Recorded Future

Recorded Future recorded-future-sandbox-api-secopsti

Recorded Future Sandbox API (formerly Hatching Tria.ge). Provides malware analysis capabilities including file/URL submission, behavioral analysis, YARA rule management, and organizational settings.

GitHub OpenAPI
Business capability
Threat Detection & Response Management BC-620.30

Operations 33

GET /geolocations List geolocations #
POST /profiles Create profile #
GET /profiles List profiles #
DELETE /profiles/{profileID} Delete profile #
GET /profiles/{profileID} Get profile #
PUT /profiles/{profileID} Update profile #
GET /resources List resources #
GET /samples List samples #
POST /samples Submit a sample #
GET /samples/events Stream all sample events #
DELETE /samples/{sampleID} Delete a sample #
GET /samples/{sampleID} Get sample details #
GET /samples/{sampleID}/archive Download sample archive (TAR) #
GET /samples/{sampleID}/archive.zip Download sample archive (ZIP) #
GET /samples/{sampleID}/events Stream sample events #
GET /samples/{sampleID}/overview.json Get overview report #
POST /samples/{sampleID}/profile Set analysis profile #
GET /samples/{sampleID}/reports/static Get static analysis report #
GET /samples/{sampleID}/sample Download original sample #
GET /samples/{sampleID}/summary Get sample summary #
GET /samples/{sampleID}/urlscan1/report_urlscan.json Get URL scan report #
GET /samples/{sampleID}/urlscan1/screenshot.png Get URL scan screenshot #
GET /samples/{sampleID}/{taskID}/dump.pcap Download PCAP #
GET /samples/{sampleID}/{taskID}/dump.pcapng Download PCAPNG #
GET /samples/{sampleID}/{taskID}/files/{fileName} Download task file #
GET /samples/{sampleID}/{taskID}/logs/{logType}.json Get behavioral logs #
GET /samples/{sampleID}/{taskID}/report_triage.json Get dynamic analysis report #
GET /search Search samples #
POST /yara Create YARA rule #
GET /yara List YARA rules #
DELETE /yara/{ruleName} Delete YARA rule #
GET /yara/{ruleName} Get YARA rule #
PUT /yara/{ruleName} Update YARA rule #

Documentation

📖
APIReference
https://docs.recordedfuture.com/reference

Specifications

⚙
OpenAPI
recorded-future-sandbox-api-secopsti OpenAPI

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-sample-detail-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-profile-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-sample-summary-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/recorded-future:sandbox-api-secopsti"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

recorded-future-sandbox-api-secopsti-api-openapi.yml Raw ↑ 
openapi: 3.1.0
info:
  title: recorded-future-sandbox-api-secopsti
  description: Recorded Future Sandbox API (formerly Hatching Tria.ge). Provides malware analysis capabilities including file/URL submission, behavioral analysis, YARA rule management, and organizational settings.
  version: '1.0'
servers:
- url: https://sandbox.recordedfuture.com/api/v0
security:


# --- truncated at 32 KB (534 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-sandbox-api-secopsti-api-openapi.yml