Google Cloud Chronicle website screenshot

Google Cloud Chronicle

Google Cloud Chronicle is a cloud-native security information and event management (SIEM) platform that enables enterprises to store, search, and analyze massive volumes of security telemetry data. Built on Google infrastructure, Chronicle provides sub-second search across petabytes of security data, threat detection using rules and intelligence, and investigation tools for security operations teams.

Google Cloud Chronicle publishes 4 APIs on the APIs.io network, including Alerts API, Feeds API, ReferenceLists API, and 1 more. Tagged areas include Incident Response, Log Management, Security Analytics, Security Operations, and SIEM.

The Google Cloud Chronicle catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

Google Cloud Chronicle’s developer surface includes authentication, developer portal, getting-started guide, documentation, pricing, support, and 12 more developer resources.

🌐 Visit website 📡 Source on GitHub
62.0/100 strong ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
4 APIs
Incident ResponseLog ManagementSecurity AnalyticsSecurity OperationsSIEMThreat Detection

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 62.0/100 · strong
Contract Quality 17.0 / 25
Developer Ergonomics 9.6 / 20
Commercial Clarity 14.2 / 20
Operational Transparency 6.8 / 13
Governance 7.0 / 12
Discoverability 7.4 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/google-cloud-chronicle: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 4

Individual APIs this provider publishes, each with its own machine-readable definition.

Google Cloud Chronicle Alerts API

Operations for managing security alerts

Google Cloud Chronicle Feeds API

Operations for managing data ingestion feeds

Google Cloud Chronicle ReferenceLists API

Operations for managing reference lists

Google Cloud Chronicle Rules API

Operations for managing detection rules

Postman Collections 4

Ready-to-run Postman collections for exercising this provider's APIs.

Google Cloud Chronicle Alerts API

POSTMAN

Google Cloud Chronicle Alerts Feeds API

POSTMAN

Google Cloud Chronicle Alerts ReferenceLists API

POSTMAN

Google Cloud Chronicle Alerts Rules API

POSTMAN

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Google Cloud Chronicle API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Google Cloud Chronicle Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Google Cloud Chronicle Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Google Cloud Chronicle Finops

FINOPS

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Google Cloud Chronicle Context

0 classes · 4 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

Google Cloud Chronicle API Rules

6 rules · 4 warnings 2 info

SPECTRAL

JSON Schema 1

Standalone JSON Schema definitions for this provider's data models.

Google Cloud Chronicle UDM Event

7 properties

JSON SCHEMA

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Google Cloud Chronicle Authentication

oauth2 · 1 scheme

SECURITY

Google Cloud Chronicle Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Google Cloud Chronicle Vulnerability Disclosure

security.txt · contact published

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Google Cloud Chronicle Scopes

1 scope · authorizationCode

1 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Google Cloud Chronicle Agentic Access

9 operations · 4 acting

9 operations · 4 acting

AGENTIC

Resources

Get Started 2

Portal, sign-up, and the first successful call

Portal
Portal
 GettingStarted
GettingStarted

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

JSONLD
JSONLD

Build 2

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace
PostmanWorkspace
 GitHubOrganization
GitHubOrganization

Access & Security 5

Authentication, authorization, and security posture

VulnerabilityDisclosure
VulnerabilityDisclosure
 DomainSecurity
DomainSecurity
 Authentication
Authentication
 OAuthScopes
OAuthScopes
 Authentication
Authentication

Operate 2

Status, limits, changes, and where to get help

StatusPage
StatusPage
 Support
Support

Commercial 3

Pricing, plans, and the legal terms of use

Pricing
Pricing
 TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 1

The organization behind the API

LinkedIn
LinkedIn

Source (apis.yml)

