Recorded Future · Schema
DomainAbuseResponse
CybersecurityThreat IntelligenceIntelligence CloudBrand IntelligenceIdentity IntelligenceVulnerability IntelligenceAI Analyst
Properties
| Name | Type | Description |
|---|---|---|
| playbook_alert_id | string | |
| panel_status | object | |
| panel_action | object | |
| panel_evidence_summary | object | |
| panel_evidence_dns | object | |
| panel_evidence_whois | object | |
| panel_log | object | |
| panel_log_v2 | object |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/recorded-future/main/json-schema/recorded-future-domain-abuse-response-schema.json",
"title": "DomainAbuseResponse",
"x-generated": "2026-10-20",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/recorded-future-playbook-alerts-api-openapi.yml#/components/schemas/DomainAbuseResponse",
"type": "object",
"required": [
"playbook_alert_id"
],
"properties": {
"playbook_alert_id": {
"type": "string"
},
"panel_status": {
"$ref": "#/$defs/DomainAbuseStatusPanel"
},
"panel_action": {
"$ref": "#/$defs/PlaybookAlertActionPanel"
},
"panel_evidence_summary": {
"$ref": "#/$defs/DomainAbuseEvidenceSummaryPanel"
},
"panel_evidence_dns": {
"$ref": "#/$defs/DomainAbuseEvidenceDnsPanel"
},
"panel_evidence_whois": {
"$ref": "#/$defs/DomainAbuseEvidenceWhoisPanel"
},
"panel_log": {
"$ref": "#/$defs/PlaybookAlertLogPanel"
},
"panel_log_v2": {
"$ref": "#/$defs/PlaybookAlertLogPanelV2"
}
},
"$defs": {
"ActionChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"removed": {
"type": "array",
"items": {
"type": "string"
}
},
"added": {
"type": "array",
"items": {
"type": "string"
}
},
"type": {
"type": "string",
"enum": [
"action_change"
]
}
},
"required": [
"type",
"removed",
"added"
]
},
"AssessmentIdsChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"removed": {
"type": "array",
"items": {
"type": "string"
}
},
"added": {
"type": "array",
"items": {
"type": "string"
}
},
"type": {
"type": "string",
"enum": [
"assessment_ids_change"
]
}
},
"required": [
"type"
]
},
"AssessmentSource": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"id"
]
},
"AssessmentWithSource": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"level": {
"type": "number"
},
"source": {
"$ref": "#/$defs/AssessmentSource"
},
"title": {
"type": "string"
}
},
"required": [
"id",
"level",
"source"
]
},
"Assignee": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"id"
]
},
"AssigneeChange": {
"type": "object",
"properties": {
"old": {
"type": "string"
},
"new": {
"type": "string"
},
"type": {
"type": "string",
"enum": [
"assignee_change"
]
}
},
"required": [
"type"
]
},
"AssigneeChangeV2": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"old": {
"$ref": "#/$defs/Assignee"
},
"new": {
"$ref": "#/$defs/Assignee"
},
"type": {
"type": "string",
"enum": [
"assignee_change"
]
}
},
"required": [
"type"
]
},
"ClusterChangeAdded": {
"type": "object",
"description": "Geopolitics Facility cluster change describing a new cluster of related events that became associated with the alert.\n",
"properties": {
"cluster_id": {
"type": "string"
},
"main_event": {
"type": "object",
"properties": {
"event_id": {
"type": "string"
},
"assessments": {
"type": "array",
"items": {
"$ref": "#/$defs/FacilityAssessment"
}
},
"type": {
"type": "string",
"enum": [
"event_change_added"
]
}
},
"required": [
"event_id",
"type"
]
},
"other_event_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"type": {
"type": "string",
"enum": [
"cluster_change_added"
]
}
},
"required": [
"type"
]
},
"CodeRepoLeakageAssessment": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"level": {
"type": "number"
},
"title": {
"type": "string"
},
"text_indicator": {
"type": "string"
},
"entity": {
"type": "string"
}
},
"required": [
"id",
"level"
]
},
