Skip to main content
GET
/
items
cURL
curl -X GET "https://app.cotool.ai/items" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"
{
  "items": [
    {
      "id": "<string>",
      "source": {
        "url": "<string>",
        "publisher": "<string>",
        "publishTime": "<string>",
        "language": "<string>",
        "name": "<string>",
        "license": "<string>"
      },
      "event": {
        "title": "<string>",
        "confidence": 0.5,
        "eventFirstSeen": "<string>",
        "eventLastSeen": "<string>"
      },
      "summary": "<string>",
      "tldr": "<string>",
      "attackPath": [
        "<string>"
      ],
      "classification": {
        "attack": [
          {
            "technique": "<string>",
            "confidence": 0.5,
            "subTechnique": "<string>",
            "techniqueName": "<string>",
            "evidenceRef": "<string>"
          }
        ],
        "killChain": [],
        "malware": [
          {
            "name": "<string>",
            "confidence": 0.5,
            "aliases": [
              "<string>"
            ]
          }
        ],
        "actor": [
          {
            "name": "<string>",
            "confidence": 0.5,
            "aliases": [
              "<string>"
            ]
          }
        ],
        "platforms": [],
        "mappings": [
          {
            "framework": "<string>",
            "id": "<string>",
            "confidence": 0.5
          }
        ]
      },
      "affectedProducts": [
        {
          "vendor": "<string>",
          "product": "<string>",
          "versions": [
            "<string>"
          ],
          "confidence": 0.5
        }
      ],
      "iocs": {
        "ipv4": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "ipv6": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "domains": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "urls": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "hashes": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "files": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "registryKeys": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "processes": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "certs": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "cloudIds": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ],
        "mobileIds": [
          {
            "type": "<string>",
            "value": "<string>",
            "confidence": 0.5,
            "normalizedValue": "<string>",
            "firstSeen": "<string>",
            "lastSeen": "<string>",
            "ttlDays": 123
          }
        ]
      },
      "provenance": {
        "supportingPassages": [
          {
            "text": "<string>",
            "sourceUrl": "<string>",
            "charSpan": {
              "start": 123,
              "end": 123
            }
          }
        ]
      },
      "version": 123,
      "externalId": "<string>",
      "abstract": "<string>",
      "lastUpdated": "<string>",
      "createdAt": "<string>",
      "addedToFeedAt": "<string>",
      "canonicalKey": "<string>",
      "duplicateOf": "<string>",
      "tenantOverrides": "<unknown>"
    }
  ],
  "total": 123,
  "page": 123,
  "perPage": 123,
  "hasNext": true,
  "validations": {},
  "outputs": {}
}

Documentation Index

Fetch the complete documentation index at: https://docs.cotool.ai/llms.txt

Use this file to discover all available pages before exploring further.

Authorizations

Authorization
string
header
required

API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here

Query Parameters

page
number
Required range: x >= 1
perPage
number
Required range: 1 <= x <= 100
severity
enum<string>
Available options:
none,
low,
medium,
high,
critical
platform
string
status
enum<string>
Available options:
active,
corrected,
retracted
source
string
relevancyMode
enum<string>
Available options:
relevant,
all

Response

200 - application/json

Successful response

items
object[]
required
total
number
required
page
number
required
perPage
number
required
hasNext
boolean
required
validations
object
outputs
object