Securonix Object Attributes API

The Object Attributes API from Securonix — 3 operation(s) for object attributes.

Operations 6

GET /{object_type}/attributes/{attribute_id} List Attributes for an Object Type by Attribute ID #
GET /{object_type}/{object_type_id}/attributes List Attributes for an Object Type #
POST /{object_type}/{object_type_id}/attributes Create One or More Attributes for an Object Type #
GET /{object_type}/{object_type_id}/attributes/{object_type_attribute_id} Get a Single Attribute for an Object Type #
PUT /{object_type}/{object_type_id}/attributes/{object_type_attribute_id} Update an Attribute for an Object Type #
DELETE /{object_type}/{object_type_id}/attributes/{object_type_attribute_id} Delete an Attribute for an Object Type #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/securonix-object-attributes-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

securonix-object-attributes-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: ThreatQ Object Attributes API
  description: '© 2025


    The API doc you are viewing is a BETA version that provides an early look at ThreatQ’s new API documentation format.'
  license:
    name: null
    url: null
  version: 1.0.0
  x-logo:
    url: null
    backgroundColor: null
    altText: ThreatQuotient
servers:
- description: SwaggerHub API Auto Mocking
  url: https://virtserver.swaggerhub.com/securonix-b7a/ThreatQ/1.0.0
- url: https://threatq.com/api
  description: ThreatQ Server
security:
- BearerAuth: []
tags:
- name: Object Attributes
paths:
  /{object_type}/attributes/{attribute_id}:
    get:
      tags:
      - Object Attributes
      summary: List Attributes for an Object Type by Attribute ID
      description: 'This path can be used for any object type installed on the system.


        Examples:


        Indicator Attributes by Attribute ID: /indicators/:indicator_id/attributes/:attribute_id


        Attack Pattern Attributes by Attribute ID: /attack_pattern/:attack_pattern_id/attributes/:attribute_id'
      parameters:
      - $ref: '#/components/parameters/ObjectType'
      - $ref: '#/components/parameters/ObjectAttributeCollectionId'
      - $ref: '#/components/parameters/ObjectAttributeQueryParamId'
      - $ref: '#/components/parameters/Sort'
      - $ref: '#/components/parameters/Limit'
      - $ref: '#/components/parameters/Offset'
      responses:
        '200':
          description: Request Successful
          content:
            application/json:
              schema:
                properties:
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/ObjectAttributeCollection'
                type: object
        '401':
          $ref: '#/components/responses/Unauthorized'
      x-visibility: public
      operationId: getByObjectTypeAttributesByAttributeId
      x-operation-id-source: derived
  /{object_type}/{object_type_id}/attributes:
    get:
      tags:
      - Object Attributes
      summary: List Attributes for an Object Type
      description: 'This path can be used for any object type installed on the system.


        Examples:


        Indicator Attributes: /indicators/:indicator_id/attributes


        Attack Pattern Attributes: /attack_pattern/:attack_pattern_id/attributes'
      parameters:
      - $ref: '#/components/parameters/ObjectType'
      - $ref: '#/components/parameters/ObjectTypeId'
      - $ref: '#/components/parameters/AttributeWith'
      - $ref: '#/components/parameters/Sort'
      - $ref: '#/components/parameters/Limit'
      - $ref: '#/components/parameters/Offset'
      responses:
        '200':
          description: Request Successful
          content:
            application/json:
              schema:
                allOf:
                - properties:
                    data:
                      type: array
                      items:
                        allOf:
                        - properties:
                            sources:
                              type: array
                              items:
                                allOf:
                                - $ref: '#/components/schemas/ObjectAttributeSourceAsRelation'
                                - $ref: '#/components/schemas/PublishedAtTimestamp'
                                - $ref: '#/components/schemas/ObjectAttributeSourcePivot'
                          type: object
                        - $ref: '#/components/schemas/ObjectAttribute'
                  type: object
                - $ref: '#/components/schemas/TotalResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
      x-visibility: public
      operationId: getByObjectTypeByObjectTypeIdAttributes
      x-operation-id-source: derived
    post:
      tags:
      - Object Attributes
      summary: Create One or More Attributes for an Object Type
      parameters:
      - $ref: '#/components/parameters/ObjectType'
      - $ref: '#/components/parameters/ObjectTypeId'
      requestBody:
        content:
          application/json:
            schema:
              type: array
              items:
                allOf:
                - properties:
                    sources:
                      type: array
                      items:
                        $ref: '#/components/schemas/SourceBasics'
                  type: object
                - $ref: '#/components/schemas/ObjectAttributeFillable'
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                allOf:
                - properties:
                    data:
                      type: array
                      items:
                        allOf:
                        - properties:
                            sources:
                              type: array
                              items:
                                allOf:
                                - $ref: '#/components/schemas/ObjectAttributeSourceAsRelation'
                                - $ref: '#/components/schemas/PublishedAtTimestamp'
                                - $ref: '#/components/schemas/ObjectAttributeSourcePivot'
                          type: object
                        - $ref: '#/components/schemas/ObjectAttribute'
                  type: object
                - $ref: '#/components/schemas/TotalResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
      x-visibility: public
      operationId: postByObjectTypeByObjectTypeIdAttributes
      x-operation-id-source: derived
  /{object_type}/{object_type_id}/attributes/{object_type_attribute_id}:
    get:
      tags:
      - Object Attributes
      summary: Get a Single Attribute for an Object Type
      parameters:
      - $ref: '#/components/parameters/ObjectType'
      - $ref: '#/components/parameters/ObjectTypeId'
      - $ref: '#/components/parameters/ObjectTypeAttributeId'
      - $ref: '#/components/parameters/AttributeWith'
      responses:
        '200':
          description: Request Successful
          content:
            application/json:
              schema:
                properties:
                  data:
                    type: array
                    items:
                      allOf:
                      - properties:
                          sources:
                            type: array
                            items:
                              allOf:
                              - $ref: '#/components/schemas/ObjectAttributeSourceAsRelation'
                              - $ref: '#/components/schemas/PublishedAtTimestamp'
                              - $ref: '#/components/schemas/ObjectAttributeSourcePivot'
                        type: object
                      - $ref: '#/components/schemas/ObjectAttribute'
                type: object
        '401':
          $ref: '#/components/responses/Unauthorized'
      x-visibility: public
      operationId: getByObjectTypeByObjectTypeIdAttributesByObjectTypeAttributeId
      x-operation-id-source: derived
    put:
      tags:
      - Object Attributes
      summary: Update an Attribute for an Object Type
      parameters:
      - $ref: '#/components/parameters/ObjectType'
      - $ref: '#/components/parameters/ObjectTypeId'
      - $ref: '#/components/parameters/ObjectTypeAttributeId'
      requestBody:
        content:
          application/json:
            schema:
              type: array
              items:
                allOf:
                - $ref: '#/components/schemas/ObjectAttributeValue'
                - $ref: '#/components/schemas/SourceTlp'
      responses:
        '200':
          description: Request Successful
          content:
            application/json:
              schema:
                properties:
                  data:
                    type: array
                    items:
                      allOf:
                      - properties:
                          attribute:
                            $ref: '#/components/schemas/Attribute'
                        type: object
                      - $ref: '#/components/schemas/ObjectAttribute'
                type: object
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
      x-visibility: public
      operationId: putByObjectTypeByObjectTypeIdAttributesByObjectTypeAttributeId
      x-operation-id-source: derived
    delete:
      tags:
      - Object Attributes
      summary: Delete an Attribute for an Object Type
      parameters:
      - $ref: '#/components/parameters/ObjectType'
      - $ref: '#/components/parameters/ObjectTypeId'
      - $ref: '#/components/parameters/ObjectTypeAttributeId'
      responses:
        '204':
          $ref: '#/components/responses/NoContent'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
      x-visibility: public
      operationId: deleteByObjectTypeByObjectTypeIdAttributesByObjectTypeAttributeId
      x-operation-id-source: derived
components:
  parameters:
    AttributeWith:
      name: with
      in: query
      description: '<br>Object Relationships that can be included in the response.<br><br>Options include: sources'
      required: false
      style: form
      explode: false
      schema:
        type: array
        items:
          type: string
          example: sources
    Limit:
      name: limit
      in: query
      description: <br>The number of objects included in the response.
      required: false
      style: form
      explode: false
      schema:
        type: integer
        example: 10
    Sort:
      name: sort
      in: query
      description: "<br>Designate the field(s) you want to use to sort the retrieved list. You can prepend each field \n        with a minus sign (-) to reverse the sorting order. This string can be a list of comma-separated values."
      required: false
      style: form
      explode: false
      schema:
        type: string
        example: id,created_at
    ObjectTypeId:
      name: object_type_id
      in: path
      description: The ID for the record of the specified Object Type whose context you would like to retrieve
      required: true
      schema:
        type: integer
        example: 6
    ObjectAttributeQueryParamId:
      name: id
      in: query
      description: "Attribute ID. Can be used in lieu of path `attribute_id` parameter. Multiple Attribute IDs\n can be provided in a comma-delimited list."
      required: false
      schema:
        type: integer
        example: 14,22
    ObjectAttributeCollectionId:
      name: attribute_id
      in: path
      description: Attribute ID - if not provided, the `id` query parameter must be used
      required: false
      schema:
        type: integer
        example: 5
    ObjectTypeAttributeId:
      name: object_type_attribute_id
      in: path
      description: The ID of the Attribute record for the specified Object Type
      required: true
      schema:
        type: integer
        example: 3
    ObjectType:
      name: object_type
      in: path
      description: 'The collection identifier for the Object Type whose context you would like to retrieve. Options include:

        adversaries, attachments, attack_pattern, campaign, course_of_action, event, exploit_target, identity, incident,

        indicators, intrustion_set, malware, report, signature, tool, ttp, and vulnerability. If you have any additional custom

        objects installed on your system, use the value for the `collection` field associated with the object definition.'
      required: true
      schema:
        type: string
        example: indicators
    Offset:
      name: offset
      in: query
      description: <br>The number of result set records that should be ignored.
      required: false
      style: form
      explode: false
      schema:
        type: integer
        example: 50
  schemas:
    ObjectAttribute:
      allOf:
      - properties:
          id:
            description: Object Attribute ID
            type: integer
            example: 8
        type: object
      - $ref: '#/components/schemas/ObjectAttributeFillable'
      - $ref: '#/components/schemas/ThreatQTimestamps'
    PublishedAtTimestamp:
      properties:
        published_at:
          description: Publish Date for Object (Date it was first reported by the Source)
          type: string
          example: '2017-01-13 15:28:17'
      type: object
    ObjectSourceId:
      properties:
        source_id:
          description: Source ID
          type: integer
          example: 42
      type: object
    AttributeId:
      properties:
        id:
          description: Attribute ID
          type: integer
          example: 1
      type: object
    ObjectAttributeId:
      properties:
        attribute_id:
          description: Attribute ID - the ID for the Attribute Key
          type: integer
          example: 7
      type: object
    TLPName:
      properties:
        name:
          description: TLP Name
          type: string
          example: WHITE
      type: object
    ObjectAttributeValue:
      properties:
        value:
          description: Attribute Value
          type: string
          example: High
      type: object
    SourceType:
      properties:
        type:
          description: 'Source Type - Options include: clients, connectors (Feeds), other_sources, plugins, or users'
          type: string
          example: other_sources
      type: object
    CreatorSource:
      properties:
        creator_source_id:
          description: Creator Source ID - Source ID of User, Feed, or other means that brought the object into the system
          type: integer
          example: 2
      type: object
    TotalResponse:
      properties:
        total:
          description: Total Number of Objects Processed
          type: integer
          example: 1
      type: object
    ObjectTypeId:
      properties:
        <object_type>_id:
          description: "Object Type ID - `<object_type>` should be replaced with the Object Type `code` field. This field will match the\n Object Type collection specified in the URL path. Example: indicator_id"
          type: integer
          example: 517
      type: object
    AttributeFillable:
      properties:
        name:
          description: Attribute Name
          type: string
          example: Confidence
      type: object
    ObjectSourceFillable:
      properties:
        name:
          description: Source name
          type: string
          example: ThreatQ
      type: object
    ObjectAttributeSourcePivot:
      properties:
        pivot:
          type: object
          allOf:
          - properties:
              id:
                description: Object Attribute Source ID
                type: integer
                example: 11
              <object_code>_attribute_id:
                description: 'Object Type Attribute ID - `<object_code>` should be replaced with the Object Type `code` field. Example: indicator_attribute_id'
                type: integer
                example: 8
            type: object
          - $ref: '#/components/schemas/ObjectSourceId'
          - $ref: '#/components/schemas/CreatorSource'
      type: object
    ObjectAttributeFillable:
      allOf:
      - $ref: '#/components/schemas/ObjectAttributeId'
      - $ref: '#/components/schemas/ObjectTypeId'
      - $ref: '#/components/schemas/AttributeFillable'
      - $ref: '#/components/schemas/ObjectAttributeValue'
    ThreatQTimestamps:
      properties:
        created_at:
          description: Creation Date
          type: string
          example: '2021-07-29 13:58:03'
        updated_at:
          description: Update Date
          type: string
          example: '2022-04-12 08:32:16'
      type: object
    SourceName:
      properties:
        name:
          description: Source Name
          type: string
          example: ThreatQ
      type: object
    Attribute:
      allOf:
      - $ref: '#/components/schemas/AttributeId'
      - $ref: '#/components/schemas/AttributeFillable'
      - $ref: '#/components/schemas/ThreatQTimestamps'
    ObjectAttributeSourceAsRelation:
      allOf:
      - properties:
          id:
            description: Object Type Source ID
            type: integer
            example: 42
          tlp_id:
            description: TLP ID
            type: integer
            example: 1
        type: object
      - $ref: '#/components/schemas/SourceType'
      - $ref: '#/components/schemas/SourceReferenceId'
      - $ref: '#/components/schemas/ObjectSourceFillable'
      - $ref: '#/components/schemas/ThreatQTimestamps'
      - $ref: '#/components/schemas/PublishedAtTimestamp'
    SourceTlp:
      oneOf:
      - properties:
          tlp_id:
            description: Source TLP ID
            type: integer
            example: 3
        type: object
      - properties:
          tlp:
            $ref: '#/components/schemas/TLPName'
        type: object
    SourceBasics:
      oneOf:
      - allOf:
        - properties:
            tlp_id:
              description: Source TLP ID
              type: integer
              example: 3
          type: object
        - $ref: '#/components/schemas/SourceName'
      - allOf:
        - properties:
            tlp:
              $ref: '#/components/schemas/TLPName'
          type: object
        - $ref: '#/components/schemas/SourceName'
    ObjectAttributeCollection:
      allOf:
      - properties:
          id:
            description: Object Attribute ID
            type: integer
            example: 11
        type: object
      - properties:
          indicators:
            type: array
            items:
              properties:
                id:
                  description: Object Type ID
                  type: string
                  example: 15
              type: object
        type: object
      - $ref: '#/components/schemas/ObjectAttributeFillable'
    SourceReferenceId:
      properties:
        reference_id:
          description: Source Reference ID - points to related Client, Connector (Feed), Other Source, Plugin, or User
          type: integer
          example: 2
      type: object
  responses:
    Unauthorized:
      description: Unauthorized
    NotFound:
      description: Object Not Found
    NoContent:
      description: Object(s) were successfully deleted.
  securitySchemes:
    BearerAuth:
      type: http
      description: "Once authorized, all subsequent requests must include an `Authorization` header\n with the granted `access_token`. See the OAuth2 Authentication path for more information on how to authorize a User.<br><br>\n Example Header: `Authorization: Bearer <access_token>`"
      name: Authorization
      in: header
      bearerFormat: Bearer `<access_token>`
      scheme: bearer