Stairwell

Stairwell API

REST API for the Stairwell threat-intelligence platform: manage assets and forwarders, query object metadata/detonation/sightings/variants, manage and scan YARA rules, upload and correlate threat reports and IOCs, run Run-to-Ground analysis, and perform network intelligence lookups. Bearer-token authenticated; gRPC service exposed over HTTP/JSON transcoding.

GitHub

Documentation

📖
APIReference
https://docs.stairwell.com/reference
📖
GettingStarted
https://docs.stairwell.com/docs/api-quickstart
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/stairwell/refs/heads/main/authentication/stairwell-authentication.yml

Other Resources

🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/stairwell/refs/heads/main/apis.yml

API entry from apis.yml

apis.yml Raw ↑ 
name: Stairwell API
description: 'REST API for the Stairwell threat-intelligence platform: manage assets and forwarders, query
  object metadata/detonation/sightings/variants, manage and scan YARA rules, upload and correlate threat
  reports and IOCs, run Run-to-Ground analysis, and perform network intelligence lookups. Bearer-token
  authenticated; gRPC service exposed over HTTP/JSON transcoding.'
humanURL: https://docs.stairwell.com/reference
baseURL: https://app.stairwell.com/v1
properties:
- type: APIReference
  url: https://docs.stairwell.com/reference
- type: GettingStarted
  url: https://docs.stairwell.com/docs/api-quickstart
- type: Authentication
  url: authentication/stairwell-authentication.yml