Properties
| Name | Type | Description |
|---|---|---|
| value | string | Indicator value to match (IP, hash, domain, etc.) |
| eventinfo | string | Search events by title or description text |
| event_id | string | Look up one event directly by ID |
| type_attribute | string | Restrict to one attribute type (e.g. ip-dst, md5, domain) |
| category | string | Restrict to one MISP attribute category (e.g. Network activity, Payload delivery) |
| tags | array | Match any of the given tags (supports tlp: prefixes and galaxy cluster names) |
| to_ids | boolean | Attribute selector: true returns only attributes flagged for IDS detection, false only attributes NOT flagged |
| threat_level_id | string | Event threat level: 1 (high), 2 (medium), 3 (low), 4 (undefined) |
| date_from | string | Restrict to an event date range start (YYYY-MM-DD) |
| date_to | string | Restrict to an event date range end (YYYY-MM-DD) |
| published | boolean | Restrict to events published by their owning org (excludes analyst drafts) |
| include | array | Include result layers: event_reports, feeds, misp_events_full, objects, sightings, stats, tags, version |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://artifacts.apis.io/crimsoncrawler-com/json-schema/crimsoncrawler-com-post-v1-search-misp-request-schema.json",
"title": "PostV1SearchMispRequest",
"x-generated": "2026-10-30",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/_ae-authored/crimsoncrawler-com-openapi-generated.yml#/components/schemas/PostV1SearchMispRequest",
"type": "object",
"properties": {
"value": {
"type": "string",
"description": "Indicator value to match (IP, hash, domain, etc.)"
},
"eventinfo": {
"type": "string",
"description": "Search events by title or description text"
},
"event_id": {
"type": "string",
"description": "Look up one event directly by ID"
},
"type_attribute": {
"type": "string",
"description": "Restrict to one attribute type (e.g. ip-dst, md5, domain)"
},
"category": {
"type": "string",
"description": "Restrict to one MISP attribute category (e.g. Network activity, Payload delivery)"
},
"tags": {
"type": "array",
"description": "Match any of the given tags (supports tlp: prefixes and galaxy cluster names)"
},
"to_ids": {
"type": "boolean",
"description": "Attribute selector: true returns only attributes flagged for IDS detection, false only attributes NOT flagged"
},
"threat_level_id": {
"type": "string",
"description": "Event threat level: 1 (high), 2 (medium), 3 (low), 4 (undefined)"
},
"date_from": {
"type": "string",
"description": "Restrict to an event date range start (YYYY-MM-DD)"
},
"date_to": {
"type": "string",
"description": "Restrict to an event date range end (YYYY-MM-DD)"
},
"published": {
"type": "boolean",
"description": "Restrict to events published by their owning org (excludes analyst drafts)"
},
"include": {
"type": "array",
"description": "Include result layers: event_reports, feeds, misp_events_full, objects, sightings, stats, tags, version"
}
}
}Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/crimsoncrawler-com-post-v1-search-misp-request"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.