Recorded Future · Schema

TagOperationRequest

CybersecurityThreat IntelligenceIntelligence CloudBrand IntelligenceIdentity IntelligenceVulnerability IntelligenceAI Analyst

Properties

Name Type Description
entity object
tags array Complete set of tag names to apply; replaces all existing tags
View JSON Schema on GitHub

JSON Schema

recorded-future-tag-operation-request-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/recorded-future/main/json-schema/recorded-future-tag-operation-request-schema.json",
  "title": "TagOperationRequest",
  "x-generated": "2026-10-20",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/recorded-future-list-api-openapi.yml#/components/schemas/TagOperationRequest",
  "type": "object",
  "properties": {
    "entity": {
      "$ref": "#/$defs/Entity"
    },
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Complete set of tag names to apply; replaces all existing tags"
    }
  },
  "required": [
    "entity",
    "tags"
  ],
  "$defs": {
    "Entity": {
      "oneOf": [
        {
          "$ref": "#/$defs/EntityById"
        },
        {
          "$ref": "#/$defs/EntityByTypeAndName"
        }
      ]
    },
    "EntityById": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string"
        }
      }
    },
    "EntityByTypeAndName": {
      "type": "object",
      "properties": {
        "type": {
          "type": "string",
          "enum": [
            "IpAddress",
            "InternetDomainName",
            "Hash",
            "CyberVulnerability",
            "ASNumber",
            "Company",
            "Organization",
            "Product",
            "Technology",
            "CyberExploitTargetCategory",
            "ProductIdentifier",
            "Industry",
            "City",
            "Country",
            "Continent",
            "Region",
            "ProvinceOrState",
            "Operation",
            "Person",
            "CyberThreatActorCategory",
            "Username",
            "Malware",
            "MalwareCategory",
            "AttackVector",
            "MitreAttackIdentifier",
            "MitreAttackICSIdentifier",
            "Facility",
            "Airport",
            "Embassy",
            "MilitaryBase",
            "Port",
            "MICR"
          ],
          "description": "Different lists have different limitations in terms of entity types, some lists have no limitations in terms of entity types, consult the specific list you are trying to update."
        },
        "name": {
          "type": "string"
        }
      }
    }
  }
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/recorded-future-tag-operation-request"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.