Available Endpoints

The following endpoints are available in the ThreatConnect v3 API:

Case Management Endpoints

  • /v3/artifactTypes

  • /v3/artifacts

  • /v3/caseAttributes

  • /v3/cases

  • /v3/notes

  • /v3/tags

  • /v3/tasks

  • /v3/workflowEvents

  • /v3/workflowTemplates

Threat Intelligence Endpoints

  • /v3/groupAttributes

  • /v3/groups

  • /v3/indicatorAttributes

  • /v3/indicators

  • /v3/indicators/enrich

  • /v3/intelRequirements

  • /v3/intelRequirements/categories

  • /v3/intelRequirements/results

  • /v3/intelRequirements/subtypes

  • /v3/securityLabels

  • /v3/tags

  • /v3/victimAssets

  • /v3/victimAttributes

  • /v3/victims

Miscellaneous Endpoints

  • /v3/attributeTypes

  • /v3/job/executions

  • /v3/jobs

  • /v3/openApi

  • /v3/playbook/executions

  • /v3/playbooks

  • /v3/security/ownerRoles

  • /v3/security/owners

  • /v3/security/systemRoles

  • /v3/security/userGroups

  • /v3/security/users

TC Exchange Administration Endpoints

  • /v3/apps/exchange/install

  • /v3/token/api

  • /v3/token/svc