Recorded Future · Schema
DarkWebBrandResponse
CybersecurityThreat IntelligenceIntelligence CloudBrand IntelligenceIdentity IntelligenceVulnerability IntelligenceAI Analyst
Properties
| Name | Type | Description |
|---|---|---|
| playbook_alert_id | string | |
| panel_status | object | |
| panel_evidence_summary | object | |
| panel_triage | object | |
| panel_analysis_report | object | |
| panel_cached_content | object | |
| panel_log | object | |
| panel_log_v2 | object |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/recorded-future/main/json-schema/recorded-future-dark-web-brand-response-schema.json",
"title": "DarkWebBrandResponse",
"x-generated": "2026-10-20",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/recorded-future-playbook-alerts-api-openapi.yml#/components/schemas/DarkWebBrandResponse",
"type": "object",
"required": [
"playbook_alert_id"
],
"properties": {
"playbook_alert_id": {
"type": "string"
},
"panel_status": {
"$ref": "#/$defs/DarkWebBrandStatusPanel"
},
"panel_evidence_summary": {
"$ref": "#/$defs/DarkWebBrandSummaryPanel"
},
"panel_triage": {
"$ref": "#/$defs/DarkWebBrandTriagePanel"
},
"panel_analysis_report": {
"$ref": "#/$defs/DarkWebBrandAnalysisReportPanel"
},
"panel_cached_content": {
"$ref": "#/$defs/DarkWebBrandCachedContentPanel"
},
"panel_log": {
"$ref": "#/$defs/PlaybookAlertLogPanel"
},
"panel_log_v2": {
"$ref": "#/$defs/PlaybookAlertLogPanelV2"
}
},
"$defs": {
"ActionChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"removed": {
"type": "array",
"items": {
"type": "string"
}
},
"added": {
"type": "array",
"items": {
"type": "string"
}
},
"type": {
"type": "string",
"enum": [
"action_change"
]
}
},
"required": [
"type",
"removed",
"added"
]
},
"AssessmentIdsChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"removed": {
"type": "array",
"items": {
"type": "string"
}
},
"added": {
"type": "array",
"items": {
"type": "string"
}
},
"type": {
"type": "string",
"enum": [
"assessment_ids_change"
]
}
},
"required": [
"type"
]
},
"AssessmentSource": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"id"
]
},
"AssessmentWithSource": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"level": {
"type": "number"
},
"source": {
"$ref": "#/$defs/AssessmentSource"
},
"title": {
"type": "string"
}
},
"required": [
"id",
"level",
"source"
]
},
"Assignee": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"id"
]
},
"AssigneeChange": {
"type": "object",
"properties": {
"old": {
"type": "string"
},
"new": {
"type": "string"
},
"type": {
"type": "string",
"enum": [
"assignee_change"
]
}
},
"required": [
"type"
]
},
"AssigneeChangeV2": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"old": {
"$ref": "#/$defs/Assignee"
},
"new": {
"$ref": "#/$defs/Assignee"
},
"type": {
"type": "string",
"enum": [
"assignee_change"
]
}
},
"required": [
"type"
]
},
"ClusterChangeAdded": {
"type": "object",
"description": "Geopolitics Facility cluster change describing a new cluster of related events that became associated with the alert.\n",
"properties": {
"cluster_id": {
"type": "string"
},
"main_event": {
"type": "object",
"properties": {
"event_id": {
"type": "string"
},
"assessments": {
"type": "array",
"items": {
"$ref": "#/$defs/FacilityAssessment"
}
},
"type": {
"type": "string",
"enum": [
"event_change_added"
]
}
},
"required": [
"event_id",
"type"
]
},
"other_event_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"type": {
"type": "string",
"enum": [
"cluster_change_added"
]
}
},
"required": [
"type"
]
},
"CodeRepoLeakageAssessment": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"level": {
"type": "number"
},
"title": {
"type": "string"
},
"text_indicator": {
"type": "string"
},
"entity": {
"type": "string"
}
},
"required": [
"id",
"level"
]
},
"CodeRepoLeakageAssessmentV2": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"level": {
"type": "number"
},
"title": {
"type": "string"
},
"text_indicator": {
"type": "string"
},
"entity": {
"$ref": "#/$defs/Entity"
}
},
"required": [
"id",
"level"
]
},
"CodeRepoLeakageChangeContext": {
"type": "object",
"properties": {
"type": {
"type": "string",
"enum": [
"code_repo_leakage"
]
},
"changes": {
"type": "array",
"items": {
"anyOf": [
{
"$ref": "#/$defs/CodeRepoLeakageEvidenceChange"
},
{
"$ref": "#/$defs/AssessmentIdsChange"
},
{
"$ref": "#/$defs/AssigneeChange"
},
{
"$ref": "#/$defs/StatusChange"
},
{
"$ref": "#/$defs/PriorityChange"
},
{
"$ref": "#/$defs/ReopenStrategyChange"
},
{
"$ref": "#/$defs/TitleChange"
},
{
"$ref": "#/$defs/EntitiesChange"
},
{
"$ref": "#/$defs/RelatedEntitiesChange"
},
{
"$ref": "#/$defs/DescriptionChange"
},
{
"$ref": "#/$defs/ExternalIdChange"
}
]
}
}
},
"required": [
"type",
"changes"
]
},
"CodeRepoLeakageEvidence": {
"type": "object",
"properties": {
"assessments": {
"type": "array",
"items": {
"$ref": "#/$defs/CodeRepoLeakageAssessment"
}
},
"document_content": {
"$ref": "#/$defs/DocumentContent"
},
"ontology": {
"type": "array",
"items": {
"$ref": "#/$defs/EntityPathMatch"
}
},
"target_entities": {
"type": "array",
"items": {
"type": "string"
}
},
"watch_lists": {
"type": "array",
"items": {
"type": "string"
}
}
},
"required": [
"assessments",
"document_content",
"ontology",
"target_entities",
"watch_lists"
]
},
"CodeRepoLeakageEvidenceChange": {
"type": "object",
"properties": {
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/CodeRepoLeakageEvidence"
}
},
"type": {
"type": "string",
"enum": [
"evidence_changes"
]
}
},
"required": [
"added",
"type"
]
},
"CodeRepoLeakageEvidenceChangeV2": {
"type": "object",
"description": "This change only applies to Data Leakage on Code Repository alerts.",
"properties": {
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/CodeRepoLeakageEvidenceV2"
}
},
"type": {
"type": "string",
"enum": [
"evidence_change"
]
}
},
"required": [
"added",
"type"
]
},
"CodeRepoLeakageEvidenceV2": {
"type": "object",
"properties": {
"assessments": {
"type": "array",
"items": {
"$ref": "#/$defs/CodeRepoLeakageAssessmentV2"
}
},
"document": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"content": {
"type": "string"
},
"owner_id": {
"type": "string"
},
"owner_name": {
"type": "string"
},
"published": {
"type": "string",
"format": "date-time"
}
},
"required": [
"id",
"content",
"owner_id",
"published"
]
},
"target_entities": {
"type": "array",
"items": {
"$ref": "#/$defs/Entity"
}
},
"watch_lists": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"id"
]
}
}
},
"required": [
"assessments",
"document",
"target_entities",
"watch_lists"
]
},
"CommentChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"comment": {
"type": "string"
},
"type": {
"type": "string",
"enum": [
"comment_change"
]
}
},
"required": [
"type",
"comment"
]
},
"CustomOnwardActionsAddedChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"added_actions_taken": {
"$ref": "#/$defs/PlaybookAlertOnwardActionList"
},
"type": {
"type": "string",
"enum": [
"onward_actions_added_change"
]
}
}
},
"CustomOnwardActionsRemovedChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"removed_actions_taken": {
"$ref": "#/$defs/PlaybookAlertOnwardActionList"
},
"type": {
"type": "string",
"enum": [
"onward_actions_removed_change"
]
}
}
},
"CustomStatusChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"old": {
"type": "string"
},
"new": {
"type": "string"
},
"type": {
"type": "string",
"enum": [
"status_change"
]
},
"actions_taken": {
"$ref": "#/$defs/PlaybookAlertOnwardActionList"
}
},
"required": [
"type",
"old",
"new",
"actions_taken"
]
},
"DarkWebBrandAnalysisReportPanel": {
"type": "object",
"description": "Analyst report associated with the dark web brand mention.",
"properties": {
"title": {
"type": "string",
"description": "Title of the analysis report."
},
"source": {
"$ref": "#/$defs/DarkWebBrandEntity"
},
"created": {
"type": "string",
"description": "Datetime when the analysis report was created."
},
"content": {
"type": "string",
"description": "Body content of the analysis report."
}
},
"required": [
"title",
"source",
"created"
]
},
"DarkWebBrandAssessment": {
"type": "object",
"description": "An assessment produced for the alert with its criticality.",
"properties": {
"name": {
"type": "string",
"description": "Name of the assessment."
},
"criticality": {
"$ref": "#/$defs/PlaybookAlertPriority"
}
},
"required": [
"name",
"criticality"
]
},
"DarkWebBrandAsset": {
"type": "object",
"description": "An asset (entity) that was matched in the dark web brand mention.",
"properties": {
"type": {
"type": "string",
"description": "The type of the matched asset (e.g. domain, organization, person)."
},
"entity_id": {
"type": "string",
"description": "The ID of the matched asset entity."
},
"name": {
"type": "string",
"description": "The display name of the matched asset entity."
}
},
"required": [
"type",
"entity_id"
]
},
"DarkWebBrandCachedContentPanel": {
"type": "object",
"description": "Cached copy of the content referenced by the dark web brand mention.",
"properties": {
"title": {
"type": "string",
"description": "Title of the cached content."
},
"downloaded": {
"type": "string",
"description": "Datetime when the content was downloaded and cached."
},
"original_url": {
"type": "string",
"description": "Original URL the cached content was retrieved from, if available."
},
"content": {
"type": "string",
"description": "The cached content body."
}
},
"required": [
"title",
"downloaded",
"content"
]
},
"DarkWebBrandDetails": {
"description": "Source-specific details about the dark web brand mention. The shape varies by `type`.",
"type": "object",
"oneOf": [
{
"$ref": "#/$defs/DarkWebBrandRansomwareDetails"
},
{
"$ref": "#/$defs/DarkWebBrandTelegramDetails"
},
{
"$ref": "#/$defs/DarkWebBrandForumDetails"
},
{
"$ref": "#/$defs/DarkWebBrandMarketDetails"
}
]
},
"DarkWebBrandEntity": {
"type": "object",
"description": "A reference to an entity related to the dark web brand mention.",
"properties": {
"entity_id": {
"type": "string",
"description": "The ID of the related entity."
},
"name": {
"type": "string",
"description": "The display name of the related entity."
}
},
"required": [
"entity_id"
]
},
"DarkWebBrandForumDetails": {
"type": "object",
"description": "Details for a post observed on a dark web forum.",
"properties": {
"type": {
"type": "string",
"enum": [
"dark_web_forum_mention"
]
},
"source": {
"$ref": "#/$defs/DarkWebBrandEntity"
},
"post_title": {
"type": "string",
"description": "Title of the forum post."
},
"post": {
"type": "string",
"description": "Body content of the forum post."
},
"post_date": {
"type": "string",
"description": "Datetime when the post was published."
},
"post_url": {
"type": "string",
"description": "URL of the forum post, if available."
}
},
"required": [
"type",
"source",
"post_title",
"post_date"
]
},
"DarkWebBrandMarketDetails": {
"type": "object",
"description": "Details for a listing observed on a dark web market.",
"properties": {
"type": {
"type": "string",
"enum": [
"dark_web_market_mention"
]
},
"source": {
"$ref": "#/$defs/DarkWebBrandEntity"
},
"market_url": {
"type": "string",
"description": "URL of the dark web market."
},
"listing_title": {
"type": "string",
"description": "Title of the market listing."
},
"listing_content": {
"type": "string",
"description": "Body content of the market listing."
},
"post_date": {
"type": "string",
"description": "Datetime when the listing was posted."
},
"post_url": {
"type": "string",
"description": "URL of the specific listing post, if available."
}
},
"required": [
"type",
"source",
"market_url",
"listing_title",
"post_date"
]
},
"DarkWebBrandRansomwareDetails": {
"type": "object",
"description": "Details for a mention published on a ransomware extortion site.",
"properties": {
"type": {
"type": "string",
"enum": [
"ransomware_extortion_site"
]
},
"ransomware_group": {
"$ref": "#/$defs/DarkWebBrandEntity"
},
"source": {
"$ref": "#/$defs/DarkWebBrandEntity"
},
"incident_url": {
"type": "string",
"description": "URL of the ransomware incident post, if available."
},
"post_details": {
"type": "string",
"description": "Free-form details of the ransomware post."
},
"post_date": {
"type": "string",
"description": "Datetime when the post was published."
}
},
"required": [
"type",
"ransomware_group",
"source",
"post_date"
]
},
"DarkWebBrandStatusPanel": {
"type": "object",
"description": "Data structure containing general information about the alert and the entity that triggered it.\n",
"properties": {
"status": {
"$ref": "#/$defs/PlaybookAlertStatus"
},
"priority": {
"$ref": "#/$defs/PlaybookAlertPriority"
},
"reopen": {
"$ref": "#/$defs/PlaybookAlertReopenStrategy"
},
"assignee_name": {
"$ref": "#/$defs/PlaybookAlertAssigneeName"
},
"assignee_id": {
"$ref": "#/$defs/PlaybookAlertAssigneeId"
},
"created": {
"$ref": "#/$defs/PlaybookAlertCreated"
},
"updated": {
"$ref": "#/$defs/PlaybookAlertUpdated"
},
"case_rule_id": {
"$ref": "#/$defs/PlaybookAlertCaseRuleId"
},
"case_rule_label": {
"$ref": "#/$defs/PlaybookAlertCaseRuleLabel"
},
"alert_rule": {
"$ref": "#/$defs/PlaybookAlertAlertRule"
},
"creator_name": {
"$ref": "#/$defs/PlaybookAlertCreatorName"
},
"creator_id": {
"$ref": "#/$defs/PlaybookAlertCreatorId"
},
"owner_id": {
"$ref": "#/$defs/PlaybookAlertOwnerId"
},
"owner_name": {
"$ref": "#/$defs/PlaybookAlertOwnerName"
},
"organisation_id": {
"$ref": "#/$defs/PlaybookAlertOrganisationId"
},
"organisation_name": {
"$ref": "#/$defs/PlaybookAlertOrganisationName"
},
"owner_organisation_details": {
"$ref": "#/$defs/PlaybookAlertOwnerOrganisationDetails"
},
"entity_id": {
"type": "string",
"description": "ID of the entity that triggered the alert."
},
"entity_name": {
"type": "string",
"description": "Name of the entity that triggered the alert."
},
"targets": {
"description": "Watched targets that this alert matched.",
"type": "array",
"items": {
"$ref": "#/$defs/ResolvedEntity"
}
},
"actions_taken": {
"$ref": "#/$defs/PlaybookAlertOnwardActionList"
}
},
"required": [
"status",
"priority",
"created",
"updated",
"case_rule_id",
"alert_rule",
"targets",
"actions_taken"
]
},
"DarkWebBrandSummaryPanel": {
"type": "object",
"description": "Summarized data describing the Dark Web Brand alert evidence.",
"properties": {
"matched_assets": {
"description": "Assets owned or watched by the customer that were matched in the dark web brand mention.",
"type": "array",
"items": {
"$ref": "#/$defs/DarkWebBrandAsset"
}
},
"assessments": {
"description": "A list of assessments produced for this alert.",
"type": "array",
"items": {
"$ref": "#/$defs/DarkWebBrandAssessment"
}
},
"screenshot_ids": {
"description": "List of identifiers for screenshots associated with the mention.",
"type": "array",
"items": {
"type": "string"
}
},
"details": {
"$ref": "#/$defs/DarkWebBrandDetails"
}
},
"required": [
"matched_assets",
"assessments",
"screenshot_ids",
"details"
]
},
"DarkWebBrandTelegramDetails": {
"type": "object",
"description": "Details for a mention published on a Telegram channel.",
"properties": {
"type": {
"type": "string",
"enum": [
"telegram_mention"
]
},
"telegram_channel_title": {
"type": "string",
"description": "Title of the Telegram channel where the message was posted."
},
"source": {
"$ref": "#/$defs/DarkWebBrandEntity"
},
"message_url": {
"type": "string",
"description": "URL of the Telegram message, if available."
},
"post": {
"type": "string",
"description": "Content of the Telegram message."
},
"publish_date": {
"type": "string",
"description": "Datetime when the message was published."
}
},
"required": [
"type",
"telegram_channel_title",
"source",
"publish_date"
]
},
"DarkWebBrandTriagePanel": {
"type": "object",
"description": "The AI-triage verdict for the alert: the model's rationale and the assessment it produced. Absent when the alert has not been triaged by AI.\n",
"properties": {
"rationale": {
"type": "string",
"description": "The model's free-text explanation for the verdict."
},
"assessment": {
"$ref": "#/$defs/DarkWebBrandAssessment"
}
}
},
"DescriptionChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"old": {
"type": "string"
},
"new": {
"type": "string"
},
"type": {
"type": "string",
"enum": [
"description_change"
]
}
},
"required": [
"type"
]
},
"DnsRecord": {
"type": "object",
"properties": {
"type": {
"type": "string"
},
"entity": {
"type": "string"
}
}
},
"DnsRecordV2": {
"type": "object",
"properties": {
"type": {
"type": "string"
},
"entity": {
"$ref": "#/$defs/Entity"
}
}
},
"DocumentContent": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"tagged_content": {
"type": "string"
},
"content": {
"type": "string"
},
"url": {
"type": "string"
},
"owner": {
"type": "string"
},
"published": {
"type": "string",
"format": "date-time"
}
},
"required": [
"id",
"tagged_content",
"content",
"url",
"owner",
"published"
]
},
"DomainAbuseAttackerAddedChange": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"attacker": {
"type": "string"
},
"cause": {
"$ref": "#/$defs/DomainAbuseCause"
},
"manual_addition_user_id": {
"type": "string"
},
"manual_addition_user_name": {
"type": "string"
},
"typosquat_targets": {
"type": "array",
"items": {
"type": "string"
}
},
"similar_domains_keywords": {
"type": "array",
"items": {
"type": "string"
}
},
"type": {
"type": "string",
"enum": [
"attacker_added_change"
]
}
},
"required": [
"attacker",
"type"
]
},
"DomainAbuseCause": {
"type": "string",
"description": "Domain Abuse attacker detection cause.",
"enum": [
"manual",
"typosquat",
"similar_domains"
]
},
"DomainAbuseChangeContext": {
"type": "object",
"properties": {
"type": {
"type": "string",
"enum": [
"domain_abuse"
]
},
"changes": {
"type": "array",
"items": {
"anyOf": [
{
"$ref": "#/$defs/DomainAbuseAttackerAddedChange"
},
{
"$ref": "#/$defs/DomainAbuseDnsChange"
},
{
"$ref": "#/$defs/DomainAbuseWhoisChange"
},
{
"$ref": "#/$defs/DomainAbuseLogotypeChange"
},
{
"$ref": "#/$defs/DomainAbuseMaliciousDnsChange"
},
{
"$ref": "#/$defs/DomainAbuseMaliciousUrlChange"
},
{
"$ref": "#/$defs/DomainAbuseScreenshotMentionsChange"
},
{
"$ref": "#/$defs/DomainAbusePhishingMaliciousBehaviorChange"
},
{
"$ref": "#/$defs/AssigneeChange"
},
{
"$ref": "#/$defs/StatusChange"
},
{
"$ref": "#/$defs/PriorityChange"
},
{
"$ref": "#/$defs/ReopenStrategyChange"
},
{
"$ref": "#/$defs/TitleChange"
},
{
"$ref": "#/$defs/EntitiesChange"
},
{
"$ref": "#/$defs/RelatedEntitiesChange"
},
{
"$ref": "#/$defs/DescriptionChange"
},
{
"$ref": "#/$defs/ExternalIdChange"
}
]
}
}
},
"required": [
"type",
"changes"
]
},
"DomainAbuseDnsChange": {
"type": "object",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/DnsRecord"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/DnsRecord"
}
},
"type": {
"type": "string",
"enum": [
"dns_change"
]
}
},
"required": [
"type",
"domain",
"removed",
"added"
]
},
"DomainAbuseDnsChangeV2": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/DnsRecordV2"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/DnsRecordV2"
}
},
"type": {
"type": "string",
"enum": [
"dns_change"
]
}
},
"required": [
"type",
"domain",
"removed",
"added"
]
},
"DomainAbuseLogotypeChange": {
"type": "object",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/LogotypeInScreenshot"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/LogotypeInScreenshot"
}
},
"type": {
"type": "string",
"enum": [
"logotype_in_screenshot_change"
]
}
},
"required": [
"type",
"domain",
"removed",
"added"
]
},
"DomainAbuseLogotypeChangeV2": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/LogotypeInScreenshotV2"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/LogotypeInScreenshotV2"
}
},
"type": {
"type": "string",
"enum": [
"logotype_in_screenshot_change"
]
}
},
"required": [
"type",
"domain",
"removed",
"added"
]
},
"DomainAbuseMaliciousDnsChange": {
"type": "object",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousDnsRecord"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousDnsRecord"
}
},
"type": {
"type": "string",
"enum": [
"malicious_dns_change"
]
}
},
"required": [
"domain",
"type",
"removed",
"added"
]
},
"DomainAbuseMaliciousDnsChangeV2": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousDnsRecord"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousDnsRecord"
}
},
"type": {
"type": "string",
"enum": [
"malicious_dns_change"
]
# --- truncated at 32 KB (99 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-dark-web-brand-response-schema.json
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/recorded-future-dark-web-brand-response"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.