"CodeRepoLeakageAssessmentV2": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"level": {
"type": "number"
},
"title": {
"type": "string"
},
"text_indicator": {
"type": "string"
},
"entity": {
"$ref": "#/$defs/Entity"
}
},
"required": [
"id",
"level"
]
},
"CodeRepoLeakageChangeContext": {
"type": "object",
"properties": {
"type": {
"type": "string",
"enum": [
"code_repo_leakage"
]
},
"changes": {
"type": "array",
"items": {
"anyOf": [
{
"$ref": "#/$defs/CodeRepoLeakageEvidenceChange"
},
{
"$ref": "#/$defs/AssessmentIdsChange"
},
{
"$ref": "#/$defs/AssigneeChange"
},
{
"$ref": "#/$defs/StatusChange"
},
{
"$ref": "#/$defs/PriorityChange"
},
{
"$ref": "#/$defs/ReopenStrategyChange"
},
{
"$ref": "#/$defs/TitleChange"
},
{
"$ref": "#/$defs/EntitiesChange"
},
{
"$ref": "#/$defs/RelatedEntitiesChange"
},
{
"$ref": "#/$defs/DescriptionChange"
},
{
"$ref": "#/$defs/ExternalIdChange"
}
]
}
}
},
"required": [
"type",
"changes"
]
},
"CodeRepoLeakageEvidence": {
"type": "object",
"properties": {
"assessments": {
"type": "array",
"items": {
"$ref": "#/$defs/CodeRepoLeakageAssessment"
}
},
"document_content": {
"$ref": "#/$defs/DocumentContent"
},
"ontology": {
"type": "array",
"items": {
"$ref": "#/$defs/EntityPathMatch"
}
},
"target_entities": {
"type": "array",
"items": {
"type": "string"
}
},
"watch_lists": {
"type": "array",
"items": {
"type": "string"
}
}
},
"required": [
"assessments",
"document_content",
"ontology",
"target_entities",
"watch_lists"
]
},
"CodeRepoLeakageEvidenceChange": {
"type": "object",
"properties": {
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/CodeRepoLeakageEvidence"
}
},
"type": {
"type": "string",
"enum": [
"evidence_changes"
]
}
},
"required": [
"added",
"type"
]
},
"CodeRepoLeakageEvidenceChangeV2": {
"type": "object",
"description": "This change only applies to Data Leakage on Code Repository alerts.",
"properties": {
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/CodeRepoLeakageEvidenceV2"
}
},
"type": {
"type": "string",
"enum": [
"evidence_change"
]
}
},
"required": [
"added",
"type"
]
},
"CodeRepoLeakageEvidenceV2": {
"type": "object",
"properties": {
"assessments": {
"type": "array",
"items": {
"$ref": "#/$defs/CodeRepoLeakageAssessmentV2"
}
},
"document": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"content": {
"type": "string"
},
"owner_id": {
"type": "string"
},
"owner_name": {
"type": "string"
},
"published": {
"type": "string",
"format": "date-time"
}
},
"required": [
"id",
"content",
"owner_id",
"published"
]
},
"target_entities": {
"type": "array",
"items": {
"$ref": "#/$defs/Entity"
}
},
"watch_lists": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"id"
]
}
}
},
"required": [
"assessments",
"document",
"target_entities",
"watch_lists"
]
},
"CommentChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"comment": {
"type": "string"
},
"type": {
"type": "string",
"enum": [
"comment_change"
]
}
},
"required": [
"type",
"comment"
]
},
"CustomOnwardActionsAddedChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"added_actions_taken": {
"$ref": "#/$defs/PlaybookAlertOnwardActionList"
},
"type": {
"type": "string",
"enum": [
"onward_actions_added_change"
]
}
}
},
"CustomOnwardActionsRemovedChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"removed_actions_taken": {
"$ref": "#/$defs/PlaybookAlertOnwardActionList"
},
"type": {
"type": "string",
"enum": [
"onward_actions_removed_change"
]
}
}
},
"CustomStatusChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"old": {
"type": "string"
},
"new": {
"type": "string"
},
"type": {
"type": "string",
"enum": [
"status_change"
]
},
"actions_taken": {
"$ref": "#/$defs/PlaybookAlertOnwardActionList"
}
},
"required": [
"type",
"old",
"new",
"actions_taken"
]
},
"DescriptionChange": {
"type": "object",
"description": "This change applies to any alert type.",
"properties": {
"old": {
"type": "string"
},
"new": {
"type": "string"
},
"type": {
"type": "string",
"enum": [
"description_change"
]
}
},
"required": [
"type"
]
},
"DnsRecord": {
"type": "object",
"properties": {
"type": {
"type": "string"
},
"entity": {
"type": "string"
}
}
},
"DnsRecordV2": {
"type": "object",
"properties": {
"type": {
"type": "string"
},
"entity": {
"$ref": "#/$defs/Entity"
}
}
},
"DocumentContent": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"tagged_content": {
"type": "string"
},
"content": {
"type": "string"
},
"url": {
"type": "string"
},
"owner": {
"type": "string"
},
"published": {
"type": "string",
"format": "date-time"
}
},
"required": [
"id",
"tagged_content",
"content",
"url",
"owner",
"published"
]
},
"DomainAbuseAttackerAddedChange": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"attacker": {
"type": "string"
},
"cause": {
"$ref": "#/$defs/DomainAbuseCause"
},
"manual_addition_user_id": {
"type": "string"
},
"manual_addition_user_name": {
"type": "string"
},
"typosquat_targets": {
"type": "array",
"items": {
"type": "string"
}
},
"similar_domains_keywords": {
"type": "array",
"items": {
"type": "string"
}
},
"type": {
"type": "string",
"enum": [
"attacker_added_change"
]
}
},
"required": [
"attacker",
"type"
]
},
"DomainAbuseCause": {
"type": "string",
"description": "Domain Abuse attacker detection cause.",
"enum": [
"manual",
"typosquat",
"similar_domains"
]
},
"DomainAbuseChangeContext": {
"type": "object",
"properties": {
"type": {
"type": "string",
"enum": [
"domain_abuse"
]
},
"changes": {
"type": "array",
"items": {
"anyOf": [
{
"$ref": "#/$defs/DomainAbuseAttackerAddedChange"
},
{
"$ref": "#/$defs/DomainAbuseDnsChange"
},
{
"$ref": "#/$defs/DomainAbuseWhoisChange"
},
{
"$ref": "#/$defs/DomainAbuseLogotypeChange"
},
{
"$ref": "#/$defs/DomainAbuseMaliciousDnsChange"
},
{
"$ref": "#/$defs/DomainAbuseMaliciousUrlChange"
},
{
"$ref": "#/$defs/DomainAbuseScreenshotMentionsChange"
},
{
"$ref": "#/$defs/DomainAbusePhishingMaliciousBehaviorChange"
},
{
"$ref": "#/$defs/AssigneeChange"
},
{
"$ref": "#/$defs/StatusChange"
},
{
"$ref": "#/$defs/PriorityChange"
},
{
"$ref": "#/$defs/ReopenStrategyChange"
},
{
"$ref": "#/$defs/TitleChange"
},
{
"$ref": "#/$defs/EntitiesChange"
},
{
"$ref": "#/$defs/RelatedEntitiesChange"
},
{
"$ref": "#/$defs/DescriptionChange"
},
{
"$ref": "#/$defs/ExternalIdChange"
}
]
}
}
},
"required": [
"type",
"changes"
]
},
"DomainAbuseDnsChange": {
"type": "object",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/DnsRecord"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/DnsRecord"
}
},
"type": {
"type": "string",
"enum": [
"dns_change"
]
}
},
"required": [
"type",
"domain",
"removed",
"added"
]
},
"DomainAbuseDnsChangeV2": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/DnsRecordV2"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/DnsRecordV2"
}
},
"type": {
"type": "string",
"enum": [
"dns_change"
]
}
},
"required": [
"type",
"domain",
"removed",
"added"
]
},
"DomainAbuseEvidenceDnsPanel": {
"type": "object",
"description": "Detailed DNS data for the domain.\n",
"properties": {
"ip_list": {
"$ref": "#/$defs/DomainAbuseResolvedRecordList"
},
"mx_list": {
"$ref": "#/$defs/DomainAbuseResolvedRecordList"
},
"ns_list": {
"$ref": "#/$defs/DomainAbuseResolvedRecordList"
}
},
"required": [
"ip_list",
"mx_list",
"ns_list"
]
},
"DomainAbuseEvidenceSummaryPanel": {
"type": "object",
"description": "Summarized data describing the evidence behind the alert.\n",
"properties": {
"explanation": {
"type": "string",
"description": "A brief explanation of why this assessment was made."
},
"cause": {
"type": "string",
"description": "The cause that triggered the alert creation."
