# Mandiant

**Canonical:** https://apis.io/providers/mandiant/  
**Website:** https://docs.mandiant.com  
**APIs profiled:** 2

Mandiant, now part of Google Cloud, is a threat intelligence and cyber defense company whose Mandiant Advantage platform exposes several authenticated REST APIs documented at docs.mandiant.com. The Threat Intelligence (MATI) API v3 serves indicators, finished intelligence reports, threat actors, malware families, vulnerabilities and campaigns; the Digital Threat Monitoring API surfaces exposed credentials and brand/deep-and-dark-web threats; the Attack Surface Management API inventories an organization's external assets; and the Security Validation (MSV) API drives automated testing of security controls. These APIs authenticate with an API key and secret that is exchanged for a short-lived bearer access token. Mandiant's frontline threat data now also powers Google Threat Intelligence alongside VirusTotal.

## Kin Score — 17.3 / 100 (emerging)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 17.3).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 2.6 |
| Developer Ergonomics | 40.5 |
| Commercial Clarity | 6.6 |
| Access Clarity | 6.6 |

## Agent readiness — 8.5 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (2)

- **Mandiant Threat Intelligence API v3** — The Mandiant Advantage Threat Intelligence (MATI) API v3 provides programmatic access to Mandiant's threat intelligence, including indicators of compromise, finished intelligenc...
- **Mandiant Digital Threat Monitoring API** — The Digital Threat Monitoring API surfaces exposed credentials, leaked data and brand/deep-and-dark-web threats monitored by Mandiant Advantage. It is served from the Mandiant i...

## Security (2)

- **Mandiant Authentication** — apiKey/oauth2 · 2 schemes
- **Mandiant Domain Security** — TLSv1.3 · DNSSEC

## Tags

Company, Security, Threat Intelligence, Cybersecurity, Incident Response, Attack Surface Management, Vulnerability Intelligence, Malware, Google Cloud

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/mandiant/). Scores are computed from the provider's own public artifacts under a published rubric.