Deep Instinct website screenshot

Deep Instinct

Deep Instinct is a preemptive data security company that applies a purpose-built deep learning framework (the DSX Brain) to prevent and explain unknown malware, ransomware and zero-day threats in real time, without signatures, heuristics, cloud lookups or external threat feeds. Its DSX platform protects data across cloud storage, network-attached storage (Dell CAVA, NetApp Vscan), applications and endpoints, and pairs the prevention engine with DSX Companion (DIANNA), a GenAI analysis assistant that produces human-readable explanations of novel attacks for SOC triage. The DSX management console (D-Appliance) exposes a versioned REST API at /api/v1 for device, group, policy, event, hash allow/block-list, remote remediation and audit-log automation, and Deep Instinct's customer portal now also fronts an OAuth-protected MCP server for agent access to portal content.

Deep Instinct publishes 2 APIs on the APIs.io network. Tagged areas include Cybersecurity, Endpoint Security, malware-prevention, Ransomware, and Deep Learning.

Deep Instinct’s developer surface includes support, engineering blog, signup flow, authentication, and 19 more developer resources.

26.2/100 thin ▬ flat Agent 30/100 agent ready Full breakdown ↓
scored 2026-08-25 · rubric v0.14.0
2 APIs 2 MCP Servers
CybersecurityEndpoint Securitymalware-preventionRansomwareDeep LearningThreat PreventionData SecurityEDRSOC AutomationMCP

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-25 · rubric v0.14.0
Composite quality — 26.2/100 · thin
Contract Quality 0.0 / 25
Developer Ergonomics 5.7 / 20
Access Clarity 10.0 / 20
Operational Transparency 0.3 / 13
Contract Governance 2.2 / 12
Discoverability 8.0 / 10
Agent readiness — 30/100 · agent ready
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Delegated User Identity 6 / 6
Protected Resource Metadata 5 / 5
Registration Without a Human 6 / 6
Agentic Commerce Surface 0 / 5
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/deep-instinct: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 2

Individual APIs this provider publishes, each with its own machine-readable definition.

Deep Instinct DSX Management REST API

Versioned REST API exposed by the Deep Instinct DSX management console (D-Appliance) at https:///api/v1. Covers devices, device groups, policies, events (inclu...

Deep Instinct Portal MCP Server

Model Context Protocol server hosted on Deep Instinct's customer portal at https://portal.deepinstinct.com/mcp, advertised through RFC 9728 protected-resource metadata and an RF...

MCP Servers 2

Model Context Protocol servers that expose these APIs to AI agents.

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Deep Instinct Authentication

oauth2/apiKey · 2 schemes

SECURITY

Deep Instinct Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Deep Instinct Trust Center

SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018:2019, PCI DSS, GDPR

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Deep Instinct Scopes

2 scopes · authorizationCode

2 scopes

SCOPES

Resources

Get Started 3

Portal, sign-up, and the first successful call

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 4

Pagination, idempotency, versioning, errors, and events

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 5

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: deep-instinct
name: Deep Instinct
description: Deep Instinct is a preemptive data security company that applies a purpose-built deep learning framework (the
  DSX Brain) to prevent and explain unknown malware, ransomware and zero-day threats in real time, without signatures, heuristics,
  cloud lookups or external threat feeds. Its DSX platform protects data across cloud storage, network-attached storage (Dell
  CAVA, NetApp Vscan), applications and endpoints, and pairs the prevention engine with DSX Companion (DIANNA), a GenAI analysis
  assistant that produces human-readable explanations of novel attacks for SOC triage. The DSX management console (D-Appliance)
  exposes a versioned REST API at /api/v1 for device, group, policy, event, hash allow/block-list, remote remediation and
  audit-log automation, and Deep Instinct's customer portal now also fronts an OAuth-protected MCP server for agent access
  to portal content.
image: https://www.deepinstinct.com/image/bltefff210f63a383a8/68937a472607b85c9942030a/Meta_Home_1200_x_627.png
url: https://raw.githubusercontent.com/api-evangelist/deep-instinct/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
x-harvest-source-url: https://forgeglobal.com/deep-instinct_stock/
specificationVersion: '0.23'
created: '2026-08-01'
modified: '2026-08-01'
tags:
- Cybersecurity
- Endpoint Security
- malware-prevention
- Ransomware
- Deep Learning
- Threat Prevention
- Data Security
- EDR
- SOC Automation
- MCP
tags_raw:
- cybersecurity
- endpoint-security
- malware-prevention
- ransomware
- deep-learning
- threat-prevention
- data-security
- edr
- soc-automation
- mcp
apis:
- name: Deep Instinct DSX Management REST API
  description: Versioned REST API exposed by the Deep Instinct DSX management console (D-Appliance) at https://<your-tenant-fqdn>/api/v1.
    Covers devices, device groups, policies, events (including the JSON event-search method /api/v1/events/search), hash allow/block
    lists, remote file deletion and process termination, exclusions, licensing and audit logs. Authentication is an API key
    issued in the console and sent on the request. The API and its interactive documentation are served from each customer's
    own tenant host, so neither the docs nor a machine-readable specification are reachable anonymously on the public internet.
  humanURL: https://portal.deepinstinct.com/
  baseURL: https://your-tenant.customers.deepinstinctweb.com/api/v1
  tags:
  - Cybersecurity
  - Endpoint Security
  - Threat Prevention
  - SOC Automation
  - EDR
  tags_raw:
  - cybersecurity
  - endpoint-security
  - threat-prevention
  - soc-automation
  - edr
  properties:
  - type: Authentication
    url: authentication/deep-instinct-authentication.yml
  - type: Conventions
    url: conventions/deep-instinct-conventions.yml
  - type: Lifecycle
    url: lifecycle/deep-instinct-lifecycle.yml
- name: Deep Instinct Portal MCP Server
  description: Model Context Protocol server hosted on Deep Instinct's customer portal at https://portal.deepinstinct.com/mcp,
    advertised through RFC 9728 protected-resource metadata and an RFC 8414 authorization-server document on the same host.
    Access is OAuth 2.1 (authorization code + PKCE S256, refresh tokens, dynamic client registration) scoped by mcp:read and
    mcp:write. An anonymous tools/list call is refused with "MCP is not available for guest users", so the live tool schemas
    require an authenticated portal session.
  humanURL: https://portal.deepinstinct.com/mcp
  baseURL: https://portal.deepinstinct.com/mcp
  tags:
  - MCP
  - agent-native
  - Cybersecurity
  tags_raw:
  - mcp
  - agent-native
  - cybersecurity
  properties:
  - type: MCPServer
    url: mcp/deep-instinct-mcp.yml
  - type: MCPServer
    url: https://portal.deepinstinct.com/mcp
  - type: OAuthScopes
    url: scopes/deep-instinct-scopes.yml
  - type: Authentication
    url: authentication/deep-instinct-authentication.yml
  - type: WellKnown
    url: well-known/deep-instinct-well-known.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.deepinstinct.com/
- type: DeveloperPortal
  url: https://portal.deepinstinct.com/
- type: Support
  url: https://www.deepinstinct.com/contact-us
- type: Blog
  url: https://www.deepinstinct.com/blog
- type: BlogRSS
  url: https://www.deepinstinct.com/blog/feed
- type: GitHubOrganization
  url: https://github.com/deepinstinct
- type: SignUp
  url: https://www.deepinstinct.com/request-a-demo
- type: Login
  url: https://portal.deepinstinct.com/
- type: TermsOfService
  url: https://www.deepinstinct.com/terms-of-use
- type: PrivacyPolicy
  url: https://www.deepinstinct.com/privacy-policy
- type: Compliance
  url: https://www.deepinstinct.com/compliance-certification-evaluation
- type: MCPServer
  url: mcp/deep-instinct-mcp.yml
- type: OAuthScopes
  url: scopes/deep-instinct-scopes.yml
- type: Authentication
  url: authentication/deep-instinct-authentication.yml
- type: WellKnown
  url: well-known/deep-instinct-well-known.yml
- type: Conventions
  url: conventions/deep-instinct-conventions.yml
- type: Conformance
  url: conformance/deep-instinct-conformance.yml
- type: Lifecycle
  url: lifecycle/deep-instinct-lifecycle.yml
- type: TrustCenter
  url: security/deep-instinct-trust-center.yml
- type: DomainSecurity
  url: security/deep-instinct-domain-security.yml
- type: Packages
  url: packages/deep-instinct-packages.yml
- type: ErrorCatalog
  url: errors/deep-instinct-problem-types.yml
- type: LLMsTxt
  url: llms/deep-instinct-llms.txt
x-enrichment:
  date: '2026-08-01'
  status: enriched
  artifacts_added: 14
  pass: local-v1

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/deep-instinct"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/deep-instinct/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/deep-instinct/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.