Huntress

Huntress is a managed cybersecurity platform built for small and mid-sized businesses and the MSPs/MSSPs that serve them, pairing purpose-built software with a human-powered 24/7 Security Operations Center (SOC). Its products span Managed EDR (including macOS and Managed Microsoft Defender), Managed ITDR for Microsoft 365 identities, Managed SIEM, and Managed Security Awareness Training. The Huntress REST API (api.huntress.io/v1) gives partners programmatic access to accounts, organizations, agents, incident reports, remediations, escalations, platform actions, signals, external recon, billing and reseller subscriptions, plus a SIEM ES|QL query endpoint — secured with HTTP Basic API keys, cursor-paginated, with real-time webhooks and an official remote MCP server for AI agents.

Huntress publishes 1 API on the APIs.io network: REST API. Tagged areas include Company, Security, Cybersecurity, Managed Detection and Response, and Endpoint Security.

The Huntress catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Huntress’ developer surface includes documentation, API reference, support, engineering blog, pricing, signup flow, changelog, and 26 more developer resources.

🌐 Visit website 📡 Source on GitHub
49.3/100 developing Agent 78/100 agent native Full breakdown ↓
scored 2026-07-20 · rubric v0.4
1 APIs 1 MCP Servers 0 Features
CompanySecurityCybersecurityManaged Detection and ResponseEndpoint SecuritySOCSIEMIdentity Threat DetectionMSPWebhooks

API Rating

API Evangelist API Evangelist Rating How this is scored →
scored 2026-07-20 · rubric v0.4
Composite quality — 49.3/100 · developing
Contract Quality 9.4 / 25
Developer Ergonomics 11.3 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 7.2 / 13
Governance 0.0 / 12
Discoverability 9.3 / 10
Agent readiness — 78/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 3 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/huntress: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs

Huntress REST API

Partner-facing REST API for the Huntress platform — manage accounts, organizations, agents (including host isolation), incident reports and remediations, escalations, platform a...

MCP Servers

huntress-mcp.yml

MCP SERVER

Event Specifications

Huntress Webhooks

ASYNCAPI

Resources

Get Started 2

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 SignUp
SignUp

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

MCPServer
MCPServer
 WellKnown
WellKnown
 LLMsTxt
LLMsTxt
 AgentSkill
AgentSkill
 AgenticAccess
AgenticAccess

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Conformance
Conformance
 ErrorCatalog
ErrorCatalog
 Lifecycle
Lifecycle
 Conventions
Conventions
 DataModel
DataModel
 Webhooks
Webhooks

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization

Access & Security 8

Authentication, authorization, and security posture

SecurityTxt
SecurityTxt
 Compliance
Compliance
 OAuthScopes
OAuthScopes
 Security
Security
 TrustCenter
TrustCenter
 VulnerabilityDisclosure
VulnerabilityDisclosure
 DomainSecurity
DomainSecurity
 Authentication
Authentication

Scroll for all 8

Operate 3

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage
 ChangeLog
ChangeLog

Commercial 3

Pricing, plans, and the legal terms of use

Pricing
Pricing
 TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Blog
Blog
 Website
Website

Other 1

Properties that don't map to a standard resource type

Overlay
Overlay

Source (apis.yml)

apis.yml Raw ↑ 
aid: huntress
name: Huntress
description: Huntress is a managed cybersecurity platform built for small and mid-sized businesses and the MSPs/MSSPs that
  serve them, pairing purpose-built software with a human-powered 24/7 Security Operations Center (SOC). Its products span
  Managed EDR (including macOS and Managed Microsoft Defender), Managed ITDR for Microsoft 365 identities, Managed SIEM, and
  Managed Security Awareness Training. The Huntress REST API (api.huntress.io/v1) gives partners programmatic access to accounts,
  organizations, agents, incident reports, remediations, escalations, platform actions, signals, external recon, billing and
  reseller subscriptions, plus a SIEM ES|QL query endpoint — secured with HTTP Basic API keys, cursor-paginated, with real-time
  webhooks and an official remote MCP server for AI agents.
url: https://raw.githubusercontent.com/api-evangelist/huntress/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- kleiner-perkins
- sapphire-ventures
x-tier: enriched
x-tier-reason: portfolio-lead
image: https://huntresscdn.com/portal/assets/huntress_logo_wide_teal_small-34bc9ba6.png
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-19'
tags:
- Company
- Security
- Cybersecurity
- Managed Detection and Response
- Endpoint Security
- SOC
- SIEM
- Identity Threat Detection
- MSP
- Webhooks
apis:
- name: Huntress REST API
  description: Partner-facing REST API for the Huntress platform — manage accounts, organizations, agents (including host
    isolation), incident reports and remediations, escalations, platform actions, signals, identities, external recon ports,
    unwanted-access rules, billing/invoices and reseller subscriptions, and run SIEM ES|QL queries. HTTP Basic auth (API key
    + secret); cursor pagination (limit + page_token).
  humanURL: https://api.huntress.io/docs
  baseURL: https://api.huntress.io/v1
  properties:
  - type: OpenAPI
    url: openapi/huntress-rest-openapi.json
  - type: Webhooks
    url: openapi/huntress-webhooks-openapi.json
  - type: APIReference
    url: https://api.huntress.io/docs
  - type: Documentation
    url: https://api.huntress.io/docs
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DeveloperPortal
  url: https://api.huntress.io/docs
- type: Documentation
  url: https://api.huntress.io/docs
- type: APIReference
  url: https://api.huntress.io/docs
- type: Support
  url: https://support.huntress.io
- type: Blog
  url: https://www.huntress.com/blog
- type: GitHubOrganization
  url: https://github.com/huntresslabs
- type: Pricing
  url: https://www.huntress.com/pricing
- type: SignUp
  url: https://www.huntress.com/start-trial
- type: TermsOfService
  url: https://www.huntress.com/terms-of-service
- type: PrivacyPolicy
  url: https://www.huntress.com/privacy-policy
- type: StatusPage
  url: https://status.huntress.io
- type: ChangeLog
  url: changelog/huntress-changelog.yml
- type: MCPServer
  url: mcp/huntress-mcp.yml
- type: WellKnown
  url: well-known/huntress-well-known.yml
- type: SecurityTxt
  url: well-known/huntress-security.txt
- type: LLMsTxt
  url: llms/huntress-llms.txt
- type: Overlay
  url: overlays/huntress-rest-overlay.yaml
- type: Conformance
  url: conformance/huntress-conformance.yml
- type: Compliance
  url: https://trust.huntress.com
- type: ErrorCatalog
  url: errors/huntress-problem-types.yml
- type: Lifecycle
  url: lifecycle/huntress-lifecycle.yml
- type: OAuthScopes
  url: scopes/huntress-scopes.yml
- type: Conventions
  url: conventions/huntress-conventions.yml
- type: DataModel
  url: data-model/huntress-data-model.yml
- type: Webhooks
  url: asyncapi/huntress-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Security
  url: https://support.huntress.io/hc/en-us/articles/24119617302291-Huntress-Vulnerability-Disclosure-Program-Terms-and-Conditions
- type: TrustCenter
  url: security/huntress-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/huntress-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/huntress-domain-security.yml
- type: AgenticAccess
  url: agentic-access/huntress-agentic-access.yml
- type: Authentication
  url: authentication/huntress-authentication.yml
- type: Website
  url: https://www.huntress.com
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence