| Base URL | /api/v1 |
| Auth header | Authorization: Bearer <key> |
| OpenAPI | /api/v1/openapi.json |
| MCP | POST /mcp |
| MCP tools | search_entities, get_actor, actor_techniques, get_technique, lookup_ioc, changed_since |
| Issue read key | POST /api/v1/keys |
| llms.txt | GET /llms.txt |
| RateLimit | 429 + meta.retry_after (no RateLimit-* headers yet) |
| Method | Path | Content |
|---|---|---|
| GET | /api/v1/groups | groups |
| GET | /api/v1/iocs | IOCs |
| GET | /api/v1/changes | change stream |
| GET | /api/v1/search?q= | search |
| GET | /api/v1/meta | version and cursor |