobs Get all jobs created by user #
POST /v1/auto-yara/jobs/edit Edit an Auto YARA job #
DELETE /v1/auto-yara/jobs/{jobId} Delete a Job #
GET /v1/auto-yara/jobs/{jobId} Get result of a job #
POST /v1/auto-yara/jobs/{jobId}/retry Retry a Job #
POST /v1/query Query Malware Intelligence data with query language #
POST /v1/query_iocs Query Malware Intelligence data with lists of entities #
POST /v1/query_nl Query Malware Intelligence data with natural language #
POST /v1/reports Fetch sandbox reports for a given sha256 hash and query #

Documentation

📖
APIReference
https://docs.recordedfuture.com/reference

Specifications

⚙
OpenAPI
Recorded Future Malware Intelligence OpenAPI

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-create-yara-job-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-create-sigma-job-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-get-sigma-job-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-edit-yara-job-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-query-nlresponse-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-get-sigma-jobs-request-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/recorded-future:malware-intelligence"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

recorded-future-malware-intelligence-api-openapi.yml Raw ↑ 
openapi: 3.0.3
info:
  title: Recorded Future Malware Intelligence
  version: 1.7.3
  description: 'A Recorded Future API for Malware Intelligence.


    The Malware Intelligence API provides programmatic access to the functionality of Recorded Future Malware Intelligence.

    '
  contact:
    name: Recorded Future API Support
    url: https://support.recordedfuture.com
    email: support@recordedfuture.com
  x-rf-service-id: service:malware-intelligence
servers:


# --- truncated at 32 KB (429 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-malware-intelligence-api-openapi.yml