Arctic Wolf

Arctic Wolf is a security operations company delivering 24x7 AI-driven managed detection and response (MDR), managed risk, incident response, and endpoint security through its cloud-native Aurora Platform and Concierge Security Team. For developers and OEM partners, Arctic Wolf exposes a set of REST and standards-based APIs via docs.arcticwolf.com and the Unified Portal: a Ticket API for programmatically listing, commenting on, and closing security tickets; a User API and Aurora Endpoint Defense API for user and endpoint management; and Threat Intelligence feed APIs (TAXII 1.1, TAXII 2.1, and a Blocklist API) for consuming indicators into your own security tooling. Authentication uses bearer JWT tokens generated from Personal API Keys in the Unified Portal, with regional service endpoints (US, EU, AU, CA pods).

Arctic Wolf publishes 1 API on the APIs.io network: Ticket API. Tagged areas include Company, Security, Cybersecurity, Managed Detection and Response, and Security Operations.

Arctic Wolf’s developer surface includes authentication, documentation, API reference, getting-started guide, developer portal, support, engineering blog, and 24 more developer resources.

🌐 Visit website 📡 Source on GitHub
48.4/100 developing Agent 72/100 agent native Full breakdown ↓
scored 2026-07-20 · rubric v0.4
1 APIs 1 MCP Servers 0 Features
CompanySecurityCybersecurityManaged Detection and ResponseSecurity OperationsThreat IntelligenceTicketingEndpoint SecuritySOC

API Rating

API Evangelist API Evangelist Rating How this is scored →
scored 2026-07-20 · rubric v0.4
Composite quality — 48.4/100 · developing
Contract Quality 9.4 / 25
Developer Ergonomics 13.5 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 4.1 / 13
Governance 0.0 / 12
Discoverability 9.3 / 10
Agent readiness — 72/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 3 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/arctic-wolf: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs

Arctic Wolf Ticket API

REST API for interacting with Arctic Wolf security tickets — list tickets for an organization, fetch a ticket by ID, close a ticket, add comments, and download attachments. Auth...

MCP Servers

arctic-wolf-mcp.yml

MCP SERVER

Resources

Get Started 4

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted
 Portal
Portal
 SignUp
SignUp

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess
 WellKnown
WellKnown
 MCPServer
MCPServer
 AgentSkill
AgentSkill
 LLMsTxt
LLMsTxt

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

ErrorCatalog
ErrorCatalog
 Conventions
Conventions
 DataModel
DataModel
 Conformance
Conformance
 Lifecycle
Lifecycle

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization

Access & Security 7

Authentication, authorization, and security posture

TrustCenter
TrustCenter
 VulnerabilityDisclosure
VulnerabilityDisclosure
 DomainSecurity
DomainSecurity
 Authentication
Authentication
 Compliance
Compliance
 Security
Security
 SecurityTxt
SecurityTxt

Scroll for all 7

Operate 2

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage

Commercial 3

Pricing, plans, and the legal terms of use

Pricing
Pricing
 TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 1

The organization behind the API

Blog
Blog

Other 1

Properties that don't map to a standard resource type

Overlay
Overlay

Source (apis.yml)

apis.yml Raw ↑ 
aid: arctic-wolf
name: Arctic Wolf
description: 'Arctic Wolf is a security operations company delivering 24x7 AI-driven managed detection and response (MDR),
  managed risk, incident response, and endpoint security through its cloud-native Aurora Platform and Concierge Security Team.
  For developers and OEM partners, Arctic Wolf exposes a set of REST and standards-based APIs via docs.arcticwolf.com and
  the Unified Portal: a Ticket API for programmatically listing, commenting on, and closing security tickets; a User API and
  Aurora Endpoint Defense API for user and endpoint management; and Threat Intelligence feed APIs (TAXII 1.1, TAXII 2.1, and
  a Blocklist API) for consuming indicators into your own security tooling. Authentication uses bearer JWT tokens generated
  from Personal API Keys in the Unified Portal, with regional service endpoints (US, EU, AU, CA pods).'
url: https://raw.githubusercontent.com/api-evangelist/arctic-wolf/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- lightspeed-venture-partners
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-18'
image: https://arcticwolf.com/wp-content/uploads/2021/11/AW_LOGO_REVERSE-334.png
tags:
- Company
- Security
- Cybersecurity
- Managed Detection and Response
- Security Operations
- Threat Intelligence
- Ticketing
- Endpoint Security
- SOC
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
apis:
- name: Arctic Wolf Ticket API
  description: REST API for interacting with Arctic Wolf security tickets — list tickets for an organization, fetch a ticket
    by ID, close a ticket, add comments, and download attachments. Authentication is bearer JWT via a Personal API Key from
    the Unified Portal, against a regional pod service endpoint.
  humanURL: https://docs.arcticwolf.com/en/developer-and-oem/ticket-api/arctic-wolf-ticket-api/api-specifications/ticket-api
  baseURL: https://ticket-api.managedgw.us001-prod.arcticwolf.net
  tags:
  - Ticketing
  - Security
  - Support
  properties:
  - type: OpenAPI
    url: openapi/arctic-wolf-ticket-api-openapi.json
  - type: Documentation
    url: https://docs.arcticwolf.com/en/developer-and-oem/ticket-api/arctic-wolf-ticket-api
common:
- type: AgenticAccess
  url: agentic-access/arctic-wolf-agentic-access.yml
- type: TrustCenter
  url: security/arctic-wolf-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/arctic-wolf-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/arctic-wolf-domain-security.yml
- type: Authentication
  url: authentication/arctic-wolf-authentication.yml
- type: WellKnown
  url: well-known/arctic-wolf-well-known.yml
- type: ErrorCatalog
  url: errors/arctic-wolf-problem-types.yml
- type: Conventions
  url: conventions/arctic-wolf-conventions.yml
- type: DataModel
  url: data-model/arctic-wolf-data-model.yml
- type: Conformance
  url: conformance/arctic-wolf-conformance.yml
- type: Lifecycle
  url: lifecycle/arctic-wolf-lifecycle.yml
- type: MCPServer
  url: mcp/arctic-wolf-mcp.yml
- type: Overlay
  url: overlays/arctic-wolf-ticket-api-overlay.yaml
- type: AgentSkill
  url: skills/_index.yml
- type: DeveloperPortal
  url: https://docs.arcticwolf.com/en
- type: Documentation
  url: https://docs.arcticwolf.com/en/developer-and-oem
- type: APIReference
  url: https://docs.arcticwolf.com/en/developer-and-oem/ticket-api/arctic-wolf-ticket-api/api-specifications/ticket-api
- type: GettingStarted
  url: https://docs.arcticwolf.com/en/developer-and-oem/ticket-api/ticket-api-quick-start-guide/use-the-ticket-api
- type: Portal
  url: https://portal.arcticwolf.com/
- type: Support
  url: https://docs.arcticwolf.com/en/arctic-wolf-unified-portal
- type: Blog
  url: https://arcticwolf.com/resources/blog/
- type: GitHubOrganization
  url: https://github.com/rtkwlf
- type: Pricing
  url: https://arcticwolf.com/request-demo/
- type: SignUp
  url: https://portal.arcticwolf.com/
- type: TermsOfService
  url: https://arcticwolf.com/terms-conditions/
- type: PrivacyPolicy
  url: https://arcticwolf.com/privacy-policy/
- type: StatusPage
  url: https://status.arcticwolf.com/
- type: Compliance
  url: https://arcticwolf.com/compliance/
- type: Security
  url: https://arcticwolf.com/vulnerability-disclosure
- type: SecurityTxt
  url: well-known/arctic-wolf-security.txt
- type: LLMsTxt
  url: llms/arctic-wolf-llms.txt
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence