{"components":{"schemas":{"AcceptedResponse":{"description":"Returned when work was queued rather than performed.","properties":{"group_id":{"title":"Group Id","type":"string"},"id":{"title":"Id","type":"string"},"operation_id":{"title":"Operation Id","type":"string"},"status":{"title":"Status","type":"string"}},"required":["id","group_id","operation_id","status"],"title":"AcceptedResponse","type":"object"},"ActorDetailOut":{"description":"A derived actor with its scalar statistics.","properties":{"authoritative":{"title":"Authoritative","type":"boolean"},"brand_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Brand Summary","type":"array"},"built_at":{"title":"Built At","type":"string"},"codename":{"title":"Codename","type":"string"},"degraded":{"title":"Degraded","type":"boolean"},"domain_count":{"title":"Domain Count","type":"integer"},"first_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"First Seen At"},"identifier_count":{"title":"Identifier Count","type":"integer"},"identifier_kind_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Identifier Kind Summary","type":"array"},"identifier_kinds":{"items":{"type":"string"},"title":"Identifier Kinds","type":"array"},"insights":{"$ref":"#/components/schemas/ClusterInsights"},"last_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Seen At"},"max_score":{"title":"Max Score","type":"integer"},"member_count":{"title":"Member Count","type":"integer"},"policy_version":{"title":"Policy Version","type":"string"},"relation_count":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Relation Count"},"slug":{"title":"Slug","type":"string"},"state":{"title":"State","type":"string"},"truncated":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Truncated"},"verdict_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Verdict Summary","type":"array"}},"required":["slug","codename","state","member_count","domain_count","identifier_count","first_seen_at","last_seen_at","identifier_kinds","identifier_kind_summary","verdict_summary","brand_summary","policy_version","authoritative","degraded","truncated","relation_count","built_at","max_score","insights"],"title":"ActorDetailOut","type":"object"},"ActorOut":{"description":"A derived actor in a list.\n\nLinkage is technical identifier reuse. It is not attribution.","properties":{"authoritative":{"title":"Authoritative","type":"boolean"},"brand_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Brand Summary","type":"array"},"built_at":{"title":"Built At","type":"string"},"codename":{"title":"Codename","type":"string"},"degraded":{"title":"Degraded","type":"boolean"},"domain_count":{"title":"Domain Count","type":"integer"},"first_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"First Seen At"},"identifier_count":{"title":"Identifier Count","type":"integer"},"identifier_kind_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Identifier Kind Summary","type":"array"},"identifier_kinds":{"items":{"type":"string"},"title":"Identifier Kinds","type":"array"},"last_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Seen At"},"member_count":{"title":"Member Count","type":"integer"},"policy_version":{"title":"Policy Version","type":"string"},"relation_count":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Relation Count"},"slug":{"title":"Slug","type":"string"},"state":{"title":"State","type":"string"},"truncated":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Truncated"},"verdict_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Verdict Summary","type":"array"}},"required":["slug","codename","state","member_count","domain_count","identifier_count","first_seen_at","last_seen_at","identifier_kinds","identifier_kind_summary","verdict_summary","brand_summary","policy_version","authoritative","degraded","truncated","relation_count","built_at"],"title":"ActorOut","type":"object"},"AnalysisBrandOut":{"description":"One brand a case impersonated, as recorded by its current evaluation.\n\n``slug`` addresses the brand page. It is null when the name no longer\nresolves to a registry brand, which keeps a retired brand readable.","properties":{"bases":{"items":{"type":"string"},"title":"Bases","type":"array"},"display_name":{"title":"Display Name","type":"string"},"has_mark":{"default":false,"title":"Has Mark","type":"boolean"},"page_domain":{"title":"Page Domain","type":"string"},"slug":{"title":"Slug","type":"string"}},"required":["slug","display_name","page_domain"],"title":"AnalysisBrandOut","type":"object"},"AnalysisClustersOut":{"description":"The clusters that contain one analysis.","properties":{"actor_codename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Actor Codename"},"actor_linking_kinds":{"items":{"type":"string"},"title":"Actor Linking Kinds","type":"array"},"actor_slug":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Actor Slug"},"kit_codename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Kit Codename"},"kit_names":{"items":{"type":"string"},"title":"Kit Names","type":"array"},"kit_score":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Kit Score"},"kit_slug":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Kit Slug"}},"required":["kit_slug","kit_codename","kit_score","kit_names","actor_slug","actor_codename","actor_linking_kinds"],"title":"AnalysisClustersOut","type":"object"},"AnalysisComparisonOut":{"properties":{"analysis_evaluation":{"$ref":"#/components/schemas/ComparisonEvaluationSource"},"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"categories":{"items":{"$ref":"#/components/schemas/ComparisonCategory"},"title":"Categories","type":"array"},"group_id":{"format":"uuid","title":"Group Id","type":"string"},"other_analysis_id":{"format":"uuid","title":"Other Analysis Id","type":"string"},"other_evaluation":{"$ref":"#/components/schemas/ComparisonEvaluationSource"},"total":{"title":"Total","type":"integer"},"truncated":{"title":"Truncated","type":"boolean"}},"required":["analysis_id","other_analysis_id","group_id","analysis_evaluation","other_evaluation","categories","total","truncated"],"title":"AnalysisComparisonOut","type":"object"},"AnalysisDetail":{"description":"Detail view. Counts, not rows; the rows have their own endpoints.","properties":{"analysis_kind":{"$ref":"#/components/schemas/AnalysisKind"},"attempt_key":{"default":"","title":"Attempt Key","type":"string"},"attempt_number":{"title":"Attempt Number","type":"integer"},"behavior_event_count":{"default":0,"title":"Behavior Event Count","type":"integer"},"behavior_event_limit_reached":{"title":"Behavior Event Limit Reached","type":"boolean"},"brands":{"items":{"$ref":"#/components/schemas/AnalysisBrandOut"},"title":"Brands","type":"array"},"cookie_count":{"default":0,"title":"Cookie Count","type":"integer"},"cookie_coverage":{"additionalProperties":true,"title":"Cookie Coverage","type":"object"},"cookie_limit_reached":{"default":false,"title":"Cookie Limit Reached","type":"boolean"},"cookie_snapshots":{"items":{"additionalProperties":true,"type":"object"},"title":"Cookie Snapshots","type":"array"},"created_at":{"title":"Created At","type":"string"},"current_evaluation":{"anyOf":[{"$ref":"#/components/schemas/AnalysisEvaluationSummary"},{"type":"null"}]},"depth":{"title":"Depth","type":"integer"},"domain_registration":{"anyOf":[{"$ref":"#/components/schemas/DomainRegistrationOut"},{"type":"null"}]},"domain_registration_pending":{"default":false,"title":"Domain Registration Pending","type":"boolean"},"duration_ms":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Duration Ms"},"engine_version":{"title":"Engine Version","type":"string"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"evidence_completeness_reasons":{"items":{"type":"string"},"title":"Evidence Completeness Reasons","type":"array"},"execution_kind":{"$ref":"#/components/schemas/ExecutionKind"},"execution_settings":{"additionalProperties":true,"title":"Execution Settings","type":"object"},"execution_settings_schema_version":{"title":"Execution Settings Schema Version","type":"integer"},"execution_variant_key":{"title":"Execution Variant Key","type":"string"},"failed_rule_count":{"title":"Failed Rule Count","type":"integer"},"failed_rule_details":{"items":{"$ref":"#/components/schemas/RuleFailureOut"},"title":"Failed Rule Details","type":"array"},"favicon_count":{"default":0,"title":"Favicon Count","type":"integer"},"favicon_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Favicon Url"},"final_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Final Url"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"function_fingerprint_limit_reached":{"default":false,"title":"Function Fingerprint Limit Reached","type":"boolean"},"function_suppressed_count":{"default":0,"title":"Function Suppressed Count","type":"integer"},"function_visible_count":{"default":0,"title":"Function Visible Count","type":"integer"},"group_id":{"format":"uuid","title":"Group Id","type":"string"},"has_screenshot":{"default":false,"title":"Has Screenshot","type":"boolean"},"has_wacz":{"default":false,"title":"Has Wacz","type":"boolean"},"highest_signal_severity":{"anyOf":[{"$ref":"#/components/schemas/Severity"},{"type":"null"}]},"host_count":{"default":0,"title":"Host Count","type":"integer"},"id":{"format":"uuid","title":"Id","type":"string"},"identifier_count":{"default":0,"title":"Identifier Count","type":"integer"},"identifier_limit_reached":{"default":false,"title":"Identifier Limit Reached","type":"boolean"},"identifier_source_truncated":{"default":false,"title":"Identifier Source Truncated","type":"boolean"},"impersonated_brands":{"items":{"type":"string"},"title":"Impersonated Brands","type":"array"},"infrastructure_endpoint_count":{"default":0,"title":"Infrastructure Endpoint Count","type":"integer"},"input_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Input Filename"},"input_kind":{"$ref":"#/components/schemas/InputKind"},"input_media_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Input Media Type"},"interaction_coverage":{"anyOf":[{"$ref":"#/components/schemas/InteractionCoverage"},{"type":"null"}]},"is_baseline":{"default":false,"title":"Is Baseline","type":"boolean"},"is_representative":{"default":false,"title":"Is Representative","type":"boolean"},"latest_execution_outcome":{"anyOf":[{"$ref":"#/components/schemas/ExecutionOutcomeSummary"},{"type":"null"}]},"member_index":{"title":"Member Index","type":"integer"},"member_role":{"$ref":"#/components/schemas/AnalysisMemberRole"},"navigations":{"items":{"$ref":"#/components/schemas/NavigationOut"},"title":"Navigations","type":"array"},"page_journey":{"anyOf":[{"$ref":"#/components/schemas/PageJourney"},{"type":"null"}]},"page_snapshot_count":{"default":0,"title":"Page Snapshot Count","type":"integer"},"parent_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Parent Analysis Id"},"payload_count":{"default":0,"title":"Payload Count","type":"integer"},"payload_limit_reached":{"default":false,"title":"Payload Limit Reached","type":"boolean"},"prior_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Prior Analysis Id"},"qr_code_count":{"default":0,"title":"Qr Code Count","type":"integer"},"replay_entry_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Replay Entry Url"},"replay_miss_count":{"title":"Replay Miss Count","type":"integer"},"request_count":{"default":0,"title":"Request Count","type":"integer"},"request_limit_reached":{"title":"Request Limit Reached","type":"boolean"},"screenshot_count":{"default":0,"title":"Screenshot Count","type":"integer"},"screenshot_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Screenshot Url"},"selected_favicon":{"anyOf":[{"$ref":"#/components/schemas/FaviconOut"},{"type":"null"}]},"signal_count":{"default":0,"title":"Signal Count","type":"integer"},"source_email_link_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Link Id"},"source_email_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Part Id"},"source_member_key":{"title":"Source Member Key","type":"string"},"source_navigation_child_request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Navigation Child Request Id"},"source_navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Navigation Index"},"source_qr_code_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Qr Code Id"},"source_relationship":{"anyOf":[{"$ref":"#/components/schemas/SourceRelationshipSummary"},{"type":"null"}]},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/AnalysisStatus"},"target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Target Url"},"technology_count":{"default":0,"title":"Technology Count","type":"integer"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"},"tls_certificate_count":{"default":0,"title":"Tls Certificate Count","type":"integer"},"visibility":{"$ref":"#/components/schemas/AnalysisVisibility","default":"public"},"wacz_size_bytes":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Wacz Size Bytes"}},"required":["id","group_id","analysis_kind","member_index","member_role","parent_analysis_id","prior_analysis_id","depth","source_navigation_child_request_id","source_navigation_index","source_email_part_id","source_email_link_id","source_member_key","execution_variant_key","attempt_number","input_filename","input_media_type","execution_settings","execution_settings_schema_version","input_kind","execution_kind","status","target_url","replay_entry_url","final_url","title","replay_miss_count","request_limit_reached","behavior_event_limit_reached","failed_rule_count","engine_version","error","created_at","started_at","finished_at"],"title":"AnalysisDetail","type":"object"},"AnalysisDomain":{"enum":["web","email","group"],"title":"AnalysisDomain","type":"string"},"AnalysisEvaluationSummary":{"properties":{"assurance_credit":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Assurance Credit"},"completeness":{"$ref":"#/components/schemas/EvaluationCompleteness"},"completeness_reasons":{"items":{"type":"string"},"title":"Completeness Reasons","type":"array"},"created_at":{"title":"Created At","type":"string"},"domain":{"$ref":"#/components/schemas/AnalysisDomain"},"engine_version":{"title":"Engine Version","type":"string"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"failed_rule_count":{"title":"Failed Rule Count","type":"integer"},"failure_class":{"anyOf":[{"$ref":"#/components/schemas/FailureClass"},{"type":"null"}]},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"generation":{"title":"Generation","type":"integer"},"id":{"format":"uuid","title":"Id","type":"string"},"is_current":{"title":"Is Current","type":"boolean"},"javascript_catalog_digest":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Javascript Catalog Digest"},"operation_id":{"format":"uuid","title":"Operation Id","type":"string"},"risk_score":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Risk Score"},"ruleset_version":{"title":"Ruleset Version","type":"string"},"score":{"title":"Score","type":"integer"},"score_policy_version":{"title":"Score Policy Version","type":"string"},"source_email_authentication_run_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Authentication Run Id"},"source_email_extraction_run_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Extraction Run Id"},"source_web_fact_generation":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Web Fact Generation"},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/EvaluationStatus"},"verdict":{"$ref":"#/components/schemas/EvaluationVerdict"}},"required":["id","operation_id","generation","is_current","status","engine_version","domain","ruleset_version","javascript_catalog_digest","score_policy_version","score","verdict","completeness","started_at","finished_at","failure_class","error","failed_rule_count","source_web_fact_generation","source_email_extraction_run_id","source_email_authentication_run_id","created_at"],"title":"AnalysisEvaluationSummary","type":"object"},"AnalysisGroupCompleteness":{"enum":["unknown","complete","partial"],"title":"AnalysisGroupCompleteness","type":"string"},"AnalysisGroupDetail":{"description":"Group detail without source storage identifiers.","properties":{"attempt_count":{"default":0,"title":"Attempt Count","type":"integer"},"completeness":{"$ref":"#/components/schemas/AnalysisGroupCompleteness"},"created_at":{"title":"Created At","type":"string"},"email":{"anyOf":[{"$ref":"#/components/schemas/EmailGroupSummary"},{"type":"null"}]},"email_collection":{"anyOf":[{"$ref":"#/components/schemas/TrapEnvelope"},{"type":"null"}]},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"external_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"External Id"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"id":{"format":"uuid","title":"Id","type":"string"},"member_count":{"default":0,"title":"Member Count","type":"integer"},"origin":{"$ref":"#/components/schemas/AnalysisGroupOrigin"},"progress":{"title":"Progress","type":"integer"},"relationship_count":{"default":0,"title":"Relationship Count","type":"integer"},"source_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Filename"},"source_media_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Media Type"},"source_member_count":{"default":0,"title":"Source Member Count","type":"integer"},"source_sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Sha256"},"source_size_bytes":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Size Bytes"},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/AnalysisGroupStatus"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"},"variant_count":{"default":0,"title":"Variant Count","type":"integer"},"visibility":{"$ref":"#/components/schemas/AnalysisVisibility"},"web":{"anyOf":[{"$ref":"#/components/schemas/WebGroupSummary"},{"type":"null"}]}},"required":["id","visibility","origin","status","completeness","progress","title","external_id","source_filename","source_media_type","source_sha256","source_size_bytes","error","created_at","started_at","finished_at"],"title":"AnalysisGroupDetail","type":"object"},"AnalysisGroupOrigin":{"enum":["submission","eml"],"title":"AnalysisGroupOrigin","type":"string"},"AnalysisGroupStatus":{"enum":["pending","running","completed","completed_partial","failed","deleting"],"title":"AnalysisGroupStatus","type":"string"},"AnalysisGroupSummary":{"description":"One submitted source and its aggregate state.","properties":{"attempt_count":{"default":0,"title":"Attempt Count","type":"integer"},"completeness":{"$ref":"#/components/schemas/AnalysisGroupCompleteness"},"created_at":{"title":"Created At","type":"string"},"email":{"anyOf":[{"$ref":"#/components/schemas/EmailGroupSummary"},{"type":"null"}]},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"external_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"External Id"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"id":{"format":"uuid","title":"Id","type":"string"},"member_count":{"default":0,"title":"Member Count","type":"integer"},"origin":{"$ref":"#/components/schemas/AnalysisGroupOrigin"},"progress":{"title":"Progress","type":"integer"},"relationship_count":{"default":0,"title":"Relationship Count","type":"integer"},"source_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Filename"},"source_media_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Media Type"},"source_member_count":{"default":0,"title":"Source Member Count","type":"integer"},"source_sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Sha256"},"source_size_bytes":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Size Bytes"},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/AnalysisGroupStatus"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"},"variant_count":{"default":0,"title":"Variant Count","type":"integer"},"visibility":{"$ref":"#/components/schemas/AnalysisVisibility"},"web":{"anyOf":[{"$ref":"#/components/schemas/WebGroupSummary"},{"type":"null"}]}},"required":["id","visibility","origin","status","completeness","progress","title","external_id","source_filename","source_media_type","source_sha256","source_size_bytes","error","created_at","started_at","finished_at"],"title":"AnalysisGroupSummary","type":"object"},"AnalysisKind":{"enum":["web","email"],"title":"AnalysisKind","type":"string"},"AnalysisMemberRole":{"enum":["submitted_url","submitted_html","submitted_wacz","email_message","message_body","attachment","email_link","navigation_child","qr_code"],"title":"AnalysisMemberRole","type":"string"},"AnalysisOverviewPlots":{"description":"Small distributions used by the analysis Overview tab.","properties":{"behavior_events_by_facet":{"items":{"$ref":"#/components/schemas/SummaryBucket"},"title":"Behavior Events By Facet","type":"array"},"requests_by_host":{"items":{"$ref":"#/components/schemas/SummaryBucket"},"title":"Requests By Host","type":"array"},"requests_by_mime":{"items":{"$ref":"#/components/schemas/SummaryBucket"},"title":"Requests By Mime","type":"array"},"requests_by_party":{"items":{"$ref":"#/components/schemas/SummaryBucket"},"title":"Requests By Party","type":"array"},"requests_by_resource_type":{"items":{"$ref":"#/components/schemas/SummaryBucket"},"title":"Requests By Resource Type","type":"array"},"signals_by_severity":{"items":{"$ref":"#/components/schemas/SummaryBucket"},"title":"Signals By Severity","type":"array"}},"title":"AnalysisOverviewPlots","type":"object"},"AnalysisRelationship":{"description":"One bounded relationship between analysis members.","properties":{"child_analysis_id":{"format":"uuid","title":"Child Analysis Id","type":"string"},"normalized_target":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Normalized Target"},"parent_analysis_id":{"format":"uuid","title":"Parent Analysis Id","type":"string"},"relationship_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Relationship Id"},"relationship_type":{"enum":["email_source","email_link_source","navigation_child","qr_code_source","prior_attempt","same_source_variant"],"title":"Relationship Type","type":"string"},"source_email_link_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Link Id"},"source_mode":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Mode"},"source_navigation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Navigation Id"},"source_navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Navigation Index"},"source_qr_code_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Qr Code Id"},"source_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Url"},"source_warc_length":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Warc Length"},"source_warc_member":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Warc Member"},"source_warc_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Warc Offset"},"source_warc_record_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Warc Record Id"},"source_web_fact_generation":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Web Fact Generation"}},"required":["relationship_id","relationship_type","parent_analysis_id","child_analysis_id"],"title":"AnalysisRelationship","type":"object"},"AnalysisSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"completeness":{"anyOf":[{"$ref":"#/components/schemas/EvaluationCompleteness"},{"type":"null"}]},"created_at":{"title":"Created At","type":"string"},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"final_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Final Url"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"input_kind":{"$ref":"#/components/schemas/InputKind"},"match":{"$ref":"#/components/schemas/SearchMatch"},"score":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Score"},"status":{"$ref":"#/components/schemas/AnalysisStatus"},"target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Target Url"},"title":{"title":"Title","type":"string"},"type":{"const":"analysis","title":"Type","type":"string"},"verdict":{"anyOf":[{"$ref":"#/components/schemas/EvaluationVerdict"},{"type":"null"}]}},"required":["id","title","href","match","type","status","input_kind","target_url","final_url","created_at"],"title":"AnalysisSearchResult","type":"object"},"AnalysisSignalSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"labels":{"items":{"type":"string"},"title":"Labels","type":"array"},"match":{"$ref":"#/components/schemas/SearchMatch"},"rule_id":{"title":"Rule Id","type":"string"},"severity":{"$ref":"#/components/schemas/Severity"},"title":{"title":"Title","type":"string"},"type":{"const":"analysis_signal","title":"Type","type":"string"}},"required":["id","title","href","match","type","severity","rule_id","labels"],"title":"AnalysisSignalSearchResult","type":"object"},"AnalysisSort":{"description":"Allowed sort columns. An enum, not a regex, so the schema documents it.","enum":["created_at","status","target_url"],"title":"AnalysisSort","type":"string"},"AnalysisStatus":{"enum":["pending","capturing","extracting","analysing","completed","completed_partial","failed"],"title":"AnalysisStatus","type":"string"},"AnalysisSummary":{"description":"List row. Carries no blobs and no evidence.","properties":{"analysis_kind":{"$ref":"#/components/schemas/AnalysisKind"},"attempt_key":{"default":"","title":"Attempt Key","type":"string"},"attempt_number":{"title":"Attempt Number","type":"integer"},"behavior_event_limit_reached":{"title":"Behavior Event Limit Reached","type":"boolean"},"cookie_limit_reached":{"default":false,"title":"Cookie Limit Reached","type":"boolean"},"created_at":{"title":"Created At","type":"string"},"current_evaluation":{"anyOf":[{"$ref":"#/components/schemas/AnalysisEvaluationSummary"},{"type":"null"}]},"depth":{"title":"Depth","type":"integer"},"duration_ms":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Duration Ms"},"engine_version":{"title":"Engine Version","type":"string"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"evidence_completeness_reasons":{"items":{"type":"string"},"title":"Evidence Completeness Reasons","type":"array"},"execution_kind":{"$ref":"#/components/schemas/ExecutionKind"},"execution_settings":{"additionalProperties":true,"title":"Execution Settings","type":"object"},"execution_settings_schema_version":{"title":"Execution Settings Schema Version","type":"integer"},"execution_variant_key":{"title":"Execution Variant Key","type":"string"},"failed_rule_count":{"title":"Failed Rule Count","type":"integer"},"failed_rule_details":{"items":{"$ref":"#/components/schemas/RuleFailureOut"},"title":"Failed Rule Details","type":"array"},"favicon_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Favicon Url"},"final_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Final Url"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"function_fingerprint_limit_reached":{"default":false,"title":"Function Fingerprint Limit Reached","type":"boolean"},"function_suppressed_count":{"default":0,"title":"Function Suppressed Count","type":"integer"},"function_visible_count":{"default":0,"title":"Function Visible Count","type":"integer"},"group_id":{"format":"uuid","title":"Group Id","type":"string"},"has_screenshot":{"default":false,"title":"Has Screenshot","type":"boolean"},"has_wacz":{"default":false,"title":"Has Wacz","type":"boolean"},"highest_signal_severity":{"anyOf":[{"$ref":"#/components/schemas/Severity"},{"type":"null"}]},"host_count":{"default":0,"title":"Host Count","type":"integer"},"id":{"format":"uuid","title":"Id","type":"string"},"identifier_count":{"default":0,"title":"Identifier Count","type":"integer"},"identifier_limit_reached":{"default":false,"title":"Identifier Limit Reached","type":"boolean"},"identifier_source_truncated":{"default":false,"title":"Identifier Source Truncated","type":"boolean"},"impersonated_brands":{"items":{"type":"string"},"title":"Impersonated Brands","type":"array"},"input_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Input Filename"},"input_kind":{"$ref":"#/components/schemas/InputKind"},"input_media_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Input Media Type"},"is_baseline":{"default":false,"title":"Is Baseline","type":"boolean"},"is_representative":{"default":false,"title":"Is Representative","type":"boolean"},"latest_execution_outcome":{"anyOf":[{"$ref":"#/components/schemas/ExecutionOutcomeSummary"},{"type":"null"}]},"member_index":{"title":"Member Index","type":"integer"},"member_role":{"$ref":"#/components/schemas/AnalysisMemberRole"},"parent_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Parent Analysis Id"},"payload_count":{"default":0,"title":"Payload Count","type":"integer"},"payload_limit_reached":{"default":false,"title":"Payload Limit Reached","type":"boolean"},"prior_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Prior Analysis Id"},"replay_entry_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Replay Entry Url"},"replay_miss_count":{"title":"Replay Miss Count","type":"integer"},"request_count":{"default":0,"title":"Request Count","type":"integer"},"request_limit_reached":{"title":"Request Limit Reached","type":"boolean"},"screenshot_count":{"default":0,"title":"Screenshot Count","type":"integer"},"screenshot_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Screenshot Url"},"signal_count":{"default":0,"title":"Signal Count","type":"integer"},"source_email_link_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Link Id"},"source_email_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Part Id"},"source_member_key":{"title":"Source Member Key","type":"string"},"source_navigation_child_request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Navigation Child Request Id"},"source_navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Navigation Index"},"source_qr_code_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Qr Code Id"},"source_relationship":{"anyOf":[{"$ref":"#/components/schemas/SourceRelationshipSummary"},{"type":"null"}]},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/AnalysisStatus"},"target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Target Url"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"},"visibility":{"$ref":"#/components/schemas/AnalysisVisibility","default":"public"}},"required":["id","group_id","analysis_kind","member_index","member_role","parent_analysis_id","prior_analysis_id","depth","source_navigation_child_request_id","source_navigation_index","source_email_part_id","source_email_link_id","source_member_key","execution_variant_key","attempt_number","input_filename","input_media_type","execution_settings","execution_settings_schema_version","input_kind","execution_kind","status","target_url","replay_entry_url","final_url","title","replay_miss_count","request_limit_reached","behavior_event_limit_reached","failed_rule_count","engine_version","error","created_at","started_at","finished_at"],"title":"AnalysisSummary","type":"object"},"AnalysisVisibility":{"enum":["public","private"],"title":"AnalysisVisibility","type":"string"},"BehaviorEventFacetOut":{"properties":{"count":{"title":"Count","type":"integer"},"distinct_arguments":{"title":"Distinct Arguments","type":"integer"},"first_ms_after_load":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"First Ms After Load"},"kind":{"title":"Kind","type":"string"},"last_ms_after_load":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Last Ms After Load"},"max_arg_len":{"title":"Max Arg Len","type":"integer"},"max_entropy":{"title":"Max Entropy","type":"number"},"name":{"title":"Name","type":"string"}},"required":["kind","name","count","distinct_arguments","max_arg_len","max_entropy","first_ms_after_load","last_ms_after_load"],"title":"BehaviorEventFacetOut","type":"object"},"BehaviorEventOut":{"properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"arg_len":{"title":"Arg Len","type":"integer"},"arg_preview":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Arg Preview"},"arg_sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Arg Sha256"},"arg_truncated":{"title":"Arg Truncated","type":"boolean"},"entropy":{"title":"Entropy","type":"number"},"id":{"format":"uuid","title":"Id","type":"string"},"kind":{"title":"Kind","type":"string"},"ms_after_load":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Ms After Load"},"name":{"title":"Name","type":"string"},"navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Navigation Index"},"page_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Page Url"},"source_api":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Api"},"stack_top":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Stack Top"},"ts":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Ts"},"user_gesture":{"title":"User Gesture","type":"boolean"}},"required":["id","analysis_id","kind","name","source_api","arg_preview","arg_sha256","arg_len","arg_truncated","entropy","stack_top","page_url","ms_after_load","ts","user_gesture"],"title":"BehaviorEventOut","type":"object"},"BehaviorEventSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"arg_preview":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Arg Preview"},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"kind":{"title":"Kind","type":"string"},"match":{"$ref":"#/components/schemas/SearchMatch"},"name":{"title":"Name","type":"string"},"page_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Page Url"},"source_api":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Api"},"title":{"title":"Title","type":"string"},"ts":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Ts"},"type":{"const":"behavior_event","title":"Type","type":"string"}},"required":["id","title","href","match","type","kind","name","source_api","arg_preview","page_url","ts"],"title":"BehaviorEventSearchResult","type":"object"},"Body_submit_eml":{"properties":{"file":{"contentMediaType":"application/octet-stream","title":"File","type":"string"},"visibility":{"anyOf":[{"$ref":"#/components/schemas/AnalysisVisibility"},{"type":"null"}]}},"required":["file"],"title":"Body_submit_eml","type":"object"},"Body_submit_wacz":{"properties":{"file":{"contentMediaType":"application/octet-stream","title":"File","type":"string"},"visibility":{"anyOf":[{"$ref":"#/components/schemas/AnalysisVisibility"},{"type":"null"}]}},"required":["file"],"title":"Body_submit_wacz","type":"object"},"BrandDetailOut":{"description":"One brand with the records that identify it.\n\nTerms and domains are the detection contract, so they are shown. A\nfavicon or logo descriptor is a digest and is reported as a count only.","properties":{"case_count":{"default":0,"title":"Case Count","type":"integer"},"confidence":{"anyOf":[{"type":"number"},{"type":"null"}],"title":"Confidence"},"countries":{"items":{"type":"string"},"title":"Countries","type":"array"},"display_name":{"title":"Display Name","type":"string"},"domain_count":{"default":0,"title":"Domain Count","type":"integer"},"domains":{"items":{"$ref":"#/components/schemas/BrandMatchDefinitionOut"},"title":"Domains","type":"array"},"enabled":{"default":true,"title":"Enabled","type":"boolean"},"entity_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Entity Type"},"favicon_count":{"default":0,"title":"Favicon Count","type":"integer"},"first_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"First Seen At"},"isic_code":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Isic Code"},"isic_title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Isic Title"},"last_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Seen At"},"legal_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Legal Name"},"logo_count":{"default":0,"title":"Logo Count","type":"integer"},"needs_review":{"default":false,"title":"Needs Review","type":"boolean"},"parent_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Parent Name"},"resource_patterns":{"items":{"$ref":"#/components/schemas/BrandMatchDefinitionOut"},"title":"Resource Patterns","type":"array"},"slug":{"title":"Slug","type":"string"},"term_count":{"default":0,"title":"Term Count","type":"integer"},"terms":{"items":{"$ref":"#/components/schemas/BrandMatchDefinitionOut"},"title":"Terms","type":"array"},"top_page_domains":{"items":{"$ref":"#/components/schemas/BrandPageDomainOut"},"title":"Top Page Domains","type":"array"}},"required":["slug","display_name"],"title":"BrandDetailOut","type":"object"},"BrandDistributionItem":{"description":"One brand entry, with the slug its brand page is addressed by.\n\nA technology, verdict, or evidence entry names no stored record, so only\na brand entry carries a slug. The slug is null when the name no longer\nresolves to a registry brand.","properties":{"count":{"title":"Count","type":"integer"},"key":{"title":"Key","type":"string"},"slug":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Slug"}},"required":["key","count"],"title":"BrandDistributionItem","type":"object"},"BrandMatchDefinitionOut":{"description":"One term, domain, or resource pattern that identifies a brand.","properties":{"match_kind":{"title":"Match Kind","type":"string"},"relation":{"title":"Relation","type":"string"},"value":{"title":"Value","type":"string"}},"required":["value","relation","match_kind"],"title":"BrandMatchDefinitionOut","type":"object"},"BrandOut":{"description":"One registry brand and how often cases impersonated it.\n\n``case_count`` counts the cases the caller may read, so two callers can\nsee different counts for the same brand. A brand with no cases is still\nreturned: the registry is the coverage map, and a gap in it is the useful\npart of the answer.","properties":{"case_count":{"default":0,"title":"Case Count","type":"integer"},"confidence":{"anyOf":[{"type":"number"},{"type":"null"}],"title":"Confidence"},"countries":{"items":{"type":"string"},"title":"Countries","type":"array"},"display_name":{"title":"Display Name","type":"string"},"domain_count":{"default":0,"title":"Domain Count","type":"integer"},"enabled":{"default":true,"title":"Enabled","type":"boolean"},"entity_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Entity Type"},"favicon_count":{"default":0,"title":"Favicon Count","type":"integer"},"isic_code":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Isic Code"},"isic_title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Isic Title"},"last_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Seen At"},"legal_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Legal Name"},"logo_count":{"default":0,"title":"Logo Count","type":"integer"},"needs_review":{"default":false,"title":"Needs Review","type":"boolean"},"parent_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Parent Name"},"slug":{"title":"Slug","type":"string"},"term_count":{"default":0,"title":"Term Count","type":"integer"}},"required":["slug","display_name"],"title":"BrandOut","type":"object"},"BrandPageDomainOut":{"description":"One domain that carried this brand and does not own it.","properties":{"case_count":{"title":"Case Count","type":"integer"},"page_domain":{"title":"Page Domain","type":"string"}},"required":["page_domain","case_count"],"title":"BrandPageDomainOut","type":"object"},"Category":{"enum":["legitimate","bulk","spam","phishing","bec","scam","malware"],"title":"Category","type":"string"},"ClusterDistributionItem":{"description":"One entry of an ordered ``key`` and ``count`` distribution.","properties":{"count":{"title":"Count","type":"integer"},"key":{"title":"Key","type":"string"}},"required":["key","count"],"title":"ClusterDistributionItem","type":"object"},"ClusterInsights":{"description":"Aggregates computed for one cluster at request time.\n\nThese answer investigation questions rather than describing the record:\nwhen the cluster was active, whose brands it targets, and what\ninfrastructure it runs on. They cover the analyses the caller can read.","properties":{"active_days":{"title":"Active Days","type":"integer"},"brands":{"items":{"$ref":"#/components/schemas/BrandDistributionItem"},"title":"Brands","type":"array"},"countries":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Countries","type":"array"},"domains":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Domains","type":"array"},"hosting":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Hosting","type":"array"},"timeline":{"items":{"$ref":"#/components/schemas/ClusterTimelinePoint"},"title":"Timeline","type":"array"}},"required":["timeline","brands","hosting","countries","domains","active_days"],"title":"ClusterInsights","type":"object"},"ClusterMemberOut":{"description":"One analysis inside a cluster, with the reason it is a member.","properties":{"analysis_created_at":{"title":"Analysis Created At","type":"string"},"analysis_final_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Final Url"},"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"analysis_status":{"$ref":"#/components/schemas/AnalysisStatus"},"analysis_target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Target Url"},"analysis_title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Title"},"assigned_at":{"title":"Assigned At","type":"string"},"favicon_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Favicon Url"},"member_score":{"title":"Member Score","type":"integer"},"reason_codes":{"items":{"type":"string"},"title":"Reason Codes","type":"array"},"score":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Score"},"screenshot_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Screenshot Url"},"target_registrable_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Target Registrable Domain"},"verdict":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Verdict"},"visibility":{"$ref":"#/components/schemas/AnalysisVisibility","default":"public"}},"required":["analysis_id","analysis_title","analysis_target_url","analysis_final_url","analysis_status","target_registrable_domain","verdict","score","screenshot_url","favicon_url","analysis_created_at","member_score","reason_codes","assigned_at"],"title":"ClusterMemberOut","type":"object"},"ClusterState":{"description":"Whether a derived cluster was present in the most recent build.","enum":["active","retired"],"title":"ClusterState","type":"string"},"ClusterStatsResponse":{"description":"Corpus-level counts for one cluster type.","properties":{"authoritative":{"title":"Authoritative","type":"boolean"},"available":{"title":"Available","type":"boolean"},"built_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Built At"},"degraded":{"title":"Degraded","type":"boolean"},"kind":{"enum":["kit","actor"],"title":"Kind","type":"string"},"largest_cluster_size":{"title":"Largest Cluster Size","type":"integer"},"policy_version":{"title":"Policy Version","type":"string"},"relation_count":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Relation Count"},"total_clusters":{"title":"Total Clusters","type":"integer"},"total_members":{"title":"Total Members","type":"integer"},"truncated":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Truncated"}},"required":["available","kind","total_clusters","total_members","largest_cluster_size","policy_version","authoritative","degraded","truncated","relation_count","built_at"],"title":"ClusterStatsResponse","type":"object"},"ClusterTimelinePoint":{"description":"How many member analyses were observed on one day.","properties":{"count":{"title":"Count","type":"integer"},"day":{"title":"Day","type":"string"}},"required":["day","count"],"title":"ClusterTimelinePoint","type":"object"},"ComparisonCategory":{"properties":{"added":{"items":{},"title":"Added","type":"array"},"category":{"title":"Category","type":"string"},"changed":{"items":{"$ref":"#/components/schemas/ComparisonChange"},"title":"Changed","type":"array"},"not_comparable":{"items":{"type":"string"},"title":"Not Comparable","type":"array"},"removed":{"items":{},"title":"Removed","type":"array"},"source_truncated":{"title":"Source Truncated","type":"boolean"},"sources":{"additionalProperties":{"items":{"$ref":"#/components/schemas/ComparisonFactSource"},"type":"array"},"title":"Sources","type":"object"},"total":{"title":"Total","type":"integer"},"truncated":{"title":"Truncated","type":"boolean"},"unavailable":{"items":{"type":"string"},"title":"Unavailable","type":"array"}},"required":["category","added","removed","changed","unavailable","not_comparable","total","truncated","source_truncated","sources"],"title":"ComparisonCategory","type":"object"},"ComparisonChange":{"properties":{"after":{"title":"After"},"before":{"title":"Before"},"key":{"title":"Key","type":"string"}},"required":["key","before","after"],"title":"ComparisonChange","type":"object"},"ComparisonEvaluationSource":{"properties":{"completeness":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Completeness"},"evaluation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Evaluation Id"},"generation":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Generation"},"source_web_fact_generation":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Web Fact Generation"},"status":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Status"}},"required":["evaluation_id","generation","source_web_fact_generation","status","completeness"],"title":"ComparisonEvaluationSource","type":"object"},"ComparisonFactSource":{"properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"evaluation_id":{"format":"uuid","title":"Evaluation Id","type":"string"},"kind":{"title":"Kind","type":"string"},"locator":{"additionalProperties":true,"title":"Locator","type":"object"}},"required":["analysis_id","evaluation_id","kind","locator"],"title":"ComparisonFactSource","type":"object"},"CookieObservationOut":{"description":"One observed cookie without its raw value.","properties":{"attribute_truncated":{"default":false,"title":"Attribute Truncated","type":"boolean"},"declared_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Declared Domain"},"declared_path":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Declared Path"},"deletion":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Deletion"},"domain":{"title":"Domain","type":"string"},"expires_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Expires At"},"extraction_version":{"title":"Extraction Version","type":"string"},"header_ordinal":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Header Ordinal"},"host_only":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Host Only"},"http_only":{"title":"Http Only","type":"boolean"},"id":{"format":"uuid","title":"Id","type":"string"},"last_observed_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Observed At"},"milestone":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Milestone"},"name":{"title":"Name","type":"string"},"navigation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Navigation Id"},"navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Navigation Index"},"normalized_name":{"title":"Normalized Name","type":"string"},"observed_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Observed At"},"origin_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Origin Url"},"partition_key":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Partition Key"},"path":{"title":"Path","type":"string"},"registrable_domain":{"title":"Registrable Domain","type":"string"},"report_index":{"title":"Report Index","type":"integer"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"same_site":{"anyOf":[{"enum":["strict","lax","none"],"type":"string"},{"type":"null"}],"title":"Same Site"},"scope_valid":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Scope Valid"},"secure":{"title":"Secure","type":"boolean"},"session":{"title":"Session","type":"boolean"},"snapshot_key":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Snapshot Key"},"snapshot_keys":{"items":{"type":"string"},"title":"Snapshot Keys","type":"array"},"source":{"enum":["http_header","browser_jar"],"title":"Source","type":"string"},"valid_from_generation":{"default":0,"title":"Valid From Generation","type":"integer"},"valid_to_generation":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Valid To Generation"},"value_length":{"title":"Value Length","type":"integer"},"value_sha256":{"title":"Value Sha256","type":"string"},"warc_member":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Member"},"warc_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Offset"},"warc_record_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Record Id"}},"required":["id","request_id","navigation_id","report_index","name","normalized_name","domain","registrable_domain","path","secure","http_only","same_site","session","value_length","value_sha256","source","warc_record_id","warc_member","warc_offset","extraction_version"],"title":"CookieObservationOut","type":"object"},"CredentialLookupOut":{"properties":{"analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"},"created_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Created At"},"field":{"anyOf":[{"enum":["email","username","identity_number","password","phone","card_number","bank_account","pin","otp","recovery_code"],"type":"string"},{"type":"null"}],"title":"Field"},"identity_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Identity Id"},"matched":{"title":"Matched","type":"boolean"},"submission_urls":{"items":{"type":"string"},"title":"Submission Urls","type":"array"},"submitted_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Submitted At"}},"required":["matched"],"title":"CredentialLookupOut","type":"object"},"CredentialLookupRequest":{"properties":{"kind":{"enum":["email","username","identity_number","password","phone","card_number","bank_account","pin","otp","recovery_code"],"title":"Kind","type":"string"},"value":{"maxLength":512,"minLength":1,"title":"Value","type":"string"}},"required":["kind","value"],"title":"CredentialLookupRequest","type":"object"},"DecisionStatus":{"enum":["classified","undetermined"],"title":"DecisionStatus","type":"string"},"DistributionItem":{"properties":{"count":{"title":"Count","type":"integer"},"key":{"title":"Key","type":"string"},"rule_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Rule Id"}},"required":["key","count"],"title":"DistributionItem","type":"object"},"DistributionResponse":{"properties":{"available":{"title":"Available","type":"boolean"},"dimension":{"title":"Dimension","type":"string"},"items":{"items":{"$ref":"#/components/schemas/DistributionItem"},"title":"Items","type":"array"}},"required":["available","dimension","items"],"title":"DistributionResponse","type":"object"},"DomainRegistrationOut":{"description":"The current registration observation for the analysis target domain.","properties":{"age_band":{"enum":["0-7_days","8-30_days","31-90_days","older","unknown"],"title":"Age Band","type":"string"},"age_days":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Age Days"},"domain_statuses":{"items":{"type":"string"},"title":"Domain Statuses","type":"array"},"expires_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Expires At"},"fetched_at":{"title":"Fetched At","type":"string"},"from_cache":{"title":"From Cache","type":"boolean"},"last_changed_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Changed At"},"nameservers":{"items":{"type":"string"},"title":"Nameservers","type":"array"},"registered_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Registered At"},"registrable_domain":{"title":"Registrable Domain","type":"string"},"registrar_expires_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Registrar Expires At"},"registrar_handle":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Registrar Handle"},"registrar_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Registrar Name"},"response_metadata":{"additionalProperties":true,"title":"Response Metadata","type":"object"},"source_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Url"},"status":{"$ref":"#/components/schemas/DomainRegistrationStatus"}},"required":["registrable_domain","status","registered_at","expires_at","registrar_expires_at","last_changed_at","registrar_name","registrar_handle","domain_statuses","nameservers","fetched_at","source_url","from_cache","response_metadata","age_days","age_band"],"title":"DomainRegistrationOut","type":"object"},"DomainRegistrationStatus":{"enum":["found","not_found","unsupported","restricted"],"title":"DomainRegistrationStatus","type":"string"},"EmailAnalysisDetail":{"properties":{"active_authentication":{"anyOf":[{"$ref":"#/components/schemas/EmailAuthenticationRunSummary"},{"type":"null"}]},"active_extraction":{"anyOf":[{"$ref":"#/components/schemas/EmailExtractionRunOut"},{"type":"null"}]},"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"attachment_count":{"default":0,"title":"Attachment Count","type":"integer"},"category_assessment":{"anyOf":[{"$ref":"#/components/schemas/EmailCategoryAssessmentOut"},{"type":"null"}]},"extraction_limits":{"items":{"$ref":"#/components/schemas/EmailExtractionLimitOut"},"title":"Extraction Limits","type":"array"},"header_count":{"default":0,"title":"Header Count","type":"integer"},"hop_count":{"default":0,"title":"Hop Count","type":"integer"},"message_date":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Message Date"},"message_id":{"format":"uuid","title":"Message Id","type":"string"},"parser_warnings":{"items":{"$ref":"#/components/schemas/EmailParserWarningOut"},"title":"Parser Warnings","type":"array"},"part_count":{"default":0,"title":"Part Count","type":"integer"},"rfc_message_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Rfc Message Id"},"source_sha256":{"title":"Source Sha256","type":"string"},"source_size_bytes":{"title":"Source Size Bytes","type":"integer"},"subject":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Subject"},"url_count":{"default":0,"title":"Url Count","type":"integer"}},"required":["analysis_id","message_id","source_sha256","source_size_bytes","rfc_message_id","subject","message_date","active_extraction","active_authentication"],"title":"EmailAnalysisDetail","type":"object"},"EmailArcSetResultOut":{"properties":{"algorithm":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Algorithm"},"chain_result":{"title":"Chain Result","type":"string"},"computed_cv":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Computed Cv"},"declared_cv":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Declared Cv"},"evidence_class":{"$ref":"#/components/schemas/EmailEvidenceClass"},"id":{"format":"uuid","title":"Id","type":"string"},"instance":{"title":"Instance","type":"integer"},"message_signature_valid":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Message Signature Valid"},"ordinal":{"title":"Ordinal","type":"integer"},"reason_codes":{"items":{"type":"string"},"title":"Reason Codes","type":"array"},"seal_valid":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Seal Valid"},"sealer_trust":{"title":"Sealer Trust","type":"string"},"selector":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Selector"},"signing_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Signing Domain"}},"required":["id","ordinal","instance","evidence_class","chain_result","sealer_trust","signing_domain","selector","algorithm","declared_cv","computed_cv","message_signature_valid","seal_valid","reason_codes"],"title":"EmailArcSetResultOut","type":"object"},"EmailAttachmentOut":{"properties":{"declared_type":{"title":"Declared Type","type":"string"},"detected_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Detected Type"},"disposition":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Disposition"},"download_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Download Url"},"id":{"format":"uuid","title":"Id","type":"string"},"is_html_candidate":{"title":"Is Html Candidate","type":"boolean"},"is_inline":{"title":"Is Inline","type":"boolean"},"mime_part_id":{"format":"uuid","title":"Mime Part Id","type":"string"},"ordinal":{"title":"Ordinal","type":"integer"},"original_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Original Filename"},"sanitized_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Sanitized Filename"},"sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Sha256"},"size_bytes":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Size Bytes"},"skip_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Skip Reason"},"web_analysis_eligible":{"title":"Web Analysis Eligible","type":"boolean"}},"required":["id","mime_part_id","ordinal","original_filename","sanitized_filename","declared_type","detected_type","disposition","size_bytes","sha256","is_inline","is_html_candidate","web_analysis_eligible","skip_reason"],"title":"EmailAttachmentOut","type":"object"},"EmailAuthenticationClaimOut":{"properties":{"arc_instance":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Arc Instance"},"authserv_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Authserv Id"},"claimed_identity":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Claimed Identity"},"evidence_class":{"title":"Evidence Class","type":"string"},"header_id":{"format":"uuid","title":"Header Id","type":"string"},"header_name":{"title":"Header Name","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"identity_kind":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Identity Kind"},"impersonates_trusted_identity":{"title":"Impersonates Trusted Identity","type":"boolean"},"is_trusted":{"title":"Is Trusted","type":"boolean"},"mechanism":{"title":"Mechanism","type":"string"},"normalized_identity":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Normalized Identity"},"ordinal":{"title":"Ordinal","type":"integer"},"parse_error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Parse Error"},"properties":{"additionalProperties":true,"title":"Properties","type":"object"},"result":{"title":"Result","type":"string"}},"required":["id","header_id","ordinal","header_name","mechanism","result","evidence_class","authserv_id","claimed_identity","identity_kind","normalized_identity","arc_instance","impersonates_trusted_identity","properties","parse_error","is_trusted"],"title":"EmailAuthenticationClaimOut","type":"object"},"EmailAuthenticationMode":{"enum":["live","offline","trusted_ingest"],"title":"EmailAuthenticationMode","type":"string"},"EmailAuthenticationRunDetail":{"properties":{"arc_set_results":{"items":{"$ref":"#/components/schemas/EmailArcSetResultOut"},"title":"Arc Set Results","type":"array"},"claims":{"items":{"$ref":"#/components/schemas/EmailAuthenticationClaimOut"},"title":"Claims","type":"array"},"created_at":{"title":"Created At","type":"string"},"dependency_versions":{"additionalProperties":true,"title":"Dependency Versions","type":"object"},"dkim_results":{"items":{"$ref":"#/components/schemas/EmailDkimResultOut"},"title":"Dkim Results","type":"array"},"dmarc_results":{"items":{"$ref":"#/components/schemas/EmailDmarcResultOut"},"title":"Dmarc Results","type":"array"},"dns_observations":{"items":{"$ref":"#/components/schemas/EmailDnsObservationOut"},"title":"Dns Observations","type":"array"},"dns_snapshot_completeness":{"$ref":"#/components/schemas/EmailDnsSnapshotCompleteness"},"engine_version":{"title":"Engine Version","type":"string"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"evaluation_time":{"title":"Evaluation Time","type":"string"},"extraction_run_id":{"format":"uuid","title":"Extraction Run Id","type":"string"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"generation":{"title":"Generation","type":"integer"},"id":{"format":"uuid","title":"Id","type":"string"},"limits":{"additionalProperties":true,"title":"Limits","type":"object"},"mode":{"$ref":"#/components/schemas/EmailAuthenticationMode"},"parser_version":{"title":"Parser Version","type":"string"},"partial_reasons":{"items":{"type":"string"},"title":"Partial Reasons","type":"array"},"public_suffix_list_version":{"title":"Public Suffix List Version","type":"string"},"resolver_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Resolver Id"},"source_authentication_run_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Authentication Run Id"},"spf_results":{"items":{"$ref":"#/components/schemas/EmailSpfResultOut"},"title":"Spf Results","type":"array"},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/EmailRunStatus"},"time_source":{"title":"Time Source","type":"string"},"trust_profile_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Trust Profile Id"}},"required":["id","extraction_run_id","source_authentication_run_id","generation","status","mode","evaluation_time","time_source","engine_version","dns_snapshot_completeness","partial_reasons","error","created_at","started_at","finished_at","parser_version","dependency_versions","public_suffix_list_version","resolver_id","trust_profile_id","limits"],"title":"EmailAuthenticationRunDetail","type":"object"},"EmailAuthenticationRunSummary":{"properties":{"created_at":{"title":"Created At","type":"string"},"dns_snapshot_completeness":{"$ref":"#/components/schemas/EmailDnsSnapshotCompleteness"},"engine_version":{"title":"Engine Version","type":"string"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"evaluation_time":{"title":"Evaluation Time","type":"string"},"extraction_run_id":{"format":"uuid","title":"Extraction Run Id","type":"string"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"generation":{"title":"Generation","type":"integer"},"id":{"format":"uuid","title":"Id","type":"string"},"mode":{"$ref":"#/components/schemas/EmailAuthenticationMode"},"partial_reasons":{"items":{"type":"string"},"title":"Partial Reasons","type":"array"},"source_authentication_run_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Authentication Run Id"},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/EmailRunStatus"},"time_source":{"title":"Time Source","type":"string"}},"required":["id","extraction_run_id","source_authentication_run_id","generation","status","mode","evaluation_time","time_source","engine_version","dns_snapshot_completeness","partial_reasons","error","created_at","started_at","finished_at"],"title":"EmailAuthenticationRunSummary","type":"object"},"EmailBodyContentOut":{"properties":{"charset":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Charset"},"content":{"title":"Content","type":"string"},"content_bytes":{"title":"Content Bytes","type":"integer"},"content_type":{"title":"Content Type","type":"string"},"is_truncated":{"title":"Is Truncated","type":"boolean"},"mime_part_id":{"format":"uuid","title":"Mime Part Id","type":"string"},"mime_path":{"title":"Mime Path","type":"string"},"returned_bytes":{"title":"Returned Bytes","type":"integer"}},"required":["mime_part_id","mime_path","content_type","charset","content","content_bytes","returned_bytes","is_truncated"],"title":"EmailBodyContentOut","type":"object"},"EmailCategoryAssessmentOut":{"properties":{"category":{"anyOf":[{"$ref":"#/components/schemas/Category"},{"type":"null"}]},"decision_status":{"anyOf":[{"$ref":"#/components/schemas/DecisionStatus"},{"type":"null"}]},"evaluation_id":{"format":"uuid","title":"Evaluation Id","type":"string"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"id":{"format":"uuid","title":"Id","type":"string"},"input_digest":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Input Digest"},"label_source":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Label Source"},"model_sha256":{"title":"Model Sha256","type":"string"},"operation_id":{"format":"uuid","title":"Operation Id","type":"string"},"packet_version":{"title":"Packet Version","type":"string"},"policy_version":{"title":"Policy Version","type":"string"},"processing_status":{"title":"Processing Status","type":"string"},"reasons":{"items":{"type":"string"},"title":"Reasons","type":"array"},"score_semantics":{"const":"uncalibrated_model_scores","default":"uncalibrated_model_scores","title":"Score Semantics","type":"string"},"scores":{"additionalProperties":{"type":"number"},"title":"Scores","type":"object"},"semantic_observation":{"anyOf":[{"$ref":"#/components/schemas/EmailSemanticObservationOut"},{"type":"null"}]},"source_body_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Body Id"},"supported_categories":{"items":{"type":"string"},"title":"Supported Categories","type":"array"}},"required":["id","evaluation_id","operation_id","processing_status","category","decision_status","reasons","model_sha256","policy_version","packet_version","input_digest","supported_categories","scores","finished_at"],"title":"EmailCategoryAssessmentOut","type":"object"},"EmailDkimResultOut":{"properties":{"algorithm":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Algorithm"},"body_hash_valid":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Body Hash Valid"},"body_length":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Body Length"},"canonicalization":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Canonicalization"},"covers_from":{"title":"Covers From","type":"boolean"},"evidence_class":{"$ref":"#/components/schemas/EmailEvidenceClass"},"historical_dns_caveat":{"title":"Historical Dns Caveat","type":"boolean"},"id":{"format":"uuid","title":"Id","type":"string"},"identity":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Identity"},"key_lookup_result":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Key Lookup Result"},"key_sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Key Sha256"},"key_size_bits":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Key Size Bits"},"key_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Key Type"},"ordinal":{"title":"Ordinal","type":"integer"},"reason_codes":{"items":{"type":"string"},"title":"Reason Codes","type":"array"},"relaxed_alignment":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Relaxed Alignment"},"result":{"title":"Result","type":"string"},"selector":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Selector"},"signature_valid":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Signature Valid"},"signed_headers":{"items":{"type":"string"},"title":"Signed Headers","type":"array"},"signing_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Signing Domain"},"strict_alignment":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Strict Alignment"},"warnings":{"items":{"type":"string"},"title":"Warnings","type":"array"}},"required":["id","ordinal","evidence_class","result","signing_domain","selector","identity","algorithm","key_type","canonicalization","signed_headers","body_length","signature_valid","body_hash_valid","key_lookup_result","key_sha256","key_size_bits","covers_from","strict_alignment","relaxed_alignment","reason_codes","warnings","historical_dns_caveat"],"title":"EmailDkimResultOut","type":"object"},"EmailDmarcResultOut":{"properties":{"author_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Author Domain"},"dkim_aligned":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Dkim Aligned"},"dkim_alignment_mode":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Dkim Alignment Mode"},"evidence_class":{"$ref":"#/components/schemas/EmailEvidenceClass"},"failure_options":{"items":{"type":"string"},"title":"Failure Options","type":"array"},"id":{"format":"uuid","title":"Id","type":"string"},"local_disposition":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Local Disposition"},"ordinal":{"title":"Ordinal","type":"integer"},"organizational_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Organizational Domain"},"percentage":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Percentage"},"policy":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Policy"},"policy_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Policy Domain"},"reason_codes":{"items":{"type":"string"},"title":"Reason Codes","type":"array"},"requested_disposition":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Requested Disposition"},"result":{"title":"Result","type":"string"},"spf_aligned":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Spf Aligned"},"spf_alignment_mode":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Spf Alignment Mode"},"subdomain_policy":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Subdomain Policy"}},"required":["id","ordinal","evidence_class","result","author_domain","organizational_domain","policy_domain","policy","subdomain_policy","percentage","dkim_alignment_mode","spf_alignment_mode","failure_options","dkim_aligned","spf_aligned","requested_disposition","local_disposition","reason_codes"],"title":"EmailDmarcResultOut","type":"object"},"EmailDnsObservationOut":{"properties":{"answers":{"items":{"additionalProperties":true,"type":"object"},"title":"Answers","type":"array"},"attempts":{"title":"Attempts","type":"integer"},"cache_age_seconds":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Cache Age Seconds"},"cache_state":{"title":"Cache State","type":"string"},"cname_chain":{"items":{"type":"string"},"title":"Cname Chain","type":"array"},"completed_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Completed At"},"dnssec_state":{"title":"Dnssec State","type":"string"},"elapsed_ms":{"title":"Elapsed Ms","type":"integer"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"id":{"format":"uuid","title":"Id","type":"string"},"ordinal":{"title":"Ordinal","type":"integer"},"purpose":{"title":"Purpose","type":"string"},"queried_at":{"title":"Queried At","type":"string"},"query_name":{"title":"Query Name","type":"string"},"query_type":{"title":"Query Type","type":"string"},"resolver_id":{"title":"Resolver Id","type":"string"},"response_code":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Response Code"},"ttl_seconds":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Ttl Seconds"}},"required":["id","ordinal","purpose","query_name","query_type","response_code","cname_chain","answers","resolver_id","dnssec_state","cache_state","cache_age_seconds","ttl_seconds","queried_at","completed_at","attempts","elapsed_ms","error"],"title":"EmailDnsObservationOut","type":"object"},"EmailDnsSnapshotCompleteness":{"enum":["complete","partial","unavailable"],"title":"EmailDnsSnapshotCompleteness","type":"string"},"EmailEvidenceClass":{"enum":["verified","reconstructed","hypothetical","claimed","unavailable"],"title":"EmailEvidenceClass","type":"string"},"EmailExtractionLimitOut":{"properties":{"affected_source":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Affected Source"},"category":{"title":"Category","type":"string"},"configured_limit":{"title":"Configured Limit","type":"integer"},"id":{"format":"uuid","title":"Id","type":"string"},"mime_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Mime Part Id"},"observed_value":{"title":"Observed Value","type":"integer"},"ordinal":{"title":"Ordinal","type":"integer"}},"required":["id","ordinal","category","configured_limit","observed_value","affected_source","mime_part_id"],"title":"EmailExtractionLimitOut","type":"object"},"EmailExtractionRunOut":{"properties":{"body_selection_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Body Selection Reason"},"configured_limits":{"additionalProperties":true,"title":"Configured Limits","type":"object"},"dependency_versions":{"additionalProperties":true,"title":"Dependency Versions","type":"object"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"generation":{"title":"Generation","type":"integer"},"id":{"format":"uuid","title":"Id","type":"string"},"message_date":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Message Date"},"message_date_raw":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Message Date Raw"},"parser_version":{"title":"Parser Version","type":"string"},"partial_reasons":{"items":{"type":"string"},"title":"Partial Reasons","type":"array"},"report_message_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Report Message Id"},"selected_body_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Selected Body Part Id"},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/EmailRunStatus"},"subject":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Subject"}},"required":["id","generation","status","parser_version","dependency_versions","subject","report_message_id","message_date_raw","message_date","selected_body_part_id","body_selection_reason","partial_reasons","configured_limits","error","started_at","finished_at"],"title":"EmailExtractionRunOut","type":"object"},"EmailGroupSummary":{"properties":{"attachment_count":{"title":"Attachment Count","type":"integer"},"authentication":{"anyOf":[{"$ref":"#/components/schemas/EmailAuthenticationRunSummary"},{"type":"null"}]},"kind":{"const":"email","default":"email","title":"Kind","type":"string"},"message_date":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Message Date"},"primary_analysis_id":{"format":"uuid","title":"Primary Analysis Id","type":"string"},"sender":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Sender"},"subject":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Subject"},"url_count":{"title":"Url Count","type":"integer"}},"required":["primary_analysis_id","subject","sender","message_date","attachment_count","url_count","authentication"],"title":"EmailGroupSummary","type":"object"},"EmailHeaderOut":{"properties":{"decoding_status":{"title":"Decoding Status","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"is_truncated":{"title":"Is Truncated","type":"boolean"},"normalized_name":{"title":"Normalized Name","type":"string"},"ordinal":{"title":"Ordinal","type":"integer"},"original_name":{"title":"Original Name","type":"string"},"raw_end":{"title":"Raw End","type":"integer"},"raw_start":{"title":"Raw Start","type":"integer"},"raw_value_sha256":{"title":"Raw Value Sha256","type":"string"},"unfolded_value":{"title":"Unfolded Value","type":"string"}},"required":["id","ordinal","original_name","normalized_name","unfolded_value","raw_start","raw_end","raw_value_sha256","decoding_status","is_truncated"],"title":"EmailHeaderOut","type":"object"},"EmailLinkAnalysisDecisionKind":{"enum":["selected","duplicate","skipped"],"title":"EmailLinkAnalysisDecisionKind","type":"string"},"EmailMimePartOut":{"properties":{"charset":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Charset"},"content_disposition":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Content Disposition"},"content_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Content Id"},"content_location":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Content Location"},"content_type":{"title":"Content Type","type":"string"},"decode_status":{"title":"Decode Status","type":"string"},"decoded_download_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Decoded Download Url"},"decoded_sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Decoded Sha256"},"decoded_size_bytes":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Decoded Size Bytes"},"detected_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Detected Type"},"eligible_for_web":{"title":"Eligible For Web","type":"boolean"},"encoded_size_bytes":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Encoded Size Bytes"},"errors":{"items":{"type":"string"},"title":"Errors","type":"array"},"id":{"format":"uuid","title":"Id","type":"string"},"is_attachment":{"title":"Is Attachment","type":"boolean"},"is_body":{"title":"Is Body","type":"boolean"},"is_inline":{"title":"Is Inline","type":"boolean"},"is_nested_message":{"title":"Is Nested Message","type":"boolean"},"is_selected_body":{"title":"Is Selected Body","type":"boolean"},"is_truncated":{"title":"Is Truncated","type":"boolean"},"limit_reached":{"title":"Limit Reached","type":"boolean"},"mime_path":{"title":"Mime Path","type":"string"},"ordinal":{"title":"Ordinal","type":"integer"},"original_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Original Filename"},"parent_mime_path":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Parent Mime Path"},"parent_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Parent Part Id"},"parse_error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Parse Error"},"raw_body_start":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Raw Body Start"},"raw_download_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Raw Download Url"},"raw_end":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Raw End"},"raw_start":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Raw Start"},"sanitized_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Sanitized Filename"},"selection_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Selection Reason"},"storage_state":{"$ref":"#/components/schemas/EmailStorageState"},"transfer_encoding":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Transfer Encoding"}},"required":["id","parent_part_id","ordinal","mime_path","parent_mime_path","content_type","detected_type","content_disposition","transfer_encoding","charset","original_filename","sanitized_filename","content_id","content_location","encoded_size_bytes","raw_start","raw_end","raw_body_start","decoded_size_bytes","decoded_sha256","is_body","is_selected_body","is_attachment","is_inline","is_nested_message","eligible_for_web","decode_status","parse_error","errors","is_truncated","limit_reached","selection_reason","storage_state"],"title":"EmailMimePartOut","type":"object"},"EmailParserWarningOut":{"properties":{"code":{"title":"Code","type":"string"},"header_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Header Id"},"id":{"format":"uuid","title":"Id","type":"string"},"message":{"title":"Message","type":"string"},"mime_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Mime Part Id"},"ordinal":{"title":"Ordinal","type":"integer"},"severity":{"title":"Severity","type":"string"},"source":{"title":"Source","type":"string"},"source_end":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source End"},"source_start":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Start"}},"required":["id","ordinal","code","message","source","severity","mime_part_id","header_id","source_start","source_end"],"title":"EmailParserWarningOut","type":"object"},"EmailReceivedHopOut":{"properties":{"by_host":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"By Host"},"envelope_from":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Envelope From"},"from_host":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"From Host"},"header_id":{"format":"uuid","title":"Header Id","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"is_trusted":{"title":"Is Trusted","type":"boolean"},"message_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Message Id"},"ordinal":{"title":"Ordinal","type":"integer"},"parse_error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Parse Error"},"raw_value":{"title":"Raw Value","type":"string"},"recipient":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Recipient"},"source_ip":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Ip"},"timestamp":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Timestamp"},"with_protocol":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"With Protocol"}},"required":["id","header_id","ordinal","raw_value","from_host","by_host","with_protocol","envelope_from","recipient","message_id","timestamp","source_ip","is_trusted","parse_error"],"title":"EmailReceivedHopOut","type":"object"},"EmailRunStatus":{"enum":["pending","running","completed","completed_partial","failed"],"title":"EmailRunStatus","type":"string"},"EmailSemanticObservationOut":{"properties":{"affects_category":{"const":false,"default":false,"title":"Affects Category","type":"boolean"},"category":{"anyOf":[{"$ref":"#/components/schemas/Category"},{"type":"null"}]},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"id":{"format":"uuid","title":"Id","type":"string"},"input_digest":{"title":"Input Digest","type":"string"},"model_sha256":{"title":"Model Sha256","type":"string"},"processing_status":{"title":"Processing Status","type":"string"},"prompt_version":{"title":"Prompt Version","type":"string"},"reasons":{"items":{"type":"string"},"title":"Reasons","type":"array"},"runtime_sha256":{"title":"Runtime Sha256","type":"string"},"selection":{"title":"Selection","type":"string"}},"required":["id","processing_status","selection","category","reasons","model_sha256","runtime_sha256","prompt_version","input_digest","finished_at"],"title":"EmailSemanticObservationOut","type":"object"},"EmailSpfResultOut":{"properties":{"authenticated_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Authenticated Domain"},"client_ip":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Client Ip"},"evidence_class":{"$ref":"#/components/schemas/EmailEvidenceClass"},"helo_identity":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Helo Identity"},"id":{"format":"uuid","title":"Id","type":"string"},"input_provenance":{"additionalProperties":true,"title":"Input Provenance","type":"object"},"lookup_count":{"title":"Lookup Count","type":"integer"},"mail_from_identity":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Mail From Identity"},"ordinal":{"title":"Ordinal","type":"integer"},"reason_codes":{"items":{"type":"string"},"title":"Reason Codes","type":"array"},"receiver_identity":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Receiver Identity"},"relaxed_alignment":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Relaxed Alignment"},"result":{"title":"Result","type":"string"},"scope":{"title":"Scope","type":"string"},"strict_alignment":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Strict Alignment"},"void_lookup_count":{"title":"Void Lookup Count","type":"integer"}},"required":["id","ordinal","evidence_class","result","scope","client_ip","helo_identity","mail_from_identity","receiver_identity","input_provenance","authenticated_domain","strict_alignment","relaxed_alignment","lookup_count","void_lookup_count","reason_codes"],"title":"EmailSpfResultOut","type":"object"},"EmailStorageState":{"enum":["not_retained","retained","failed"],"title":"EmailStorageState","type":"string"},"EmailUrlOut":{"properties":{"analysis_decision":{"anyOf":[{"$ref":"#/components/schemas/EmailLinkAnalysisDecisionKind"},{"type":"null"}]},"analysis_skip_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Skip Reason"},"analysis_target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Target Url"},"display_text":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Display Text"},"effective_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Effective Domain"},"effective_punycode_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Effective Punycode Domain"},"effective_scheme":{"title":"Effective Scheme","type":"string"},"effective_unicode_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Effective Unicode Domain"},"effective_url":{"title":"Effective Url","type":"string"},"has_display_mismatch":{"title":"Has Display Mismatch","type":"boolean"},"host":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Host"},"id":{"format":"uuid","title":"Id","type":"string"},"is_truncated":{"title":"Is Truncated","type":"boolean"},"linked_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Linked Analysis Id"},"mime_part_id":{"format":"uuid","title":"Mime Part Id","type":"string"},"normalized_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Normalized Domain"},"normalized_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Normalized Url"},"observed_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Observed Domain"},"observed_punycode_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Observed Punycode Domain"},"observed_scheme":{"title":"Observed Scheme","type":"string"},"observed_unicode_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Observed Unicode Domain"},"observed_url":{"title":"Observed Url","type":"string"},"ordinal":{"title":"Ordinal","type":"integer"},"part_ordinal":{"title":"Part Ordinal","type":"integer"},"punycode_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Punycode Domain"},"raw_url":{"title":"Raw Url","type":"string"},"redirect_complete":{"title":"Redirect Complete","type":"boolean"},"redirect_hops":{"items":{"type":"string"},"title":"Redirect Hops","type":"array"},"redirect_stop_reason":{"title":"Redirect Stop Reason","type":"string"},"resolved_mime_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Resolved Mime Part Id"},"scheme":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Scheme"},"source_kind":{"title":"Source Kind","type":"string"},"unicode_domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Unicode Domain"},"visible_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Visible Url"}},"required":["id","mime_part_id","resolved_mime_part_id","ordinal","part_ordinal","source_kind","raw_url","normalized_url","scheme","host","normalized_domain","unicode_domain","punycode_domain","observed_url","observed_scheme","observed_domain","observed_unicode_domain","observed_punycode_domain","effective_url","effective_scheme","effective_domain","effective_unicode_domain","effective_punycode_domain","redirect_hops","redirect_stop_reason","redirect_complete","display_text","visible_url","has_display_mismatch","is_truncated"],"title":"EmailUrlOut","type":"object"},"EmlAcceptedResponse":{"description":"Identifiers for an accepted EML group.","properties":{"group_id":{"format":"uuid","title":"Group Id","type":"string"},"operation_id":{"format":"uuid","title":"Operation Id","type":"string"},"primary_analysis_id":{"format":"uuid","title":"Primary Analysis Id","type":"string"},"status":{"$ref":"#/components/schemas/AnalysisGroupStatus"}},"required":["group_id","primary_analysis_id","operation_id","status"],"title":"EmlAcceptedResponse","type":"object"},"ErrorBody":{"properties":{"code":{"title":"Code","type":"string"},"details":{"title":"Details"},"message":{"title":"Message","type":"string"},"request_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Request Id"}},"required":["code","message"],"title":"ErrorBody","type":"object"},"ErrorResponse":{"properties":{"error":{"$ref":"#/components/schemas/ErrorBody"}},"required":["error"],"title":"ErrorResponse","type":"object"},"EvaluationCompleteness":{"enum":["unknown","complete","partial"],"title":"EvaluationCompleteness","type":"string"},"EvaluationStatus":{"enum":["pending","running","completed","completed_partial","failed"],"title":"EvaluationStatus","type":"string"},"EvaluationVerdict":{"enum":["unknown","benign","suspicious","malicious"],"title":"EvaluationVerdict","type":"string"},"EvidenceCoverage":{"additionalProperties":false,"description":"Coverage of one collection source, independent of the verdict.","properties":{"failures":{"default":0,"minimum":0,"title":"Failures","type":"integer"},"limit":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"title":"Limit"},"omitted":{"default":0,"minimum":0,"title":"Omitted","type":"integer"},"reasons":{"default":[],"items":{"type":"string"},"title":"Reasons","type":"array"},"retained":{"default":0,"minimum":0,"title":"Retained","type":"integer"},"status":{"default":"legacy_unknown","enum":["complete","partial","unavailable","legacy_unknown"],"title":"Status","type":"string"},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Version"}},"title":"EvidenceCoverage","type":"object"},"ExecutionKind":{"description":"How the engine processed the analysis input.","enum":["capture","replay","static"],"title":"ExecutionKind","type":"string"},"ExecutionOutcomeStatus":{"enum":["running","succeeded","completed_partial","failed","cancelled","abandoned"],"title":"ExecutionOutcomeStatus","type":"string"},"ExecutionOutcomeSummary":{"properties":{"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"failure_class":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Failure Class"},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"id":{"format":"uuid","title":"Id","type":"string"},"proxy_checked_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Proxy Checked At"},"proxy_evidence_source":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Proxy Evidence Source"},"proxy_expected_country_match":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Proxy Expected Country Match"},"proxy_observed_country":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Proxy Observed Country"},"proxy_observed_ip":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Proxy Observed Ip"},"proxy_profile_id":{"title":"Proxy Profile Id","type":"string"},"proxy_status":{"title":"Proxy Status","type":"string"},"route":{"$ref":"#/components/schemas/ExecutionRoute"},"started_at":{"title":"Started At","type":"string"},"status":{"$ref":"#/components/schemas/ExecutionOutcomeStatus"}},"required":["id","route","proxy_profile_id","status","started_at","finished_at","failure_class","error","proxy_status","proxy_checked_at","proxy_observed_ip","proxy_observed_country","proxy_evidence_source","proxy_expected_country_match"],"title":"ExecutionOutcomeSummary","type":"object"},"ExecutionRoute":{"enum":["direct","replay","proxy"],"title":"ExecutionRoute","type":"string"},"FailureClass":{"enum":["transient","permanent","timeout","resource_limit","worker_lost","cancelled"],"title":"FailureClass","type":"string"},"FaviconOut":{"description":"One captured favicon candidate with source provenance.","properties":{"content_url":{"title":"Content Url","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"mime":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Mime"},"rel":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Rel"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"selected":{"title":"Selected","type":"boolean"},"selection_policy_version":{"title":"Selection Policy Version","type":"string"},"selection_rank":{"title":"Selection Rank","type":"integer"},"sha256":{"title":"Sha256","type":"string"},"size_bytes":{"title":"Size Bytes","type":"integer"},"source_document_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Document Url"},"source_type":{"title":"Source Type","type":"string"},"url":{"title":"Url","type":"string"},"warc_length":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Length"},"warc_member":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Member"},"warc_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Offset"},"warc_record_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Record Id"}},"required":["id","request_id","url","mime","sha256","size_bytes","source_type","rel","source_document_url","warc_record_id","warc_member","warc_offset","warc_length","selected","selection_rank","selection_policy_version","content_url"],"title":"FaviconOut","type":"object"},"FaviconSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"match":{"$ref":"#/components/schemas/SearchMatch"},"mime":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Mime"},"sha256":{"title":"Sha256","type":"string"},"size_bytes":{"title":"Size Bytes","type":"integer"},"source_type":{"title":"Source Type","type":"string"},"title":{"title":"Title","type":"string"},"type":{"const":"favicon","title":"Type","type":"string"}},"required":["id","title","href","match","type","sha256","mime","size_bytes","source_type"],"title":"FaviconSearchResult","type":"object"},"GroupSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"created_at":{"title":"Created At","type":"string"},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"match":{"$ref":"#/components/schemas/SearchMatch"},"origin":{"$ref":"#/components/schemas/AnalysisGroupOrigin"},"source_filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Source Filename"},"status":{"$ref":"#/components/schemas/AnalysisGroupStatus"},"title":{"title":"Title","type":"string"},"type":{"const":"group","title":"Type","type":"string"}},"required":["id","title","href","match","type","status","origin","source_filename","created_at"],"title":"GroupSearchResult","type":"object"},"GrowthPoint":{"properties":{"count":{"title":"Count","type":"integer"},"day":{"title":"Day","type":"string"}},"required":["day","count"],"title":"GrowthPoint","type":"object"},"GrowthResponse":{"properties":{"available":{"title":"Available","type":"boolean"},"points":{"items":{"$ref":"#/components/schemas/GrowthPoint"},"title":"Points","type":"array"}},"required":["available","points"],"title":"GrowthResponse","type":"object"},"GuestUsageSummaryOut":{"properties":{"active_operations":{"title":"Active Operations","type":"integer"},"daily_submission_limit":{"title":"Daily Submission Limit","type":"integer"},"max_active_operations":{"title":"Max Active Operations","type":"integer"},"period_end":{"title":"Period End","type":"string"},"period_start":{"title":"Period Start","type":"string"},"read_limits":{"$ref":"#/components/schemas/ReadLimitsOut"},"submissions_remaining":{"title":"Submissions Remaining","type":"integer"},"submissions_used":{"title":"Submissions Used","type":"integer"}},"required":["daily_submission_limit","submissions_used","submissions_remaining","period_start","period_end","active_operations","max_active_operations","read_limits"],"title":"GuestUsageSummaryOut","type":"object"},"HostingCountriesResponse":{"properties":{"available":{"title":"Available","type":"boolean"},"items":{"items":{"$ref":"#/components/schemas/DistributionItem"},"title":"Items","type":"array"},"total_analyses":{"title":"Total Analyses","type":"integer"},"unknown_country_analyses":{"title":"Unknown Country Analyses","type":"integer"}},"required":["available","total_analyses","unknown_country_analyses","items"],"title":"HostingCountriesResponse","type":"object"},"IdentifierGlobalOut":{"description":"An identifier with its analysis context.","properties":{"analysis_created_at":{"title":"Analysis Created At","type":"string"},"analysis_final_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Final Url"},"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"analysis_target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Target Url"},"analysis_title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Title"},"context_preview":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Context Preview"},"created_at":{"title":"Created At","type":"string"},"extraction_version":{"title":"Extraction Version","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"kind":{"anyOf":[{"$ref":"#/components/schemas/IdentifierKind"},{"enum":["embedded_url","emailjs_credential_exfiltration","remote_phishing_anti_analysis","remote_phishing_workflow","suspicious_field_name","synthetic_credential_echo","telegram_session_theft"],"type":"string"}],"title":"Kind"},"normalized_value":{"title":"Normalized Value","type":"string"},"occurrence_count":{"title":"Occurrence Count","type":"integer"},"operator_surface":{"description":"True when the identifier comes from the submitted registrable domain, or from a request body that a page of that domain sent. Similarity and actor linkage use only these identifiers. False marks a value from another site, such as the real brand site that a kit opens at the end of its flow.","title":"Operator Surface","type":"boolean"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"resource_url":{"title":"Resource Url","type":"string"},"source_truncated":{"title":"Source Truncated","type":"boolean"},"source_type":{"title":"Source Type","type":"string"},"value":{"title":"Value","type":"string"},"warc_member":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Member"},"warc_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Offset"},"warc_record_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Record Id"},"warc_request_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Request Id"}},"required":["id","analysis_id","request_id","kind","value","normalized_value","resource_url","warc_record_id","warc_request_id","warc_member","warc_offset","source_type","context_preview","source_truncated","extraction_version","occurrence_count","created_at","operator_surface","analysis_title","analysis_target_url","analysis_final_url","analysis_created_at"],"title":"IdentifierGlobalOut","type":"object"},"IdentifierKind":{"enum":["campaign_token","discord_webhook_id","discord_webhook_token","emailjs_service_id","emailjs_template_id","formspark_form_id","meta_pixel_id","google_tag_manager","google_ga4_measurement","google_ua_property","google_ads_conversion","google_adsense_publisher","cloudflare_web_analytics","cloudflare_turnstile_sitekey","telegram_bot_token","telegram_chat_id","telegram_username","telegram_invite","telegram_api_id","telegram_api_hash","whatsapp_phone_number","scam_contact_phone_number","zalo_app_id","zalo_app_secret_key","wallet_evm","wallet_bitcoin","wallet_solana","wallet_tron","operator_mirror_domain"],"title":"IdentifierKind","type":"string"},"IdentifierOut":{"description":"One normalized identifier.","properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"context_preview":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Context Preview"},"created_at":{"title":"Created At","type":"string"},"extraction_version":{"title":"Extraction Version","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"kind":{"anyOf":[{"$ref":"#/components/schemas/IdentifierKind"},{"enum":["embedded_url","emailjs_credential_exfiltration","remote_phishing_anti_analysis","remote_phishing_workflow","suspicious_field_name","synthetic_credential_echo","telegram_session_theft"],"type":"string"}],"title":"Kind"},"normalized_value":{"title":"Normalized Value","type":"string"},"occurrence_count":{"title":"Occurrence Count","type":"integer"},"operator_surface":{"description":"True when the identifier comes from the submitted registrable domain, or from a request body that a page of that domain sent. Similarity and actor linkage use only these identifiers. False marks a value from another site, such as the real brand site that a kit opens at the end of its flow.","title":"Operator Surface","type":"boolean"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"resource_url":{"title":"Resource Url","type":"string"},"source_truncated":{"title":"Source Truncated","type":"boolean"},"source_type":{"title":"Source Type","type":"string"},"value":{"title":"Value","type":"string"},"warc_member":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Member"},"warc_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Offset"},"warc_record_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Record Id"},"warc_request_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Request Id"}},"required":["id","analysis_id","request_id","kind","value","normalized_value","resource_url","warc_record_id","warc_request_id","warc_member","warc_offset","source_type","context_preview","source_truncated","extraction_version","occurrence_count","created_at","operator_surface"],"title":"IdentifierOut","type":"object"},"IdentifierSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"context_preview":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Context Preview"},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"kind":{"title":"Kind","type":"string"},"match":{"$ref":"#/components/schemas/SearchMatch"},"occurrence_count":{"title":"Occurrence Count","type":"integer"},"source_type":{"title":"Source Type","type":"string"},"title":{"title":"Title","type":"string"},"type":{"const":"identifier","title":"Type","type":"string"}},"required":["id","title","href","match","type","kind","source_type","occurrence_count","context_preview"],"title":"IdentifierSearchResult","type":"object"},"InfrastructureEndpointObservationOut":{"description":"One source observation in a grouped infrastructure endpoint.","properties":{"id":{"format":"uuid","title":"Id","type":"string"},"navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Navigation Index"},"observed_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Observed At"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"role":{"$ref":"#/components/schemas/InfrastructureEndpointRole"},"source":{"title":"Source","type":"string"},"url":{"title":"Url","type":"string"}},"required":["id","request_id","role","url","source","observed_at"],"title":"InfrastructureEndpointObservationOut","type":"object"},"InfrastructureEndpointOut":{"description":"One grouped infrastructure endpoint and its technologies.","properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"asn":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Asn"},"country":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Country"},"domain":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Domain"},"host":{"title":"Host","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"index":{"title":"Index","type":"integer"},"ip":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Ip"},"navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Navigation Index"},"network_prefix":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Network Prefix"},"observation_count":{"default":1,"title":"Observation Count","type":"integer"},"observations":{"items":{"$ref":"#/components/schemas/InfrastructureEndpointObservationOut"},"title":"Observations","type":"array"},"observed_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Observed At"},"org":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Org"},"port":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Port"},"provider":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Provider"},"provider_kind":{"$ref":"#/components/schemas/InfrastructureProviderKind"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"role":{"$ref":"#/components/schemas/InfrastructureEndpointRole"},"roles":{"items":{"$ref":"#/components/schemas/InfrastructureEndpointRole"},"title":"Roles","type":"array"},"source":{"title":"Source","type":"string"},"source_metadata":{"additionalProperties":true,"title":"Source Metadata","type":"object"},"technologies":{"items":{"$ref":"#/components/schemas/TechnologyObservationOut"},"title":"Technologies","type":"array"},"url":{"title":"Url","type":"string"}},"required":["id","analysis_id","request_id","index","role","url","host","domain","ip","port","asn","org","provider","provider_kind","country","network_prefix","source","source_metadata","observed_at"],"title":"InfrastructureEndpointOut","type":"object"},"InfrastructureEndpointRole":{"enum":["entry","navigation","final"],"title":"InfrastructureEndpointRole","type":"string"},"InfrastructureProviderKind":{"enum":["hosting","cloud","cdn","isp","proxy","vpn","unknown"],"title":"InfrastructureProviderKind","type":"string"},"InfrastructureSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"asn":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Asn"},"country":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Country"},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"ip":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Ip"},"match":{"$ref":"#/components/schemas/SearchMatch"},"org":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Org"},"provider":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Provider"},"role":{"$ref":"#/components/schemas/InfrastructureEndpointRole"},"title":{"title":"Title","type":"string"},"type":{"const":"infrastructure","title":"Type","type":"string"}},"required":["id","title","href","match","type","role","ip","asn","org","provider","country"],"title":"InfrastructureSearchResult","type":"object"},"InputKind":{"description":"The type of submitted analysis input.","enum":["url","html","wacz","eml"],"title":"InputKind","type":"string"},"InteractionActionSummary":{"description":"One recorded autopilot action, without any value the autopilot typed.","properties":{"control_descriptor":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Control Descriptor"},"credential_field":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Credential Field"},"kind":{"title":"Kind","type":"string"},"outcome":{"title":"Outcome","type":"string"},"sequence":{"title":"Sequence","type":"integer"}},"required":["sequence","kind","outcome"],"title":"InteractionActionSummary","type":"object"},"InteractionCoverage":{"properties":{"action_count":{"default":0,"title":"Action Count","type":"integer"},"actions":{"items":{"$ref":"#/components/schemas/InteractionActionSummary"},"title":"Actions","type":"array"},"payload_stop_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"description":"Why the download-control stage stopped. A successful press does not prove file delivery.","title":"Payload Stop Reason"},"stop_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Stop Reason"},"submission_count":{"default":0,"title":"Submission Count","type":"integer"},"unclassified_required_controls":{"items":{"$ref":"#/components/schemas/UnclassifiedControl"},"title":"Unclassified Required Controls","type":"array"}},"title":"InteractionCoverage","type":"object"},"JavaScriptFunctionGlobalOut":{"description":"A function occurrence with its analysis context.","properties":{"analysis_created_at":{"title":"Analysis Created At","type":"string"},"analysis_final_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Final Url"},"analysis_group_id":{"format":"uuid","title":"Analysis Group Id","type":"string"},"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"analysis_kind":{"$ref":"#/components/schemas/AnalysisKind"},"analysis_status":{"$ref":"#/components/schemas/AnalysisStatus"},"analysis_target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Target Url"},"analysis_title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Analysis Title"},"body_end_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Body End Offset"},"body_start_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Body Start Offset"},"created_at":{"title":"Created At","type":"string"},"cyclomatic_complexity":{"title":"Cyclomatic Complexity","type":"integer"},"end_offset":{"title":"End Offset","type":"integer"},"extraction_version":{"title":"Extraction Version","type":"string"},"fingerprint_sha256":{"title":"Fingerprint Sha256","type":"string"},"fingerprint_version":{"title":"Fingerprint Version","type":"string"},"function_kind":{"title":"Function Kind","type":"string"},"function_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Function Name"},"id":{"format":"uuid","title":"Id","type":"string"},"inline_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Inline Index"},"line_count":{"title":"Line Count","type":"integer"},"low_information":{"title":"Low Information","type":"boolean"},"max_nesting_depth":{"title":"Max Nesting Depth","type":"integer"},"parameter_count":{"title":"Parameter Count","type":"integer"},"parser_name":{"title":"Parser Name","type":"string"},"parser_version":{"title":"Parser Version","type":"string"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"resource_url":{"title":"Resource Url","type":"string"},"source_kind":{"title":"Source Kind","type":"string"},"source_length":{"title":"Source Length","type":"integer"},"source_sha256":{"title":"Source Sha256","type":"string"},"start_offset":{"title":"Start Offset","type":"integer"},"statement_count":{"title":"Statement Count","type":"integer"},"suppressed":{"title":"Suppressed","type":"boolean"},"suppression_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Suppression Reason"},"suppression_source":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Suppression Source"},"valid_from_generation":{"title":"Valid From Generation","type":"integer"},"warc_length":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Length"},"warc_member":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Member"},"warc_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Offset"},"warc_record_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Record Id"},"warc_request_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Request Id"}},"required":["id","analysis_id","request_id","fingerprint_sha256","fingerprint_version","source_sha256","resource_url","warc_record_id","warc_request_id","warc_member","warc_offset","warc_length","source_kind","inline_index","function_name","function_kind","start_offset","end_offset","body_start_offset","body_end_offset","source_length","line_count","parameter_count","statement_count","cyclomatic_complexity","max_nesting_depth","parser_name","parser_version","extraction_version","low_information","suppressed","suppression_reason","suppression_source","valid_from_generation","created_at","analysis_group_id","analysis_kind","analysis_status","analysis_title","analysis_target_url","analysis_final_url","analysis_created_at"],"title":"JavaScriptFunctionGlobalOut","type":"object"},"JavaScriptFunctionSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"fingerprint_sha256":{"title":"Fingerprint Sha256","type":"string"},"function_kind":{"title":"Function Kind","type":"string"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"match":{"$ref":"#/components/schemas/SearchMatch"},"resource_url":{"title":"Resource Url","type":"string"},"source_kind":{"title":"Source Kind","type":"string"},"title":{"title":"Title","type":"string"},"type":{"const":"javascript_function","title":"Type","type":"string"}},"required":["id","title","href","match","type","function_kind","source_kind","resource_url","fingerprint_sha256"],"title":"JavaScriptFunctionSearchResult","type":"object"},"NavigationChildCreateRequest":{"description":"A manual request to capture one stored navigation.","properties":{"idempotency_key":{"maxLength":128,"minLength":1,"title":"Idempotency Key","type":"string"},"source_mode":{"default":"live_url","enum":["live_url","parent_wacz"],"title":"Source Mode","type":"string"}},"required":["idempotency_key"],"title":"NavigationChildCreateRequest","type":"object"},"NavigationChildEligibilityOut":{"description":"Available source modes and stable rejection reasons for one navigation.","properties":{"eligible_source_modes":{"items":{"enum":["live_url","parent_wacz"],"type":"string"},"title":"Eligible Source Modes","type":"array"},"navigation_id":{"format":"uuid","title":"Navigation Id","type":"string"},"rejection_reasons":{"additionalProperties":{"type":"string"},"title":"Rejection Reasons","type":"object"}},"required":["navigation_id","eligible_source_modes","rejection_reasons"],"title":"NavigationChildEligibilityOut","type":"object"},"NavigationChildResponse":{"description":"The durable relationship and queued child work.","properties":{"child_analysis_id":{"format":"uuid","title":"Child Analysis Id","type":"string"},"effective_settings":{"additionalProperties":true,"title":"Effective Settings","type":"object"},"normalized_target":{"title":"Normalized Target","type":"string"},"operation_id":{"format":"uuid","title":"Operation Id","type":"string"},"relationship_id":{"format":"uuid","title":"Relationship Id","type":"string"},"source_mode":{"title":"Source Mode","type":"string"},"source_navigation_id":{"format":"uuid","title":"Source Navigation Id","type":"string"},"source_navigation_index":{"title":"Source Navigation Index","type":"integer"},"source_url":{"title":"Source Url","type":"string"},"source_web_fact_generation":{"title":"Source Web Fact Generation","type":"integer"},"state":{"title":"State","type":"string"}},"required":["relationship_id","child_analysis_id","operation_id","state","source_mode","source_navigation_id","source_navigation_index","source_web_fact_generation","source_url","normalized_target","effective_settings"],"title":"NavigationChildResponse","type":"object"},"NavigationOut":{"description":"One committed main-frame document.\n\n``index`` is the public identifier of a navigation and is what every filter\ntakes. ``chain_index`` groups the hops of one HTTP redirect chain, so a\nclient can collapse ``a?id=1 -> www.a -> google`` into one row when it\nwants the summary and expand it when it wants the hops.","properties":{"cause_kind":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Cause Kind"},"cause_stack_top":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Cause Stack Top"},"chain_index":{"title":"Chain Index","type":"integer"},"ended_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Ended At"},"frame_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Frame Url"},"http_status":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Http Status"},"id":{"format":"uuid","title":"Id","type":"string"},"index":{"title":"Index","type":"integer"},"redirected_from_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Redirected From Url"},"registrable_domain":{"title":"Registrable Domain","type":"string"},"request_count":{"default":0,"title":"Request Count","type":"integer"},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"trigger":{"$ref":"#/components/schemas/NavigationTrigger"},"unsafe_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Unsafe Reason"},"url":{"title":"Url","type":"string"}},"required":["id","index","chain_index","url","frame_url","registrable_domain","trigger","http_status","redirected_from_url","unsafe_reason","started_at","ended_at"],"title":"NavigationOut","type":"object"},"NavigationTrigger":{"description":"What moved the browser into a navigation.\n\nTaken from Chromium itself, through the CDP event\n``Page.frameRequestedNavigation``, so unlike a hook in the page realm it\ncannot be defeated by the page. ``UNKNOWN`` means the browser gave no\nreason, never that nothing happened.","enum":["initial","http_redirect","js_location","meta_refresh","form_submit","anchor_click","reload","window_open","same_document","unknown"],"title":"NavigationTrigger","type":"string"},"OperationOut":{"properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"attempts":{"items":{"$ref":"#/components/schemas/TaskAttemptOut"},"title":"Attempts","type":"array"},"cancel_requested_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Cancel Requested At"},"created_at":{"title":"Created At","type":"string"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"failure_class":{"anyOf":[{"$ref":"#/components/schemas/FailureClass"},{"type":"null"}]},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"heartbeat_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Heartbeat At"},"id":{"format":"uuid","title":"Id","type":"string"},"parent_operation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Parent Operation Id"},"source_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Analysis Id"},"started_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Started At"},"status":{"$ref":"#/components/schemas/OperationStatus"},"type":{"$ref":"#/components/schemas/OperationType"}},"required":["id","analysis_id","source_analysis_id","parent_operation_id","type","status","created_at","started_at","heartbeat_at","finished_at","cancel_requested_at","failure_class","error","attempts"],"title":"OperationOut","type":"object"},"OperationStatus":{"enum":["pending","running","succeeded","failed","cancelled"],"title":"OperationStatus","type":"string"},"OperationType":{"enum":["submit","retry","replay","recapture","refresh","rescore","reparse","offline_reauthenticate","refresh_authentication","navigation_expand","rdap_enrich","email_categorize","email_semantic"],"title":"OperationType","type":"string"},"Overview":{"properties":{"analyses_last_24h":{"title":"Analyses Last 24H","type":"integer"},"available":{"title":"Available","type":"boolean"},"completed":{"title":"Completed","type":"integer"},"failed":{"title":"Failed","type":"integer"},"running":{"title":"Running","type":"integer"},"total_analyses":{"title":"Total Analyses","type":"integer"},"total_signals":{"title":"Total Signals","type":"integer"}},"required":["available","total_analyses","completed","failed","running","total_signals","analyses_last_24h"],"title":"Overview","type":"object"},"PageJourney":{"additionalProperties":false,"properties":{"completeness_reasons":{"default":[],"items":{"type":"string"},"title":"Completeness Reasons","type":"array"},"pages":{"default":[],"items":{"$ref":"#/components/schemas/PageRole"},"title":"Pages","type":"array"},"policy_version":{"default":"page-journey-v4","title":"Policy Version","type":"string"},"representative_captured_at":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Representative Captured At"},"representative_milestone":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Representative Milestone"},"representative_navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Representative Navigation Index"},"representative_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Representative Url"},"selection_reason":{"default":"no_attributed_snapshot","title":"Selection Reason","type":"string"}},"title":"PageJourney","type":"object"},"PageRole":{"additionalProperties":false,"properties":{"evidence_request_indexes":{"default":[],"items":{"type":"integer"},"title":"Evidence Request Indexes","type":"array"},"is_entry":{"default":false,"title":"Is Entry","type":"boolean"},"is_terminal":{"default":false,"title":"Is Terminal","type":"boolean"},"navigation_index":{"title":"Navigation Index","type":"integer"},"reason":{"title":"Reason","type":"string"},"role":{"enum":["delivery","content","suspected_exit","external_interaction","unknown"],"title":"Role","type":"string"},"source_navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Navigation Index"}},"required":["navigation_index","role","reason"],"title":"PageRole","type":"object"},"PageSnapshotOut":{"properties":{"canonical_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Canonical Url"},"captured_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Captured At"},"declared_language":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Declared Language"},"detected_language":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Detected Language"},"detected_language_confidence":{"anyOf":[{"type":"number"},{"type":"null"}],"title":"Detected Language Confidence"},"detected_language_source":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Detected Language Source"},"forms":{"items":{"additionalProperties":true,"type":"object"},"title":"Forms","type":"array"},"frames":{"items":{"additionalProperties":true,"type":"object"},"title":"Frames","type":"array"},"global_names":{"items":{"type":"string"},"title":"Global Names","type":"array"},"global_names_coverage":{"additionalProperties":true,"title":"Global Names Coverage","type":"object"},"id":{"format":"uuid","title":"Id","type":"string"},"inputs":{"items":{"additionalProperties":true,"type":"object"},"title":"Inputs","type":"array"},"language_detection_input_length":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Language Detection Input Length"},"language_detector_version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Language Detector Version"},"links":{"items":{"additionalProperties":true,"type":"object"},"title":"Links","type":"array"},"milestone":{"title":"Milestone","type":"string"},"navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Navigation Index"},"page_url":{"title":"Page Url","type":"string"},"qr_code_scan":{"$ref":"#/components/schemas/QrCodeScanRecord"},"screenshot_ms_after_navigation":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Screenshot Ms After Navigation"},"screenshot_position":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Screenshot Position"},"screenshot_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Screenshot Url"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"},"valid_from_generation":{"default":0,"title":"Valid From Generation","type":"integer"},"valid_to_generation":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Valid To Generation"},"visible_text_length":{"title":"Visible Text Length","type":"integer"},"visible_text_preview":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Visible Text Preview"},"visible_text_sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Visible Text Sha256"}},"required":["id","milestone","page_url","title","declared_language","detected_language","detected_language_confidence","detected_language_source","language_detector_version","language_detection_input_length","canonical_url","visible_text_preview","visible_text_sha256","visible_text_length","forms","inputs","links","frames","captured_at","screenshot_position","screenshot_ms_after_navigation"],"title":"PageSnapshotOut","type":"object"},"Page_ActorOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/ActorOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[ActorOut]","type":"object"},"Page_AnalysisEvaluationSummary_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/AnalysisEvaluationSummary"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[AnalysisEvaluationSummary]","type":"object"},"Page_AnalysisGroupSummary_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/AnalysisGroupSummary"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[AnalysisGroupSummary]","type":"object"},"Page_AnalysisSummary_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/AnalysisSummary"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[AnalysisSummary]","type":"object"},"Page_BehaviorEventOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/BehaviorEventOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[BehaviorEventOut]","type":"object"},"Page_BrandOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/BrandOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[BrandOut]","type":"object"},"Page_ClusterMemberOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/ClusterMemberOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[ClusterMemberOut]","type":"object"},"Page_CookieObservationOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/CookieObservationOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[CookieObservationOut]","type":"object"},"Page_EmailAttachmentOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/EmailAttachmentOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[EmailAttachmentOut]","type":"object"},"Page_EmailAuthenticationRunSummary_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/EmailAuthenticationRunSummary"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[EmailAuthenticationRunSummary]","type":"object"},"Page_EmailHeaderOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/EmailHeaderOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[EmailHeaderOut]","type":"object"},"Page_EmailMimePartOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/EmailMimePartOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[EmailMimePartOut]","type":"object"},"Page_EmailReceivedHopOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/EmailReceivedHopOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[EmailReceivedHopOut]","type":"object"},"Page_EmailUrlOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/EmailUrlOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[EmailUrlOut]","type":"object"},"Page_FaviconOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/FaviconOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[FaviconOut]","type":"object"},"Page_IdentifierGlobalOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/IdentifierGlobalOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[IdentifierGlobalOut]","type":"object"},"Page_IdentifierOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/IdentifierOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[IdentifierOut]","type":"object"},"Page_InfrastructureEndpointOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/InfrastructureEndpointOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[InfrastructureEndpointOut]","type":"object"},"Page_JavaScriptFunctionGlobalOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/JavaScriptFunctionGlobalOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[JavaScriptFunctionGlobalOut]","type":"object"},"Page_PayloadOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/PayloadOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[PayloadOut]","type":"object"},"Page_PhishingKitOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/PhishingKitOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[PhishingKitOut]","type":"object"},"Page_RequestOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/RequestOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[RequestOut]","type":"object"},"Page_SignalOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/SignalOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[SignalOut]","type":"object"},"Page_TlsCertificateOut_":{"properties":{"items":{"items":{"$ref":"#/components/schemas/TlsCertificateOut"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"total":{"title":"Total","type":"integer"}},"required":["items","total","limit","offset"],"title":"Page[TlsCertificateOut]","type":"object"},"PayloadOut":{"description":"One file the target delivered to the browser.\n\n``kind`` is the only field that describes the content. ``filename``,\n``declared_mime``, and ``content_disposition`` are claims by the analysed\npage, so ``filename_source`` records where the name came from.\n\n``digests_identify_file`` is false for a truncated record. The digests\nthen describe the recorded bytes only, so they must not be used to look\nup the delivered file in an external source.","properties":{"acquisition":{"enum":["interaction_click","navigation","passive"],"title":"Acquisition","type":"string"},"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"bytes_deleted_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Bytes Deleted At"},"bytes_expire_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Bytes Expire At"},"bytes_state":{"enum":["available","expired","not_stored"],"title":"Bytes State","type":"string"},"completeness":{"enum":["complete","truncated","unknown","missing"],"title":"Completeness","type":"string"},"content_disposition":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Content Disposition"},"declared_mime":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Declared Mime"},"digests_identify_file":{"title":"Digests Identify File","type":"boolean"},"filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Filename"},"filename_source":{"anyOf":[{"enum":["content_disposition","download_attribute","browser_suggested","url_path"],"type":"string"},{"type":"null"}],"title":"Filename Source"},"host":{"title":"Host","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"is_third_party":{"title":"Is Third Party","type":"boolean"},"kind":{"enum":["pe","elf","macho","apk","zip","rar","seven_zip","gzip","cab","msi","ole","pdf","script","shortcut","unknown"],"title":"Kind","type":"string"},"md5":{"title":"Md5","type":"string"},"navigation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Navigation Id"},"not_stored_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Not Stored Reason"},"observed_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Observed At"},"registrable_domain":{"title":"Registrable Domain","type":"string"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"sha1":{"title":"Sha1","type":"string"},"sha256":{"title":"Sha256","type":"string"},"size_bytes":{"title":"Size Bytes","type":"integer"},"url":{"title":"Url","type":"string"},"virustotal_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Virustotal Url"}},"required":["id","analysis_id","url","host","registrable_domain","is_third_party","sha256","sha1","md5","size_bytes","kind","completeness","acquisition","digests_identify_file","bytes_state"],"title":"PayloadOut","type":"object"},"PhishingKitDetailOut":{"description":"A derived phishing kit with its scalar statistics.","properties":{"authoritative":{"title":"Authoritative","type":"boolean"},"brand_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Brand Summary","type":"array"},"built_at":{"title":"Built At","type":"string"},"codename":{"title":"Codename","type":"string"},"degraded":{"title":"Degraded","type":"boolean"},"domain_count":{"title":"Domain Count","type":"integer"},"evidence_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Evidence Summary","type":"array"},"first_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"First Seen At"},"insights":{"$ref":"#/components/schemas/ClusterInsights"},"kit_names":{"items":{"type":"string"},"title":"Kit Names","type":"array"},"kit_threshold":{"title":"Kit Threshold","type":"integer"},"last_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Seen At"},"max_score":{"title":"Max Score","type":"integer"},"member_count":{"title":"Member Count","type":"integer"},"policy_version":{"title":"Policy Version","type":"string"},"relation_count":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Relation Count"},"shared_features":{"title":"Shared Features","type":"integer"},"slug":{"title":"Slug","type":"string"},"state":{"title":"State","type":"string"},"technology_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Technology Summary","type":"array"},"truncated":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Truncated"},"verdict_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Verdict Summary","type":"array"}},"required":["slug","codename","kit_names","state","member_count","domain_count","first_seen_at","last_seen_at","technology_summary","evidence_summary","verdict_summary","brand_summary","policy_version","authoritative","degraded","truncated","relation_count","built_at","shared_features","max_score","kit_threshold","insights"],"title":"PhishingKitDetailOut","type":"object"},"PhishingKitOut":{"description":"A derived phishing kit in a list.","properties":{"authoritative":{"title":"Authoritative","type":"boolean"},"brand_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Brand Summary","type":"array"},"built_at":{"title":"Built At","type":"string"},"codename":{"title":"Codename","type":"string"},"degraded":{"title":"Degraded","type":"boolean"},"domain_count":{"title":"Domain Count","type":"integer"},"evidence_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Evidence Summary","type":"array"},"first_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"First Seen At"},"kit_names":{"items":{"type":"string"},"title":"Kit Names","type":"array"},"last_seen_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Seen At"},"member_count":{"title":"Member Count","type":"integer"},"policy_version":{"title":"Policy Version","type":"string"},"relation_count":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Relation Count"},"slug":{"title":"Slug","type":"string"},"state":{"title":"State","type":"string"},"technology_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Technology Summary","type":"array"},"truncated":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Truncated"},"verdict_summary":{"items":{"$ref":"#/components/schemas/ClusterDistributionItem"},"title":"Verdict Summary","type":"array"}},"required":["slug","codename","kit_names","state","member_count","domain_count","first_seen_at","last_seen_at","technology_summary","evidence_summary","verdict_summary","brand_summary","policy_version","authoritative","degraded","truncated","relation_count","built_at"],"title":"PhishingKitOut","type":"object"},"PlanOut":{"properties":{"api_key_limit":{"title":"Api Key Limit","type":"integer"},"daily_submission_limit":{"title":"Daily Submission Limit","type":"integer"},"description":{"title":"Description","type":"string"},"key":{"title":"Key","type":"string"},"max_active_operations":{"title":"Max Active Operations","type":"integer"},"name":{"title":"Name","type":"string"},"price_usd_monthly":{"title":"Price Usd Monthly","type":"integer"},"read_limits":{"$ref":"#/components/schemas/ReadLimitsOut"}},"required":["key","name","price_usd_monthly","daily_submission_limit","max_active_operations","api_key_limit","read_limits","description"],"title":"PlanOut","type":"object"},"ProviderFailureDetails":{"properties":{"kind":{"enum":["authentication","authorization","edge_policy","rate_limit","upstream","network","client","unknown"],"title":"Kind","type":"string"},"retry_after_seconds":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Retry After Seconds"},"retryable":{"title":"Retryable","type":"boolean"},"status_code":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Status Code"}},"required":["kind","status_code","retryable","retry_after_seconds"],"title":"ProviderFailureDetails","type":"object"},"ProviderFailureEnvelope":{"properties":{"provider_failure":{"$ref":"#/components/schemas/ProviderFailureDetails"}},"required":["provider_failure"],"title":"ProviderFailureEnvelope","type":"object"},"ProviderFailureErrorBody":{"properties":{"code":{"const":"provider_failure","title":"Code","type":"string"},"details":{"$ref":"#/components/schemas/ProviderFailureEnvelope"},"message":{"const":"URLScan provider request failed","title":"Message","type":"string"},"request_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Request Id"}},"required":["code","message","details"],"title":"ProviderFailureErrorBody","type":"object"},"ProviderFailureErrorResponse":{"properties":{"error":{"$ref":"#/components/schemas/ProviderFailureErrorBody"}},"required":["error"],"title":"ProviderFailureErrorResponse","type":"object"},"QrCodeEvidenceOut":{"properties":{"child_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Child Analysis Id"},"child_status":{"anyOf":[{"$ref":"#/components/schemas/AnalysisStatus"},{"type":"null"}]},"code":{"$ref":"#/components/schemas/QrCodeRecord"},"decision":{"anyOf":[{"enum":["created","existing","skipped"],"type":"string"},{"type":"null"}],"title":"Decision"},"id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Id"},"normalized_target":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Normalized Target"},"reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Reason"},"sources":{"items":{"$ref":"#/components/schemas/QrCodeSourceOut"},"title":"Sources","type":"array"}},"required":["code","sources"],"title":"QrCodeEvidenceOut","type":"object"},"QrCodeListOut":{"properties":{"items":{"items":{"$ref":"#/components/schemas/QrCodeEvidenceOut"},"title":"Items","type":"array"},"scanned_frame_count":{"title":"Scanned Frame Count","type":"integer"},"unscanned_frame_count":{"title":"Unscanned Frame Count","type":"integer"}},"required":["items","scanned_frame_count","unscanned_frame_count"],"title":"QrCodeListOut","type":"object"},"QrCodeRecord":{"additionalProperties":false,"description":"One decoded QR code, with bounds in source-image pixels.","properties":{"bbox_height":{"exclusiveMinimum":0,"title":"Bbox Height","type":"integer"},"bbox_width":{"exclusiveMinimum":0,"title":"Bbox Width","type":"integer"},"bbox_x":{"minimum":0,"title":"Bbox X","type":"integer"},"bbox_y":{"minimum":0,"title":"Bbox Y","type":"integer"},"payload_sha256":{"pattern":"^[0-9a-f]{64}$","title":"Payload Sha256","type":"string"},"payload_size":{"minimum":0,"title":"Payload Size","type":"integer"},"text":{"anyOf":[{"maxLength":8192,"type":"string"},{"type":"null"}],"title":"Text"}},"required":["payload_sha256","payload_size","bbox_x","bbox_y","bbox_width","bbox_height"],"title":"QrCodeRecord","type":"object"},"QrCodeScanRecord":{"additionalProperties":false,"description":"QR decoding results for one exact screenshot.","properties":{"codes":{"default":[],"items":{"$ref":"#/components/schemas/QrCodeRecord"},"title":"Codes","type":"array"},"coverage":{"$ref":"#/components/schemas/EvidenceCoverage"},"image_height":{"anyOf":[{"exclusiveMinimum":0,"type":"integer"},{"type":"null"}],"title":"Image Height"},"image_sha256":{"anyOf":[{"pattern":"^[0-9a-f]{64}$","type":"string"},{"type":"null"}],"title":"Image Sha256"},"image_width":{"anyOf":[{"exclusiveMinimum":0,"type":"integer"},{"type":"null"}],"title":"Image Width"}},"title":"QrCodeScanRecord","type":"object"},"QrCodeSourceOut":{"properties":{"bbox_height":{"title":"Bbox Height","type":"integer"},"bbox_width":{"title":"Bbox Width","type":"integer"},"bbox_x":{"title":"Bbox X","type":"integer"},"bbox_y":{"title":"Bbox Y","type":"integer"},"captured_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Captured At"},"code_index":{"title":"Code Index","type":"integer"},"is_origin":{"default":false,"title":"Is Origin","type":"boolean"},"milestone":{"title":"Milestone","type":"string"},"navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Navigation Index"},"page_url":{"title":"Page Url","type":"string"},"screenshot_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Screenshot Url"},"snapshot_id":{"format":"uuid","title":"Snapshot Id","type":"string"}},"required":["snapshot_id","code_index","milestone","page_url","captured_at","navigation_index","screenshot_url","bbox_x","bbox_y","bbox_width","bbox_height"],"title":"QrCodeSourceOut","type":"object"},"ReadLimitsOut":{"properties":{"per_day":{"title":"Per Day","type":"integer"},"per_hour":{"title":"Per Hour","type":"integer"},"per_minute":{"title":"Per Minute","type":"integer"}},"required":["per_minute","per_hour","per_day"],"title":"ReadLimitsOut","type":"object"},"RelationshipGraph":{"properties":{"edge_count":{"title":"Edge Count","type":"integer"},"edges":{"items":{"$ref":"#/components/schemas/AnalysisRelationship"},"title":"Edges","type":"array"},"group_id":{"format":"uuid","title":"Group Id","type":"string"},"node_count":{"title":"Node Count","type":"integer"},"nodes":{"items":{"$ref":"#/components/schemas/RelationshipNode"},"title":"Nodes","type":"array"},"truncated":{"title":"Truncated","type":"boolean"}},"required":["group_id","nodes","edges","node_count","edge_count","truncated"],"title":"RelationshipGraph","type":"object"},"RelationshipNode":{"properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"attempt_number":{"title":"Attempt Number","type":"integer"},"current_evaluation":{"anyOf":[{"$ref":"#/components/schemas/AnalysisEvaluationSummary"},{"type":"null"}]},"depth":{"title":"Depth","type":"integer"},"execution_settings":{"additionalProperties":true,"title":"Execution Settings","type":"object"},"execution_variant_key":{"title":"Execution Variant Key","type":"string"},"is_baseline":{"title":"Is Baseline","type":"boolean"},"is_representative":{"title":"Is Representative","type":"boolean"},"latest_execution_outcome":{"anyOf":[{"$ref":"#/components/schemas/ExecutionOutcomeSummary"},{"type":"null"}]},"member_index":{"title":"Member Index","type":"integer"},"member_role":{"$ref":"#/components/schemas/AnalysisMemberRole"},"source_member_key":{"title":"Source Member Key","type":"string"},"source_navigation_child_request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Navigation Child Request Id"},"status":{"$ref":"#/components/schemas/AnalysisStatus"}},"required":["analysis_id","member_index","source_member_key","execution_variant_key","attempt_number","member_role","depth","source_navigation_child_request_id","status","execution_settings","is_baseline","is_representative"],"title":"RelationshipNode","type":"object"},"RequestAttribution":{"description":"How confidently a request was tied to a navigation.\n\n``EXACT`` means the browser named the frame that issued it. ``INFERRED``\nmeans it was placed by start time against the navigation boundaries, which is\na guess. ``NONE`` means neither was possible, which is the honest answer\nfor a pre-migration analysis and for most of a replayed one.","enum":["exact","inferred","none"],"title":"RequestAttribution","type":"string"},"RequestBodyOut":{"description":"The decoded text of one archived request body.","properties":{"encoding":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Encoding"},"mime":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Mime"},"size":{"title":"Size","type":"integer"},"status":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Status"},"text":{"title":"Text","type":"string"},"truncated":{"title":"Truncated","type":"boolean"},"url":{"title":"Url","type":"string"}},"required":["url","mime","status","size","encoding","truncated","text"],"title":"RequestBodyOut","type":"object"},"RequestFilterOptions":{"properties":{"methods":{"items":{"type":"string"},"title":"Methods","type":"array"},"resource_types":{"items":{"type":"string"},"title":"Resource Types","type":"array"}},"required":["methods","resource_types"],"title":"RequestFilterOptions","type":"object"},"RequestOut":{"properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"attribution":{"$ref":"#/components/schemas/RequestAttribution","default":"none"},"filename":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Filename"},"filename_source":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Filename Source"},"frame_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Frame Url"},"host":{"title":"Host","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"is_third_party":{"title":"Is Third Party","type":"boolean"},"method":{"title":"Method","type":"string"},"mime":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Mime"},"navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Navigation Index"},"network_error":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Network Error"},"path":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Path"},"query":{"title":"Query","type":"string"},"registrable_domain":{"title":"Registrable Domain","type":"string"},"remote_ip":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Remote Ip"},"remote_port":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Remote Port"},"resource_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Resource Type"},"response_completeness":{"$ref":"#/components/schemas/ResponseCompleteness"},"response_sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Response Sha256"},"response_size":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Response Size"},"scheme":{"title":"Scheme","type":"string"},"status":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Status"},"tls_alpn":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Alpn"},"tls_certificate_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Tls Certificate Id"},"tls_certificate_issuer_common_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Certificate Issuer Common Name"},"tls_certificate_not_after":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Certificate Not After"},"tls_certificate_not_before":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Certificate Not Before"},"tls_certificate_sha256_fingerprint":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Certificate Sha256 Fingerprint"},"tls_certificate_spki_sha256":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Certificate Spki Sha256"},"tls_certificate_subject_common_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Certificate Subject Common Name"},"tls_cipher":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Cipher"},"tls_sni":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Sni"},"tls_version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tls Version"},"ts":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Ts"},"url":{"title":"Url","type":"string"},"warc_length":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Length"},"warc_member":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Member"},"warc_offset":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Warc Offset"},"warc_record_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Record Id"},"warc_request_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Warc Request Id"}},"required":["id","analysis_id","url","method","host","registrable_domain","is_third_party","resource_type","status","mime","scheme","query","response_completeness","ts"],"title":"RequestOut","type":"object"},"RequestSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"host":{"title":"Host","type":"string"},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"match":{"$ref":"#/components/schemas/SearchMatch"},"method":{"title":"Method","type":"string"},"remote_ip":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Remote Ip"},"resource_type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Resource Type"},"status":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Status"},"title":{"title":"Title","type":"string"},"ts":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Ts"},"type":{"const":"request","title":"Type","type":"string"}},"required":["id","title","href","match","type","method","status","resource_type","host","remote_ip","ts"],"title":"RequestSearchResult","type":"object"},"ResponseCompleteness":{"description":"How much of the response body the archive contains.","enum":["complete","truncated","unknown","missing"],"title":"ResponseCompleteness","type":"string"},"RuleFailureOut":{"description":"One rule that failed during the latest evaluation.","properties":{"error_type":{"title":"Error Type","type":"string"},"message":{"title":"Message","type":"string"},"rule_id":{"title":"Rule Id","type":"string"}},"required":["rule_id","error_type","message"],"title":"RuleFailureOut","type":"object"},"RuleOut":{"properties":{"assurance_basis":{"default":"","title":"Assurance Basis","type":"string"},"benign_causes":{"default":"","title":"Benign Causes","type":"string"},"description":{"title":"Description","type":"string"},"direction":{"$ref":"#/components/schemas/SignalDirection","default":"risk"},"domain":{"$ref":"#/components/schemas/AnalysisDomain"},"enabled":{"title":"Enabled","type":"boolean"},"id":{"title":"Id","type":"string"},"labels":{"items":{"type":"string"},"title":"Labels","type":"array"},"name":{"title":"Name","type":"string"},"severity":{"$ref":"#/components/schemas/Severity"},"version":{"title":"Version","type":"integer"},"what_it_detects":{"default":"","title":"What It Detects","type":"string"},"why_it_matters":{"default":"","title":"Why It Matters","type":"string"}},"required":["id","version","domain","name","description","severity","labels","enabled"],"title":"RuleOut","type":"object"},"SearchAnalysisContext":{"properties":{"final_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Final Url"},"id":{"format":"uuid","title":"Id","type":"string"},"screenshot_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Screenshot Url"},"target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Target Url"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"}},"required":["id","title","target_url","final_url"],"title":"SearchAnalysisContext","type":"object"},"SearchEvidenceMatch":{"properties":{"field":{"title":"Field","type":"string"},"href":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Href"},"value":{"title":"Value","type":"string"}},"required":["field","value"],"title":"SearchEvidenceMatch","type":"object"},"SearchGroupContext":{"properties":{"id":{"format":"uuid","title":"Id","type":"string"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"}},"required":["id","title"],"title":"SearchGroupContext","type":"object"},"SearchMatch":{"properties":{"field":{"title":"Field","type":"string"},"value":{"title":"Value","type":"string"}},"required":["field","value"],"title":"SearchMatch","type":"object"},"SearchResponse":{"properties":{"items":{"items":{"discriminator":{"mapping":{"analysis":"#/components/schemas/AnalysisSearchResult","analysis_signal":"#/components/schemas/AnalysisSignalSearchResult","behavior_event":"#/components/schemas/BehaviorEventSearchResult","favicon":"#/components/schemas/FaviconSearchResult","group":"#/components/schemas/GroupSearchResult","identifier":"#/components/schemas/IdentifierSearchResult","infrastructure":"#/components/schemas/InfrastructureSearchResult","javascript_function":"#/components/schemas/JavaScriptFunctionSearchResult","request":"#/components/schemas/RequestSearchResult","tls_certificate":"#/components/schemas/TlsCertificateSearchResult"},"propertyName":"type"},"oneOf":[{"$ref":"#/components/schemas/GroupSearchResult"},{"$ref":"#/components/schemas/AnalysisSearchResult"},{"$ref":"#/components/schemas/RequestSearchResult"},{"$ref":"#/components/schemas/InfrastructureSearchResult"},{"$ref":"#/components/schemas/TlsCertificateSearchResult"},{"$ref":"#/components/schemas/FaviconSearchResult"},{"$ref":"#/components/schemas/IdentifierSearchResult"},{"$ref":"#/components/schemas/BehaviorEventSearchResult"},{"$ref":"#/components/schemas/AnalysisSignalSearchResult"},{"$ref":"#/components/schemas/JavaScriptFunctionSearchResult"}]},"title":"Items","type":"array"},"per_type_limit":{"title":"Per Type Limit","type":"integer"},"query":{"title":"Query","type":"string"},"total":{"title":"Total","type":"integer"},"total_is_exact":{"default":true,"title":"Total Is Exact","type":"boolean"},"truncated":{"title":"Truncated","type":"boolean"},"types":{"items":{"$ref":"#/components/schemas/SearchTypeSummary"},"title":"Types","type":"array"}},"required":["query","per_type_limit","items","types","total","truncated"],"title":"SearchResponse","type":"object"},"SearchResultType":{"enum":["group","analysis","request","infrastructure","tls_certificate","favicon","identifier","behavior_event","analysis_signal","javascript_function"],"title":"SearchResultType","type":"string"},"SearchTypeSummary":{"properties":{"returned":{"title":"Returned","type":"integer"},"total":{"title":"Total","type":"integer"},"total_is_exact":{"default":true,"title":"Total Is Exact","type":"boolean"},"truncated":{"title":"Truncated","type":"boolean"},"type":{"$ref":"#/components/schemas/SearchResultType"}},"required":["type","total","returned","truncated"],"title":"SearchTypeSummary","type":"object"},"Severity":{"enum":["info","low","medium","high","critical"],"title":"Severity","type":"string"},"SignalDirection":{"description":"Whether a signal argues for risk or against it.\n\nAn assurance signal reports evidence that an operator must pay for or pass\na check to obtain. Severity states the magnitude, not the polarity, so an\nassurance signal at MEDIUM subtracts what a risk signal at MEDIUM adds.","enum":["risk","assurance"],"title":"SignalDirection","type":"string"},"SignalOut":{"properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"created_at":{"title":"Created At","type":"string"},"direction":{"$ref":"#/components/schemas/SignalDirection","default":"risk"},"domain":{"$ref":"#/components/schemas/AnalysisDomain"},"evaluation_id":{"format":"uuid","title":"Evaluation Id","type":"string"},"evidence":{"additionalProperties":true,"title":"Evidence","type":"object"},"fingerprint":{"title":"Fingerprint","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"labels":{"items":{"type":"string"},"title":"Labels","type":"array"},"rule_id":{"title":"Rule Id","type":"string"},"rule_version":{"title":"Rule Version","type":"integer"},"severity":{"$ref":"#/components/schemas/Severity"},"sources":{"items":{"$ref":"#/components/schemas/SignalSourceOut"},"title":"Sources","type":"array"},"subject_kind":{"$ref":"#/components/schemas/SignalSubjectKind"},"title":{"title":"Title","type":"string"}},"required":["id","analysis_id","evaluation_id","rule_id","rule_version","domain","subject_kind","fingerprint","severity","labels","title","created_at"],"title":"SignalOut","type":"object"},"SignalSourceKind":{"enum":["analysis","navigation","request","page_snapshot","behavior_event","identifier","favicon","logo_observation","email_header","email_received_hop","email_mime_part","email_attachment","email_link","email_identifier","child_analysis","legacy_evidence"],"title":"SignalSourceKind","type":"string"},"SignalSourceOut":{"properties":{"behavior_event_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Behavior Event Id"},"child_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Child Analysis Id"},"email_attachment_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Email Attachment Id"},"email_header_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Email Header Id"},"email_identifier_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Email Identifier Id"},"email_link_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Email Link Id"},"email_mime_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Email Mime Part Id"},"email_received_hop_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Email Received Hop Id"},"favicon_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Favicon Id"},"id":{"format":"uuid","title":"Id","type":"string"},"identifier_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Identifier Id"},"kind":{"$ref":"#/components/schemas/SignalSourceKind"},"locator":{"additionalProperties":true,"title":"Locator","type":"object"},"locator_fingerprint":{"title":"Locator Fingerprint","type":"string"},"logo_observation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Logo Observation Id"},"navigation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Navigation Id"},"page_snapshot_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Page Snapshot Id"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"}},"required":["id","kind","navigation_id","request_id","page_snapshot_id","behavior_event_id","identifier_id","favicon_id","logo_observation_id","email_header_id","email_received_hop_id","email_mime_part_id","email_attachment_id","email_link_id","email_identifier_id","child_analysis_id","locator","locator_fingerprint"],"title":"SignalSourceOut","type":"object"},"SignalSubjectKind":{"enum":["analysis"],"title":"SignalSubjectKind","type":"string"},"SimilarAnalysesResponse":{"description":"A page of similar analyses from one similarity policy.","properties":{"items":{"items":{"$ref":"#/components/schemas/SimilarAnalysisItem"},"title":"Items","type":"array"},"limit":{"title":"Limit","type":"integer"},"offset":{"title":"Offset","type":"integer"},"policy_version":{"title":"Policy Version","type":"string"},"source_analysis_id":{"format":"uuid","title":"Source Analysis Id","type":"string"},"total":{"title":"Total","type":"integer"},"total_is_exact":{"title":"Total Is Exact","type":"boolean"},"truncated":{"title":"Truncated","type":"boolean"}},"required":["source_analysis_id","policy_version","total","total_is_exact","limit","offset","truncated","items"],"title":"SimilarAnalysesResponse","type":"object"},"SimilarAnalysisItem":{"description":"One visible analysis that matches the source analysis.","properties":{"analysis":{"$ref":"#/components/schemas/SimilarAnalysisSummary"},"kit_score":{"title":"Kit Score","type":"integer"},"operation_score":{"title":"Operation Score","type":"integer"},"reasons":{"items":{"$ref":"#/components/schemas/SimilarAnalysisReason"},"title":"Reasons","type":"array"}},"required":["analysis","kit_score","operation_score","reasons"],"title":"SimilarAnalysisItem","type":"object"},"SimilarAnalysisReason":{"description":"One redacted reason for a similarity score.","properties":{"code":{"title":"Code","type":"string"},"count":{"title":"Count","type":"integer"},"overlap_percent":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Overlap Percent"},"score":{"title":"Score","type":"integer"}},"required":["code","count","score","overlap_percent"],"title":"SimilarAnalysisReason","type":"object"},"SimilarAnalysisSummary":{"description":"Small analysis summary for a similarity result.","properties":{"favicon_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Favicon Url"},"final_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Final Url"},"id":{"format":"uuid","title":"Id","type":"string"},"screenshot_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Screenshot Url"},"status":{"$ref":"#/components/schemas/AnalysisStatus"},"target_url":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Target Url"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"},"visibility":{"$ref":"#/components/schemas/AnalysisVisibility"}},"required":["id","visibility","status","target_url","final_url","title"],"title":"SimilarAnalysisSummary","type":"object"},"SortDirection":{"enum":["asc","desc"],"title":"SortDirection","type":"string"},"SourceRelationshipSummary":{"properties":{"relationship_type":{"title":"Relationship Type","type":"string"},"source_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Analysis Id"},"source_email_link_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Link Id"},"source_email_part_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Email Part Id"},"source_navigation_child_request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Navigation Child Request Id"},"source_navigation_index":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Source Navigation Index"},"source_qr_code_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Source Qr Code Id"}},"required":["relationship_type"],"title":"SourceRelationshipSummary","type":"object"},"SubmitUrlRequest":{"description":"Submit a live URL for dynamic analysis.","properties":{"url":{"maxLength":4096,"minLength":1,"title":"Url","type":"string"},"visibility":{"anyOf":[{"$ref":"#/components/schemas/AnalysisVisibility"},{"type":"null"}]}},"required":["url"],"title":"SubmitUrlRequest","type":"object"},"SummaryBucket":{"description":"One category and its exact observation count.","properties":{"count":{"title":"Count","type":"integer"},"key":{"title":"Key","type":"string"}},"required":["key","count"],"title":"SummaryBucket","type":"object"},"TaskAttemptOut":{"properties":{"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"failure_class":{"anyOf":[{"$ref":"#/components/schemas/FailureClass"},{"type":"null"}]},"finished_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Finished At"},"heartbeat_at":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Heartbeat At"},"id":{"format":"uuid","title":"Id","type":"string"},"number":{"title":"Number","type":"integer"},"started_at":{"title":"Started At","type":"string"},"status":{"$ref":"#/components/schemas/TaskAttemptStatus"},"task_id":{"format":"uuid","title":"Task Id","type":"string"},"worker_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Worker Id"}},"required":["id","number","task_id","status","worker_id","started_at","heartbeat_at","finished_at","failure_class","error"],"title":"TaskAttemptOut","type":"object"},"TaskAttemptStatus":{"enum":["running","succeeded","failed","abandoned"],"title":"TaskAttemptStatus","type":"string"},"TechnologyEvidenceOut":{"description":"One detection that supports a technology observation.","properties":{"confidence":{"title":"Confidence","type":"number"},"detection_source":{"title":"Detection Source","type":"string"},"endpoint_id":{"format":"uuid","title":"Endpoint Id","type":"string"},"evidence":{"additionalProperties":true,"title":"Evidence","type":"object"},"id":{"format":"uuid","title":"Id","type":"string"},"report_index":{"title":"Report Index","type":"integer"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"signature_source":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Signature Source"},"signature_version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Signature Version"}},"required":["id","endpoint_id","request_id","report_index","confidence","detection_source","evidence","signature_source","signature_version"],"title":"TechnologyEvidenceOut","type":"object"},"TechnologyObservationOut":{"description":"One technology detected at an infrastructure endpoint group.","properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"categories":{"items":{"type":"string"},"title":"Categories","type":"array"},"confidence":{"title":"Confidence","type":"number"},"detection_source":{"title":"Detection Source","type":"string"},"endpoint_id":{"format":"uuid","title":"Endpoint Id","type":"string"},"evidence":{"additionalProperties":true,"title":"Evidence","type":"object"},"evidence_items":{"items":{"$ref":"#/components/schemas/TechnologyEvidenceOut"},"title":"Evidence Items","type":"array"},"id":{"format":"uuid","title":"Id","type":"string"},"name":{"title":"Name","type":"string"},"report_index":{"title":"Report Index","type":"integer"},"request_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"},"signature_source":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Signature Source"},"signature_version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Signature Version"},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Version"}},"required":["id","analysis_id","endpoint_id","request_id","report_index","name","version","categories","confidence","detection_source","evidence","signature_source","signature_version"],"title":"TechnologyObservationOut","type":"object"},"TlsCertificateOut":{"properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"dns_names":{"items":{"type":"string"},"title":"Dns Names","type":"array"},"id":{"format":"uuid","title":"Id","type":"string"},"ip_addresses":{"items":{"type":"string"},"title":"Ip Addresses","type":"array"},"issuer":{"title":"Issuer","type":"string"},"issuer_common_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Issuer Common Name"},"not_after":{"title":"Not After","type":"string"},"not_before":{"title":"Not Before","type":"string"},"public_key_algorithm":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Public Key Algorithm"},"public_key_size":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Public Key Size"},"request_count":{"default":0,"title":"Request Count","type":"integer"},"serial_number":{"title":"Serial Number","type":"string"},"sha256_fingerprint":{"title":"Sha256 Fingerprint","type":"string"},"signature_algorithm":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Signature Algorithm"},"spki_sha256":{"title":"Spki Sha256","type":"string"},"subject":{"title":"Subject","type":"string"},"subject_common_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Subject Common Name"}},"required":["id","analysis_id","sha256_fingerprint","spki_sha256","serial_number","subject","subject_common_name","issuer","issuer_common_name","dns_names","ip_addresses","not_before","not_after","signature_algorithm","public_key_algorithm","public_key_size"],"title":"TlsCertificateOut","type":"object"},"TlsCertificateSearchResult":{"properties":{"analysis":{"anyOf":[{"$ref":"#/components/schemas/SearchAnalysisContext"},{"type":"null"}]},"evidence_matches":{"items":{"$ref":"#/components/schemas/SearchEvidenceMatch"},"title":"Evidence Matches","type":"array"},"fingerprint_sha256":{"title":"Fingerprint Sha256","type":"string"},"group":{"anyOf":[{"$ref":"#/components/schemas/SearchGroupContext"},{"type":"null"}]},"href":{"title":"Href","type":"string"},"id":{"format":"uuid","title":"Id","type":"string"},"issuer":{"title":"Issuer","type":"string"},"match":{"$ref":"#/components/schemas/SearchMatch"},"not_valid_after":{"title":"Not Valid After","type":"string"},"title":{"title":"Title","type":"string"},"type":{"const":"tls_certificate","title":"Type","type":"string"}},"required":["id","title","href","match","type","issuer","fingerprint_sha256","not_valid_after"],"title":"TlsCertificateSearchResult","type":"object"},"TrapEnvelope":{"additionalProperties":false,"description":"SMTP observations and exposure snapshots, independent of header claims.","properties":{"exposures":{"items":{"$ref":"#/components/schemas/TrapExposure"},"maxItems":25,"title":"Exposures","type":"array"},"helo":{"maxLength":512,"title":"Helo","type":"string"},"mail_from":{"maxLength":512,"title":"Mail From","type":"string"},"peer_ip":{"format":"ipvanyaddress","title":"Peer Ip","type":"string"},"receipt_id":{"format":"uuid","title":"Receipt Id","type":"string"},"received_at":{"format":"date-time","title":"Received At","type":"string"},"recipients":{"items":{"maxLength":320,"minLength":3,"pattern":"^[^\\r\\n\\x00]+@[^@\\s]+$","type":"string"},"maxItems":25,"minItems":1,"title":"Recipients","type":"array"},"schema_version":{"const":1,"default":1,"title":"Schema Version","type":"integer"},"tls":{"title":"Tls","type":"boolean"},"web_capture_policy":{"const":"manual","default":"manual","title":"Web Capture Policy","type":"string"}},"required":["receipt_id","received_at","peer_ip","helo","mail_from","recipients","tls"],"title":"TrapEnvelope","type":"object"},"TrapExposure":{"additionalProperties":false,"description":"The alias registration as it existed when the receiver accepted mail.","properties":{"address":{"maxLength":320,"minLength":3,"pattern":"^[^\\r\\n\\x00]+@[^@\\s]+$","title":"Address","type":"string"},"attempt_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Attempt Id"},"exposed_at":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Exposed At"},"label":{"maxLength":120,"title":"Label","type":"string"},"language":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Language"},"method":{"enum":["unexposed","public_page","signup","phishing_submission"],"title":"Method","type":"string"},"source_url":{"anyOf":[{"format":"uri","maxLength":2083,"minLength":1,"type":"string"},{"type":"null"}],"title":"Source Url"},"status":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Status"}},"required":["address","method","label"],"title":"TrapExposure","type":"object"},"UnclassifiedControl":{"properties":{"form_ordinal":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Form Ordinal"},"name":{"title":"Name","type":"string"},"type":{"title":"Type","type":"string"}},"required":["name","type"],"title":"UnclassifiedControl","type":"object"},"UrlscanIngestionItem":{"description":"Durable result for one exact URLScan