},
"resolved_record_list": {
"$ref": "#/$defs/DomainAbuseResolvedRecordList"
},
"screenshots": {
"$ref": "#/$defs/PlaybookAlertImageList"
},
"reregistration": {
"$ref": "#/$defs/DomainAbuseReregistration"
},
"screenshot_mentions": {
"$ref": "#/$defs/DomainAbuseScreenshotMentions"
},
"keywords_in_domain_name": {
"type": "object",
"description": "Keywords in domain name that may indicate malicious intent",
"properties": {
"security_keywords_in_domain_name": {
"$ref": "#/$defs/DomainAbuseKeywordInDomainName"
},
"payment_keywords_in_domain_name": {
"$ref": "#/$defs/DomainAbuseKeywordInDomainName"
}
}
},
"phishing_malicious_behavior": {
"$ref": "#/$defs/DomainAbusePhishingMaliciousBehavior"
}
},
"required": [
"resolved_record_list",
"screenshots"
]
},
"DomainAbuseEvidenceWhoisPanel": {
"type": "object",
"description": "Detailed WHOIS data for the domain.\n",
"properties": {
"body": {
"type": "array",
"items": {
"$ref": "#/$defs/WhoIsAttributeItem"
}
}
}
},
"DomainAbuseKeywordInDomainName": {
"type": "array",
"description": "The attacking domain name contains a specific word that might be troublesome",
"items": {
"type": "object",
"properties": {
"word": {
"type": "string"
},
"domain": {
"type": "string"
}
}
}
},
"DomainAbuseLogotypeChange": {
"type": "object",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/LogotypeInScreenshot"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/LogotypeInScreenshot"
}
},
"type": {
"type": "string",
"enum": [
"logotype_in_screenshot_change"
]
}
},
"required": [
"type",
"domain",
"removed",
"added"
]
},
"DomainAbuseLogotypeChangeV2": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/LogotypeInScreenshotV2"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/LogotypeInScreenshotV2"
}
},
"type": {
"type": "string",
"enum": [
"logotype_in_screenshot_change"
]
}
},
"required": [
"type",
"domain",
"removed",
"added"
]
},
"DomainAbuseMaliciousDnsChange": {
"type": "object",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousDnsRecord"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousDnsRecord"
}
},
"type": {
"type": "string",
"enum": [
"malicious_dns_change"
]
}
},
"required": [
"domain",
"type",
"removed",
"added"
]
},
"DomainAbuseMaliciousDnsChangeV2": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousDnsRecord"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousDnsRecord"
}
},
"type": {
"type": "string",
"enum": [
"malicious_dns_change"
]
}
},
"required": [
"domain",
"type",
"removed",
"added"
]
},
"DomainAbuseMaliciousUrlChange": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousUrlRecord"
}
},
"added": {
"type": "array",
"items": {
"$ref": "#/$defs/MaliciousUrlRecord"
}
},
"type": {
"type": "string",
"enum": [
"malicious_url_change"
]
}
},
"required": [
"domain",
"removed",
"added",
"type"
]
},
"DomainAbusePhishingMaliciousBehavior": {
"type": "object",
"properties": {
"threatTypes": {
"type": "array",
"items": {
"$ref": "#/$defs/DomainAbusePhishingMaliciousBehaviorThreatType"
}
}
}
},
"DomainAbusePhishingMaliciousBehaviorChange": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"added": {
"$ref": "#/$defs/DomainAbusePhishingMaliciousBehaviorThreats"
},
"removed": {
"$ref": "#/$defs/DomainAbusePhishingMaliciousBehaviorThreats"
},
"type": {
"type": "string",
"enum": [
"phishing_malicious_behavior_change"
]
}
},
"required": [
"domain",
"added",
"type"
]
},
"DomainAbusePhishingMaliciousBehaviorThreatType": {
"type": "string",
"description": "A kind of threat present in the domain.",
"enum": [
"malware",
"unwanted_software",
"social_engineering",
"social_engineering_extended_coverage"
]
},
"DomainAbusePhishingMaliciousBehaviorThreats": {
"type": "object",
"properties": {
"threat_types": {
"type": "array",
"items": {
"$ref": "#/$defs/DomainAbusePhishingMaliciousBehaviorThreatType"
}
}
}
},
"DomainAbuseReregistration": {
"type": "object",
"properties": {
"registrar": {
"type": "string"
},
"registrar_name": {
"type": "string"
},
"expiration": {
"type": "string",
"format": "date-time"
}
}
},
"DomainAbuseReregistrationChange": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"removed": {
"$ref": "#/$defs/ReregistrationRecord"
},
"added": {
"$ref": "#/$defs/ReregistrationRecord"
},
"type": {
"type": "string",
"enum": [
"reregistration_change"
]
}
},
"required": [
"domain",
"type"
]
},
"DomainAbuseResolvedRecordList": {
"type": "array",
"items": {
"type": "object",
"properties": {
"entity": {
"type": "string",
"description": "Record"
},
"risk_score": {
"$ref": "#/$defs/PlaybookAlertEntityScore"
},
"criticality": {
"$ref": "#/$defs/PlaybookAlertEntityCriticality"
},
"record_type": {
"type": "string",
"description": "The Record Type, ex A, CNAME, MX or similar."
},
"context_list": {
"$ref": "#/$defs/PlaybookAlertContextList"
}
}
}
},
"DomainAbuseScreenshotMentions": {
"type": "array",
"items": {
"type": "object",
"properties": {
"url": {
"type": "string"
},
"screenshot": {
"type": "string"
},
"document": {
"type": "string"
},
"analyzed": {
"type": "string",
"format": "date-time"
},
"mentioned_entities": {
"type": "array",
"items": {
"type": "object",
"properties": {
"entity": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"name": {
"type": "string"
},
"type": {
"type": "string"
}
},
"required": [
"id"
]
},
"reference": {
"type": "string"
},
"fragment": {
"type": "string"
}
},
"required": [
"entity",
"reference",
"fragment"
]
}
},
"mentioned_custom_keywords": {
"type": "array",
"items": {
"type": "object",
"properties": {
"keyword": {
"type": "string"
},
"reference": {
"type": "string"
},
"fragment": {
"type": "string"
}
},
"required": [
"keyword",
"reference",
"fragment"
]
}
}
}
}
},
"DomainAbuseScreenshotMentionsChange": {
"type": "object",
"description": "This change only applies to Domain Abuse alerts.",
"properties": {
"domain": {
"type": "string"
},
"added": {
"type": "array",
"items": {
"type": "object",
"properties": {
"url": {
"type": "string"
},
"screenshot_id": {
"type": "string"
},
"document": {
"type": "string"
},
"analyzed": {
"type": "string",
"format": "date-time"
},
"mentioned_entities": {
"type": "array",
"items": {
"$ref": "#/$defs/MentionedEntity"
}
},
"mentioned_texts": {
"type": "array",
"items": {
"$ref": "#/$defs/MentionedText"
}
}
},
"required": [
"url",
"screenshot_id",
"document",
"analyzed",
"mentioned_entities"
]
}
},
"type": {
"type": "string",
"enum": [
"screenshot_mentions_change"
]
}
},
"required": [
"domain",
"added",
"type"
]
},
"DomainAbuseStatusPanel": {
"type": "object",
"description": "Data structure containing general information about the alert and it's associated domain (the entity).\n",
"properties": {
"status": {
"$ref": "#/$defs/PlaybookAlertStatus"
},
"priority": {
"$ref": "#/$defs/PlaybookAlertPriority"
},
"reopen": {
"$ref": "#/$defs/PlaybookAlertReopenStrategy"
},
"assignee_name": {
"$ref": "#/$defs/PlaybookAlertAssigneeName"
},
"assignee_id": {
"$ref": "#/$defs/PlaybookAlertAssigneeId"
},
"created": {
"$ref": "#/$defs/PlaybookAlertCreated"
},
"updated": {
"$ref": "#/$defs/PlaybookAlertUpdated"
},
"case_rule_id": {
"$ref": "#/$defs/PlaybookAlertCaseRuleId"
},
"case_rule_label": {
"$ref": "#/$defs/PlaybookAlertCaseRuleLabel"
},
"alert_rule": {
"$ref": "#/$defs/PlaybookAlertAlertRule"
},
"creator_name": {
"$ref": "#/$defs/PlaybookAlertCreatorName"
},
"creator_id": {
"$ref": "#/$defs/PlaybookAlertCreatorId"
},
"owner_id": {
"$ref": "#/$defs/PlaybookAlertOwnerId"
},
"owner_name": {
"$ref": "#/$defs/PlaybookAlertOwnerName"
},
"organisation_id": {
"$ref": "#/$defs/PlaybookAlertOrganisationId"
},
"organisation_name": {
"$ref": "#/$defs/PlaybookAlertOrganisationName"
},
"owner_organ
# --- truncated at 32 KB (104 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/recorded-future/refs/heads/main/json-schema/recorded-future-domain-abuse-response-schema.json
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/recorded-future-domain-abuse-response"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.