apis.yml Raw ↑ 
aid: google-cloud-chronicle
name: Google Cloud Chronicle
description: Google Cloud Chronicle is a cloud-native security information and event management (SIEM) platform that enables
  enterprises to store, search, and analyze massive volumes of security telemetry data. Built on Google infrastructure, Chronicle
  provides sub-second search across petabytes of security data, threat detection using rules and intelligence, and investigation
  tools for security operations teams.
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/google-cloud-chronicle.png
url: https://raw.githubusercontent.com/api-evangelist/google-cloud-chronicle/refs/heads/main/apis.yml
created: '2026-03-13'
modified: '2026-05-19'
specificationVersion: '0.19'
type: Index
tags:
- Incident Response
- Log Management
- Security Analytics
- Security Operations
- SIEM
- Threat Detection
apis:
- aid: google-cloud-chronicle:google-cloud-chronicle-alerts-api
  name: Google Cloud Chronicle Alerts API
  description: Operations for managing security alerts
  humanURL: https://cloud.google.com/chronicle/docs
  baseURL: https://chronicle.googleapis.com
  tags:
  - Alerts
  properties:
  - type: OpenAPI
    url: openapi/google-cloud-chronicle-alerts-api-openapi.yml
  - type: Documentation
    url: https://cloud.google.com/chronicle/docs/reference/rest
  - type: Authentication
    url: https://cloud.google.com/chronicle/docs/reference/rest#authentication
  - type: JSONSchema
    url: json-schema/google-cloud-chronicle-event-schema.json
- aid: google-cloud-chronicle:google-cloud-chronicle-feeds-api
  name: Google Cloud Chronicle Feeds API
  description: Operations for managing data ingestion feeds
  humanURL: https://cloud.google.com/chronicle/docs
  baseURL: https://chronicle.googleapis.com
  tags:
  - Feeds
  properties:
  - type: OpenAPI
    url: openapi/google-cloud-chronicle-feeds-api-openapi.yml
  - type: Documentation
    url: https://cloud.google.com/chronicle/docs/reference/rest
  - type: Authentication
    url: https://cloud.google.com/chronicle/docs/reference/rest#authentication
  - type: JSONSchema
    url: json-schema/google-cloud-chronicle-event-schema.json
- aid: google-cloud-chronicle:google-cloud-chronicle-referencelists-api
  name: Google Cloud Chronicle ReferenceLists API
  description: Operations for managing reference lists
  humanURL: https://cloud.google.com/chronicle/docs
  baseURL: https://chronicle.googleapis.com
  tags:
  - ReferenceLists
  properties:
  - type: OpenAPI
    url: openapi/google-cloud-chronicle-referencelists-api-openapi.yml
  - type: Documentation
    url: https://cloud.google.com/chronicle/docs/reference/rest
  - type: Authentication
    url: https://cloud.google.com/chronicle/docs/reference/rest#authentication
  - type: JSONSchema
    url: json-schema/google-cloud-chronicle-event-schema.json
- aid: google-cloud-chronicle:google-cloud-chronicle-rules-api
  name: Google Cloud Chronicle Rules API
  description: Operations for managing detection rules
  humanURL: https://cloud.google.com/chronicle/docs
  baseURL: https://chronicle.googleapis.com
  tags:
  - Rules
  properties:
  - type: OpenAPI
    url: openapi/google-cloud-chronicle-rules-api-openapi.yml
  - type: Documentation
    url: https://cloud.google.com/chronicle/docs/reference/rest
  - type: Authentication
    url: https://cloud.google.com/chronicle/docs/reference/rest#authentication
  - type: JSONSchema
    url: json-schema/google-cloud-chronicle-event-schema.json
common:
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/google-cloud-chronicle/overview
- type: AgenticAccess
  url: agentic-access/google-cloud-chronicle-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/google-cloud-chronicle-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/google-cloud-chronicle-domain-security.yml
- type: Authentication
  url: authentication/google-cloud-chronicle-authentication.yml
- type: OAuthScopes
  url: scopes/google-cloud-chronicle-scopes.yml
- type: GitHubOrganization
  url: https://github.com/chronicle
- type: LinkedIn
  url: https://www.linkedin.com/company/chroniclesec
- type: Portal
  url: https://cloud.google.com/chronicle
- type: GettingStarted
  url: https://cloud.google.com/chronicle/docs/get-started
- type: Documentation
  url: https://cloud.google.com/chronicle/docs
- type: Authentication
  url: https://cloud.google.com/chronicle/docs/reference/rest#authentication
- type: Pricing
  url: https://cloud.google.com/chronicle/pricing
- type: TermsOfService
  url: https://cloud.google.com/terms
- type: PrivacyPolicy
  url: https://policies.google.com/privacy
- type: StatusPage
  url: https://status.cloud.google.com
- type: Support
  url: https://cloud.google.com/chronicle/docs/support
- type: JSONLD
  url: json-ld/google-cloud-chronicle-context.jsonld
- type: Integrations
  url: https://cloud.google.com/marketplace
integrations:
- name: Become a Partner
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com