The threatFeeds endpoint can be used to automate the upload of STIX files for threat intelligence matching. This endpoint can also be used to retrieve the current list of threatFeed objects already configured in the system.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/vectranetworks-threat-feeds-api"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Vectranetworks Threat Feeds API
version: '1.0'
description: 'Operations tagged Threat Feeds across 2 of this provider''s published API definitions: vectranetworks-detect-v2.3-openapi.yml, vectranetworks-rux-v3.3-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://{fqdn}/api/{apiVersion}
description: Vectra Detect API
variables:
fqdn:
description: The FQDN or IP to join the Vectra Detect instance
default: detect-api.demo.vectra.io
apiVersion:
description: The API version to use
default: v2.3
- url: https://{vectra_portal_url}/api/v3.3
description: Vectra Platform API Server
variables:
vectra_portal_url:
default: platform.vectra.ai
tags:
- name: Threat Feeds
description: The threatFeeds endpoint can be used to automate the upload of STIX files for threat intelligence matching. This endpoint can also be used to retrieve the current list of threatFeed objects already configured in the system.
paths:
/threatFeeds:
description: The threatFeeds endpoint can be used to automate the upload of STIX files for threat intelligence matching.
get:
operationId: threatFeedGetSeveral
summary: Get all Threat Feeds
tags:
- Threat Feeds
responses:
'200':
description: Retrieved Threat Feeds successfully
content:
application/json:
schema:
type: object
'401':
$ref: '#/components/responses/invalidToken'
'403':
$ref: '#/components/responses/invalidPermissions'
security:
- VectraToken: []
post:
summary: Create a new threat feed
operationId: createThreatFeed
tags:
- Threat Feeds
responses:
'201':
description: Threat feed created successfully
content:
application/json:
schema:
$ref: '#/components/schemas/ThreatFeed'
security:
- VectraToken: []
servers:
- url: https://{fqdn}/api/{apiVersion}
description: Vectra Detect API
variables:
fqdn:
description: The FQDN or IP to join the Vectra Detect instance
default: detect-api.demo.vectra.io
apiVersion:
description: The API version to use
default: v2.3
/threatFeeds/{threatFeedID}:
parameters:
- name: threatFeedID
description: ID of the Threat Feed you're looking for
in: path
schema:
$ref: '#/components/schemas/ID'
get:
operationId: threatFeedGetSingle
summary: Describe a specific Threat Feed
tags:
- Threat Feeds
responses:
'200':
description: Describe a specific Threat Feed
content:
application/json:
schema:
type: object
'401':
$ref: '#/components/responses/invalidToken'
'403':
$ref: '#/components/responses/invalidPermissions'
'404':
$ref: '#/components/responses/notFound'
security:
- VectraToken: []
delete:
operationId: threatFeedDeleteSingle
summary: Delete a specific Threat Feed
tags:
- Threat Feeds
responses:
'401':
$ref: '#/components/responses/invalidToken'
'403':
$ref: '#/components/responses/invalidPermissions'
'404':
$ref: '#/components/responses/notFound'
security:
- VectraToken: []
servers:
- url: https://{fqdn}/api/{apiVersion}
description: Vectra Detect API
variables:
fqdn:
description: The FQDN or IP to join the Vectra Detect instance
default: detect-api.demo.vectra.io
apiVersion:
description: The API version to use
default: v2.3
/threatFeeds/{id}:
get:
summary: Retrieve a specific threat feed
operationId: getThreatFeedById
tags:
- Threat Feeds
parameters:
- name: id
in: path
required: true
schema:
type: integer
description: Unique ID for the threat feed
responses:
'200':
description: Threat feed details
content:
application/json:
schema:
$ref: '#/components/schemas/ThreatFeed'
security:
- oauth2: []
patch:
summary: Update a threat feed
operationId: updateThreatFeed
tags:
- Threat Feeds
parameters:
- name: id
in: path
required: true
schema:
type: integer
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/ThreatFeed'
responses:
'204':
description: Threat feed updated successfully
security:
- oauth2: []
servers:
- url: https://{vectra_portal_url}/api/v3.3
description: Vectra Platform API Server
variables:
vectra_portal_url:
default: platform.vectra.ai
components:
responses:
invalidToken:
description: Invalid User Token
content:
application/json:
schema:
$ref: '#/components/schemas/error'
example:
details: Invalid token.
invalidPermissions:
description: Invalid User Permissions
content:
application/json:
schema:
$ref: '#/components/schemas/error'
example:
details: You do not have permission to perform this action.
notFound:
description: Object not found
content:
application/json:
schema:
$ref: '#/components/schemas/error'
example:
detail: Not Found.
schemas:
error:
type: object
properties:
detail:
description: A human readable error message
type: string
details:
description: A human readable error message
type: string
ID:
description: ID
type: integer
format: int32
minimum: 1
ThreatFeed:
type: object
properties:
id:
type: integer
name:
type: string
description:
type: string
severity:
type: string
file:
type: string
format: uri
description: URI of the threat feed file
securitySchemes:
VectraToken:
type: apiKey
name: authorization
in: header
oauth2:
type: oauth2
flows:
clientCredentials:
tokenUrl: https://{vectra_portal_url}/oauth2/token
scopes: {}
x-refined-from:
- vectranetworks-detect-v2.3-openapi.yml
- vectranetworks-rux-v3.3-openapi.yml