Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here

Body

application/json
chatId
string<uuid>
required

Chat ID for this draft session

proposalId
string<uuid>

ID of the proposal to create a draft from (omit for blank drafts)

platform
enum<string>

Platform for blank drafts (required when proposalId is omitted)

Available options:
panther,
sublime,
scanner,
datadog,
splunk,
sentinelone,
elastic,
sumologic,
runreveal

Response

Successful response

chatId
string<uuid>
required
organizationId
string<uuid>
required
platform
string
required
name
string
required
description
string
required
query
string
required
mitreTechniqueIds
string[]
required
mitreTechniqueNames
string[]
required
dataSourcesRequired
string[]
required
createdAt
string
required
updatedAt
string
required
proposalId
string<uuid>
reasoning
string
detectionIntent
object | null
platformConfig
object
prUrl
string<uri>
deployedAt
string
previousPrUrl
string<uri>
sourceStatus
enum<string>
Available options:
proposed,
validated,
validation_failed,
published,
pr_created,
merged,
rejected,
dismissed
sourcePrUrl
string<uri>
sourcePublishedAt
string
isUnmodifiedFromSource
boolean