For AI agents: visit https://threatconnect.readme.io/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI. Append .md to any documentation page URL to get its markdown version.
Jump to Content
Home
Guides
API Reference
Log In
API Reference
Log In
Home
Guides
API Reference
Security Labels Overview
ThreatConnect v3 API Overview
Introduction
Getting Started
Postman Configuration
Features
Create Activity Logs
Create and Manage Associations
Delete Case Objects in Bulk
Enable Pagination
Filter Results With TQL
HTTP Status Codes
Include Additional Fields in API Responses
Retrieve a List of Available Fields for an Endpoint
Retrieve OpenAPI Documentation
Return a Count of Items
Sort Results
Specify an Owner
Update an Object's Metadata
Available Endpoints
ThreatConnect API
Artifacts
Artifacts Overview
Retrieve entity info
optns
Retrieve fields
optns
Retrieve tql
optns
Create Artifact
post
Retrieve Artifacts
get
Retrieve Artifact by ID
get
Update Artifact
put
Delete Artifacts
del
Delete Artifact by ID
del
Artifact Types
Artifact Types Overview
Retrieve entity info
optns
Retrieve fields
optns
Retrieve tql
optns
Retrieve ArtifactTypes
get
Retrieve ArtifactType by ID
get
Attribute Types
Attribute Types Overview
Retrieve entity info
optns
Retrieve fields
optns
Retrieve tql
optns
Retrieve AttributeTypes
get
Retrieve AttributeType by ID
get
Case Attributes
Case Attributes Overview
Retrieve entity info
optns
Retrieve fields
optns
Retrieve tql
optns
Create CaseAttribute
post
Retrieve CaseAttributes
get
Retrieve CaseAttribute by ID
get
Update CaseAttribute by ID
put
Delete CaseAttribute by ID
del
Case Notes
Notes Overview
Retrieve entity info
optns
Retrieve fields
optns
Retrieve tql
optns
Create Note
post
Retrieve Notes
get
Retrieve Note by ID
get
Update Note by ID
put
Delete Notes
del
Delete Note by ID
del
Cases
Cases Overview
Retrieve entity info
optns
Retrieve fields
optns
Retrieve tql
optns
Create Case
post
Retrieve Cases
get
Retrieve Case by ID
get
Update Case
put
Delete Cases
