# Recorded Future Soar API

**Canonical:** https://apis.io/apis/recorded-future/soar/  
**Provider:** Recorded Future — https://apis.io/providers/recorded-future/  
**Base URL:** https://api.recordedfuture.com/soar/v3  
**Documentation:** https://docs.recordedfuture.com/reference/soar/llms.txt

Recorded Future Soar API is one of 25 APIs that [Recorded Future](https://apis.io/providers/recorded-future/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 4 JSON Schema definitions. Tagged areas include Threat Intelligence and Cybersecurity. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, and 4 JSON Schemas.

The SOAR API is designed for high throughput risk checks using Recorded Future's threat intelligence in bulk. It supports five IOC types, IP Address, Domain, Hash, URL and Vulnerability. Please read the [documentation](https://docs.recordedfuture.com/docs/soar-api-introduction) before using this API.

## Operations (3)

| Method | Path | Summary |
|---|---|---|
| POST | `/enrichment` | Fetch risk information for a set of indicators |
| GET | `/triage/contexts` | Lookup all available risk contexts |
| POST | `/triage/contexts/{context_name}` | Triage multiple IOC entities |

## Machine-readable artifacts (6)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/openapi/recorded-future-soar-api-openapi.yml
- **APIReference** — https://docs.recordedfuture.com/reference
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-enrich-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-triage-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-enrich-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-context-response-schema.json

## Other Recorded Future APIs (12)

- [Recorded Future Intelligence Cloud API](https://apis.io/apis/recorded-future/recorded-future-connect-api/)
- [Recorded Future Alert API](https://apis.io/apis/recorded-future/alert/)
- [Recorded Future Analyst Note API](https://apis.io/apis/recorded-future/analyst-note/)
- [Recorded Future ASI Project API](https://apis.io/apis/recorded-future/asi-project/)
- [Recorded Future Autonomous Threat Operations API](https://apis.io/apis/recorded-future/autonomous-threat-operations/)
- [Recorded Future Case](https://apis.io/apis/recorded-future/case/)
- [Recorded Future Collective Insights API](https://apis.io/apis/recorded-future/collective-insights/)
- [Recorded Future Common Platform Enumeration APIs V0](https://apis.io/apis/recorded-future/common-platform-enumeration-apis-v0/)
- [Recorded Future Customer APIs V0](https://apis.io/apis/recorded-future/customer-apis-v0/)
- [Recorded Future Customer APIs V2](https://apis.io/apis/recorded-future/customer-apis-v2/)
- [Recorded Future Detection Rule API](https://apis.io/apis/recorded-future/detection-rule/)
- [Recorded Future Detection Rule Relation API](https://apis.io/apis/recorded-future/detection-rule-relation/)

## Tags

Threat Intelligence, Cybersecurity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/recorded-future/soar/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/recorded-future/.