emerging · 3.4

XDR

Score 20.9 / 100 17 providers 57 APIs Search apis.io →

Providers using this tag (17)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 3 Solid coverage with minor gaps
Palo Alto NetworksCloud SecurityCybersecurityFirewallNetwork Security741 APIs63.7Cisco XDRSecurityThreat DetectionIncident Response50 APIs60.7MalwarebytesCompanySecurityCybersecurityEndpoint Security52 APIs55.3
Developing 3 Usable, with meaningful gaps to close
TrellixCloud SecurityCybersecurityEndpoint SecurityThreat Detection27 APIs43.5Rapid7SecurityVulnerability ManagementSIEM50 APIs42.7CybereasonCybersecurityEDRNGAV10 APIs40.4
Thin 4 Limited public surface area
Stellar CyberCybersecuritySecuritySIEM11 APIs39.1CynetCompanyCybersecuritySecurity2 APIs37.8Microsoft Defender9 APIs37.8SecureworksCybersecurityThreat DetectionSecurity Operations3 APIs36.5
Emerging 6 Early or largely undocumented
SentinelOneSecurityEDREndpoint Protection1 API26.1UptycsSecurityCybersecurityCNAPP1 API24.8Vectra AICybersecurityNDRAI Detection1 API21.2Dropzone AISecuritySOCAI AgentAutonomous1 API18.5Attivo Networks (SentinelOne)CompanySecurityCybersecurityIdentity17.0AnomaliCompanyEnterpriseCybersecurityThreat Intelligence1 API16.2
Minimal 1 Almost no public developer surface
ConflueraCompanyCybersecuritySecurityThreat Detection5.0

APIs with this tag (57)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Strong 51 Solid coverage with minor gaps
Cisco XDR Actor APIActor operations60.7Cisco XDR Asset APIAsset operations60.7Cisco XDR Asset Mapping APIAsset Mapping operations60.7Cisco XDR Asset Properties APIAsset Properties operations60.7Cisco XDR Attack Pattern APIAttack Pattern operations60.7Cisco XDR Bulk APIThe Bulk API from Cisco XDR — 1 operation(s) for bulk.60.7Cisco XDR Bundle APIThe Bundle API from Cisco XDR — 2 operation(s) for bundle.60.7Cisco XDR Campaign APICampaign operations60.7Cisco XDR Casebook APICasebook operations60.7Cisco XDR COA APICOA operations60.7Cisco XDR Deliberate APIThis set of routes allow to quickly get answers from your integrations You might use them at the start of a...60.7Cisco XDR Event APIEvents operations60.7Cisco XDR Feed APIFeed operations60.7Cisco XDR Feedback APIFeedback Routes60.7Cisco XDR Graph QL APIThe GraphQL API from Cisco XDR — 1 operation(s) for graphql.60.7Cisco XDR Health APIThis set of routes allow to check the health of your integrations setup Verify if your modules are setup co...60.7Cisco XDR Incident APIIncident operations60.7Cisco XDR Indicator APIIndicator operations60.7Cisco XDR Inspect APIInspect related routes60.7Cisco XDR Investigation APIThe Investigation API from Cisco XDR — 8 operation(s) for investigation.60.7Cisco XDR INVITE APIThe INVITE API from Cisco XDR — 2 operation(s) for invite.60.7Cisco XDR Iroh APIThe Iroh API from Cisco XDR — 3 operation(s) for iroh.60.7Cisco XDR Judgement APIJudgement operations60.7Cisco XDR LOGIN APIThe LOGIN API from Cisco XDR — 4 operation(s) for login.60.7Cisco XDR Malware APIMalware operations60.7Cisco XDR MCP ServerModel Context Protocol server published by CiscoDevNet exposing 27 Cisco XDR tools across Inspect, Investig...60.7Cisco XDR Metrics APIThe Metrics API from Cisco XDR — 1 operation(s) for metrics.60.7Cisco XDR Module Instance APIModuleInstance Routes60.7Cisco XDR Module Type APIModuleType Routes60.7Cisco XDR Module Type Patch APIModuleTypePatch Routes60.7Cisco XDR Note APIThe Note API from Cisco XDR — 8 operation(s) for note.60.7Cisco XDR Observe APIThis set of routes allow to get in depth investigation data about a threat You might use them at the start ...60.7Cisco XDR One Click APIOne-click Routes60.7Cisco XDR Private Intel APIAccess private-intel60.7Cisco XDR Properties APIThe Properties API from Cisco XDR — 1 operation(s) for properties.60.7Cisco XDR Query APIThis set of routes allow to query for records related to observable events.Results are returned in OCSF for...60.7Cisco XDR Refer APIThis set of routes allow to get relevant Reference links and quickly pivot pursuing your investigation on a...60.7Cisco XDR Relationship APIRelationship operations60.7Cisco XDR Reputation APIThe Reputation API from Cisco XDR — 1 operation(s) for reputation.60.7Cisco XDR Response APIIROH Response60.7Cisco XDR Session Cookie APICookie-based session validation60.7Cisco XDR Sighting APISighting operations60.7Cisco XDR Status APIThe Status API from Cisco XDR — 1 operation(s) for status.60.7Cisco XDR Target Record APITarget Record operations60.7Cisco XDR Tool APITool operations60.7Cisco XDR Verdict APIThe Verdict API from Cisco XDR — 1 operation(s) for verdict.60.7Cisco XDR Version APIThe Version API from Cisco XDR — 1 operation(s) for version.60.7Cisco XDR Vulnerability APIThe Vulnerability API from Cisco XDR — 9 operation(s) for vulnerability.60.7Cisco XDR Webhook APIWebhook Routes60.7Cisco XDR Webhook Result APIThe WebhookResult API from Cisco XDR — 2 operation(s) for webhookresult.60.7Malwarebytes XDR APIThe XDR API from Malwarebytes — 4 operation(s) for xdr.55.3
Developing 1 Usable, with meaningful gaps to close
Rapid7 InsightIDR APIREST API for the InsightIDR SIEM/XDR product covering investigations, alerts, log search, threats, and SOC ...42.7
Thin 3 Limited public surface area
Cynet 360 API (On-Prem V1)REST API for the on-premises Cynet 360 deployment (V1). Documents authentication (get token), Cynet APIs fo...37.8Cynet 360 API (SaaS V3)REST API for the Cynet 360 SaaS platform (V3). Provides programmatic access to alerts, hosts and host group...37.8Microsoft Defender XDR APIUnified extended detection and response API for automating workflows based on shared incident and advanced ...37.8
Emerging 2 Early or largely undocumented
SentinelOne Management APITenant-scoped REST API for managing agents, threats, alerts, sites, accounts, exclusions, policies, and rep...26.1Dropzone AI Platform IntegrationsDropzone AI's primary "API surface" is its catalog of 90+ outbound integrations to SIEM, EDR/XDR, identity,...18.5

Score breakdown

Frequency
49.8
log-scaled weighted occurrences
Breadth
0.5
spread across providers
Quality lift
41.8
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Related tags

SOAR 6 co-occurrences Endpoint Security 7 co-occurrences SIEM 5 co-occurrences Threat Detection 9 co-occurrences Threat Intelligence 8 co-occurrences Incident Response 5 co-occurrences Cloud Security 8 co-occurrences Alerts 6 co-occurrences

Where this tag comes from

Provider tag15
Api tag57
Openapi tag1
Openapi op tag4

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/xdr"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/xdr"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/xdr/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.