case.","properties":{"analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"},"case_id":{"title":"Case Id","type":"string"},"duplicate_of_case_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Duplicate Of Case Id"},"group_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Group Id"},"operation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Operation Id"},"result":{"enum":["submitted","duplicate_case","duplicate_url"],"title":"Result","type":"string"}},"required":["case_id","result","analysis_id","group_id","operation_id","duplicate_of_case_id"],"title":"UrlscanIngestionItem","type":"object"},"UrlscanIngestionRequest":{"additionalProperties":false,"description":"Exact URLScan cases selected by an authenticated operator.","properties":{"case_ids":{"items":{"type":"string"},"maxItems":10,"minItems":1,"title":"Case Ids","type":"array"}},"required":["case_ids"],"title":"UrlscanIngestionRequest","type":"object"},"UrlscanIngestionResponse":{"description":"Results for a bounded exact-case ingestion request.","properties":{"items":{"items":{"$ref":"#/components/schemas/UrlscanIngestionItem"},"title":"Items","type":"array"}},"required":["items"],"title":"UrlscanIngestionResponse","type":"object"},"UsageHistoryOut":{"properties":{"period_end":{"title":"Period End","type":"string"},"period_start":{"title":"Period Start","type":"string"},"points":{"items":{"$ref":"#/components/schemas/UsageHistoryPointOut"},"title":"Points","type":"array"},"timezone":{"title":"Timezone","type":"string"},"usage_kind":{"title":"Usage Kind","type":"string"}},"required":["usage_kind","timezone","period_start","period_end","points"],"title":"UsageHistoryOut","type":"object"},"UsageHistoryPointOut":{"properties":{"day":{"format":"date","title":"Day","type":"string"},"submission_units":{"title":"Submission Units","type":"integer"}},"required":["day","submission_units"],"title":"UsageHistoryPointOut","type":"object"},"UsageSummaryOut":{"properties":{"active_operations":{"title":"Active Operations","type":"integer"},"api_key_limit":{"title":"Api Key Limit","type":"integer"},"daily_submission_limit":{"title":"Daily Submission Limit","type":"integer"},"max_active_operations":{"title":"Max Active Operations","type":"integer"},"period_end":{"title":"Period End","type":"string"},"period_start":{"title":"Period Start","type":"string"},"plan_key":{"title":"Plan Key","type":"string"},"plan_name":{"title":"Plan Name","type":"string"},"price_usd_monthly":{"title":"Price Usd Monthly","type":"integer"},"read_limits":{"$ref":"#/components/schemas/ReadLimitsOut"},"submissions_remaining":{"title":"Submissions Remaining","type":"integer"},"submissions_used":{"title":"Submissions Used","type":"integer"}},"required":["plan_key","plan_name","price_usd_monthly","daily_submission_limit","api_key_limit","submissions_used","submissions_remaining","period_start","period_end","active_operations","max_active_operations","read_limits"],"title":"UsageSummaryOut","type":"object"},"VariantBatchResponse":{"description":"A variant preview or atomic creation result.","properties":{"combination_count":{"title":"Combination Count","type":"integer"},"created":{"items":{"$ref":"#/components/schemas/VariantItem"},"title":"Created","type":"array"},"existing":{"items":{"$ref":"#/components/schemas/VariantItem"},"title":"Existing","type":"array"},"limits":{"$ref":"#/components/schemas/VariantLimits"}},"required":["combination_count","existing","created","limits"],"title":"VariantBatchResponse","type":"object"},"VariantComparisonAttempt":{"properties":{"current_evaluation":{"anyOf":[{"$ref":"#/components/schemas/AnalysisEvaluationSummary"},{"type":"null"}]},"effective_settings":{"additionalProperties":true,"title":"Effective Settings","type":"object"},"execution_variant_key":{"title":"Execution Variant Key","type":"string"},"latest_execution_outcome":{"anyOf":[{"$ref":"#/components/schemas/ExecutionOutcomeSummary"},{"type":"null"}]},"newest_failure":{"anyOf":[{"$ref":"#/components/schemas/VariantFailureSummary"},{"type":"null"}]},"representative_analysis_id":{"format":"uuid","title":"Representative Analysis Id","type":"string"},"representative_attempt_number":{"title":"Representative Attempt Number","type":"integer"},"status":{"$ref":"#/components/schemas/AnalysisStatus"}},"required":["execution_variant_key","effective_settings","representative_analysis_id","representative_attempt_number","status"],"title":"VariantComparisonAttempt","type":"object"},"VariantComparisonCell":{"properties":{"baseline":{"$ref":"#/components/schemas/VariantComparisonAttempt"},"baseline_analysis_id":{"format":"uuid","title":"Baseline Analysis Id","type":"string"},"comparison":{"$ref":"#/components/schemas/AnalysisComparisonOut"},"source_member_key":{"title":"Source Member Key","type":"string"},"variant":{"$ref":"#/components/schemas/VariantComparisonAttempt"},"variant_analysis_id":{"format":"uuid","title":"Variant Analysis Id","type":"string"}},"required":["source_member_key","baseline_analysis_id","variant_analysis_id","baseline","variant","comparison"],"title":"VariantComparisonCell","type":"object"},"VariantComparisonMatrix":{"properties":{"comparisons":{"items":{"$ref":"#/components/schemas/VariantComparisonCell"},"title":"Comparisons","type":"array"},"group_id":{"format":"uuid","title":"Group Id","type":"string"},"total":{"title":"Total","type":"integer"},"truncated":{"title":"Truncated","type":"boolean"}},"required":["group_id","comparisons","total","truncated"],"title":"VariantComparisonMatrix","type":"object"},"VariantCreateRequest":{"description":"Approved profile IDs for one bounded variant batch.","properties":{"device_profile_ids":{"items":{"type":"string"},"minItems":1,"title":"Device Profile Ids","type":"array"},"idempotency_key":{"maxLength":128,"minLength":1,"title":"Idempotency Key","type":"string"},"proxy_profile_ids":{"items":{"type":"string"},"minItems":1,"title":"Proxy Profile Ids","type":"array"},"user_agent_profile_ids":{"items":{"type":"string"},"minItems":1,"title":"User Agent Profile Ids","type":"array"}},"required":["proxy_profile_ids","device_profile_ids","user_agent_profile_ids","idempotency_key"],"title":"VariantCreateRequest","type":"object"},"VariantFailureSummary":{"properties":{"analysis_id":{"format":"uuid","title":"Analysis Id","type":"string"},"attempt_number":{"title":"Attempt Number","type":"integer"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"},"latest_execution_outcome":{"anyOf":[{"$ref":"#/components/schemas/ExecutionOutcomeSummary"},{"type":"null"}]},"status":{"$ref":"#/components/schemas/AnalysisStatus"}},"required":["analysis_id","attempt_number","status","error"],"title":"VariantFailureSummary","type":"object"},"VariantItem":{"description":"One execution variant and its representative attempt.","properties":{"baseline":{"title":"Baseline","type":"boolean"},"effective_settings":{"additionalProperties":true,"title":"Effective Settings","type":"object"},"execution_variant_key":{"title":"Execution Variant Key","type":"string"},"operation_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Operation Id"},"representative_analysis_id":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Representative Analysis Id"},"representative_attempt_number":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Representative Attempt Number"}},"required":["execution_variant_key","effective_settings","baseline","representative_analysis_id","representative_attempt_number"],"title":"VariantItem","type":"object"},"VariantLimits":{"description":"Hard limits that apply to a variant request.","properties":{"combinations_per_request":{"title":"Combinations Per Request","type":"integer"},"group_members":{"title":"Group Members","type":"integer"},"variants_per_group":{"title":"Variants Per Group","type":"integer"},"variants_per_source":{"title":"Variants Per Source","type":"integer"}},"required":["combinations_per_request","variants_per_source","variants_per_group","group_members"],"title":"VariantLimits","type":"object"},"VariantPreviewRequest":{"description":"Approved profile IDs for a variant preview.","properties":{"device_profile_ids":{"items":{"type":"string"},"minItems":1,"title":"Device Profile Ids","type":"array"},"proxy_profile_ids":{"items":{"type":"string"},"minItems":1,"title":"Proxy Profile Ids","type":"array"},"user_agent_profile_ids":{"items":{"type":"string"},"minItems":1,"title":"User Agent Profile Ids","type":"array"}},"required":["proxy_profile_ids","device_profile_ids","user_agent_profile_ids"],"title":"VariantPreviewRequest","type":"object"},"WebGroupSummary":{"properties":{"analysis_count":{"title":"Analysis Count","type":"integer"},"kind":{"const":"web","default":"web","title":"Kind","type":"string"}},"required":["analysis_count"],"title":"WebGroupSummary","type":"object"}},"securitySchemes":{"HTTPBearer":{"description":"A Sandfish API key or browser session token. Create API keys at https://sandfi.sh/account/api. API keys need data:read for API access.","scheme":"bearer","type":"http"}}},"externalDocs":{"url":"https://sandfi.sh/docs#api"},"info":{"contact":{"name":"Sandfish","url":"https://github.com/sandfi-sh"},"description":"Analyze suspicious URLs, HTML files, WACZ archives, and EML messages. Submit sources, follow operations, and inspect evidence with the Sandfish API.","license":{"identifier":"MIT","name":"MIT"},"title":"Sandfish","version":"0.1.0"},"openapi":"3.1.0","paths":{"/api/account/usage":{"get":{"description":"Return quota use for the current Clerk user. Authentication is required. Record access follows account ownership.","operationId":"get_usage","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UsageSummaryOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Get Usage","tags":["usage"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/account/usage/history":{"get":{"description":"Return daily charged analysis submissions for the current user. Authentication is required. Record access follows account ownership.","operationId":"get_usage_history","parameters":[{"in":"query","name":"days","required":false,"schema":{"default":30,"maximum":365,"minimum":1,"title":"Days","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UsageHistoryOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Get Usage History","tags":["usage"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/account/usage/plans":{"get":{"description":"Return the fixed Sandfish plan catalog. Public records are available without authentication. Private records require their owner.","operationId":"list_plans","responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/PlanOut"},"title":"Response List Plans","type":"array"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Plans","tags":["usage"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/actors":{"get":{"description":"List derived actors the caller can see. Public records are available without authentication. Private records require their owner.","operationId":"list_actors","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"description":"Substring of the codename","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"description":"Substring of the codename","title":"Q"}},{"in":"query","name":"identifier_kind","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Identifier Kind"}},{"in":"query","name":"min_members","required":false,"schema":{"default":2,"maximum":10000,"minimum":2,"title":"Min Members","type":"integer"}},{"in":"query","name":"state","required":false,"schema":{"$ref":"#/components/schemas/ClusterState","default":"active"}},{"in":"query","name":"sort","required":false,"schema":{"default":"last_seen","enum":["members","last_seen","first_seen","identifiers"],"title":"Sort","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_ActorOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Actors","tags":["actors"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/actors/export.csv":{"get":{"description":"Export the visible actors as CSV. Public records are available without authentication. Private records require their owner.","operationId":"export_actors_csv","parameters":[{"description":"Substring of the codename","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"description":"Substring of the codename","title":"Q"}},{"in":"query","name":"identifier_kind","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Identifier Kind"}},{"in":"query","name":"min_members","required":false,"schema":{"default":2,"maximum":10000,"minimum":2,"title":"Min Members","type":"integer"}},{"in":"query","name":"state","required":false,"schema":{"$ref":"#/components/schemas/ClusterState","default":"active"}},{"in":"query","name":"sort","required":false,"schema":{"default":"last_seen","enum":["members","last_seen","first_seen","identifiers"],"title":"Sort","type":"string"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Actors Csv","tags":["actors"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/actors/stats":{"get":{"description":"Return corpus-level actor counts for the caller. Public records are available without authentication. Private records require their owner.","operationId":"actor_stats","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ClusterStatsResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Actor Stats","tags":["actors"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/actors/{slug}":{"get":{"description":"Return one derived actor. Public records are available without authentication. Private records require their owner.","operationId":"get_actor","parameters":[{"in":"path","name":"slug","required":true,"schema":{"title":"Slug","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActorDetailOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Actor","tags":["actors"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/actors/{slug}/analyses":{"get":{"description":"List visible actor cases, optionally shared with a current kit.\n\nA filtered historical pair returns 409 with code ``cluster_not_current``. Public records are available without authentication. Private records require their owner.","operationId":"list_actor_analyses","parameters":[{"in":"path","name":"slug","required":true,"schema":{"title":"Slug","type":"string"}},{"description":"Shared kit filter","in":"query","name":"kit_slug","required":false,"schema":{"anyOf":[{"maxLength":64,"minLength":1,"type":"string"},{"type":"null"}],"description":"Shared kit filter","title":"Kit Slug"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_ClusterMemberOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"409":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Conflict","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Actor Analyses","tags":["actors"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses":{"get":{"description":"List Analyses. Public records are available without authentication. Private records require their owner.","operationId":"list_analyses","parameters":[{"in":"query","name":"sort","required":false,"schema":{"$ref":"#/components/schemas/AnalysisSort","default":"created_at"}},{"in":"query","name":"direction","required":false,"schema":{"$ref":"#/components/schemas/SortDirection","default":"desc"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"status","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisStatus"},{"type":"null"}],"title":"Status"}},{"in":"query","name":"verdict","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/EvaluationVerdict"},{"type":"null"}],"title":"Verdict"}},{"in":"query","name":"completeness","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/EvaluationCompleteness"},{"type":"null"}],"title":"Completeness"}},{"in":"query","name":"exclude_title","required":false,"schema":{"anyOf":[{"maxLength":512,"type":"string"},{"type":"null"}],"title":"Exclude Title"}},{"in":"query","name":"group_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Group Id"}},{"in":"query","name":"member_role","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisMemberRole"},{"type":"null"}],"title":"Member Role"}},{"in":"query","name":"input_kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/InputKind"},{"type":"null"}],"title":"Input Kind"}},{"in":"query","name":"execution_kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/ExecutionKind"},{"type":"null"}],"title":"Execution Kind"}},{"description":"Substring of the title or URL","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":512,"type":"string"},{"type":"null"}],"description":"Substring of the title or URL","title":"Q"}},{"in":"query","name":"url","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Url"}},{"in":"query","name":"host","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Host"}},{"in":"query","name":"domain","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Domain"}},{"in":"query","name":"filename","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Filename"}},{"in":"query","name":"path","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Path"}},{"in":"query","name":"remote_ip","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Remote Ip"}},{"in":"query","name":"response_sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Response Sha256"}},{"in":"query","name":"favicon_sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"minLength":64,"type":"string"},{"type":"null"}],"title":"Favicon Sha256"}},{"in":"query","name":"identifier_kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/IdentifierKind"},{"type":"null"}],"title":"Identifier Kind"}},{"in":"query","name":"identifier_value","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Identifier Value"}},{"in":"query","name":"identifier_normalized_value","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Identifier Normalized Value"}},{"in":"query","name":"behavior_kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Behavior Kind"}},{"in":"query","name":"behavior_name","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Behavior Name"}},{"in":"query","name":"behavior_arg_sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Behavior Arg Sha256"}},{"in":"query","name":"javascript_function_sha256","required":false,"schema":{"anyOf":[{"pattern":"^[0-9a-f]{64}$","type":"string"},{"type":"null"}],"title":"Javascript Function Sha256"}},{"in":"query","name":"signal_rule_id","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Signal Rule Id"}},{"in":"query","name":"signal_label","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Signal Label"}},{"in":"query","name":"signal_fingerprint","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Signal Fingerprint"}},{"in":"query","name":"infrastructure_host","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Infrastructure Host"}},{"in":"query","name":"infrastructure_domain","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Infrastructure Domain"}},{"in":"query","name":"infrastructure_ip","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Infrastructure Ip"}},{"in":"query","name":"infrastructure_asn","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"title":"Infrastructure Asn"}},{"in":"query","name":"infrastructure_provider","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Infrastructure Provider"}},{"in":"query","name":"has_screenshot","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Has Screenshot"}},{"in":"query","name":"has_wacz","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Has Wacz"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}},{"in":"query","name":"exclude_analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Exclude Analysis Id"}},{"in":"query","name":"tls_fingerprint","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Fingerprint"}},{"in":"query","name":"tls_spki_hash","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Spki Hash"}},{"in":"query","name":"tls_subject","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Tls Subject"}},{"in":"query","name":"tls_issuer","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Tls Issuer"}},{"in":"query","name":"tls_dns_name","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Tls Dns Name"}},{"in":"query","name":"tls_valid_at","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Tls Valid At"}},{"in":"query","name":"tls_expired","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Tls Expired"}},{"in":"query","name":"tls_not_yet_valid","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Tls Not Yet Valid"}},{"in":"query","name":"tls_expiring_before","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Tls Expiring Before"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_AnalysisSummary_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analyses","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true},"post":{"description":"Submit a URL for analysis. The response confirms acceptance, not completion. Poll operation_id with get_operation. Set visibility explicitly when needed; paid accounts default to private, and other accounts default to public. Public records are available without authentication. Private records require their owner.","operationId":"submit_url","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SubmitUrlRequest"}}},"required":true},"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Submit Url","tags":["analyses"],"x-api-key-scopes":["data:read","analysis:submit"],"x-sdk-supported":true}},"/api/analyses/export.csv":{"get":{"description":"Export Analyses Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_analyses_csv","parameters":[{"in":"query","name":"status","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisStatus"},{"type":"null"}],"title":"Status"}},{"in":"query","name":"verdict","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/EvaluationVerdict"},{"type":"null"}],"title":"Verdict"}},{"in":"query","name":"completeness","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/EvaluationCompleteness"},{"type":"null"}],"title":"Completeness"}},{"in":"query","name":"exclude_title","required":false,"schema":{"anyOf":[{"maxLength":512,"type":"string"},{"type":"null"}],"title":"Exclude Title"}},{"in":"query","name":"group_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Group Id"}},{"in":"query","name":"member_role","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisMemberRole"},{"type":"null"}],"title":"Member Role"}},{"in":"query","name":"input_kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/InputKind"},{"type":"null"}],"title":"Input Kind"}},{"in":"query","name":"execution_kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/ExecutionKind"},{"type":"null"}],"title":"Execution Kind"}},{"description":"Substring of the title or URL","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":512,"type":"string"},{"type":"null"}],"description":"Substring of the title or URL","title":"Q"}},{"in":"query","name":"url","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Url"}},{"in":"query","name":"host","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Host"}},{"in":"query","name":"domain","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Domain"}},{"in":"query","name":"filename","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Filename"}},{"in":"query","name":"path","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Path"}},{"in":"query","name":"remote_ip","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Remote Ip"}},{"in":"query","name":"response_sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Response Sha256"}},{"in":"query","name":"favicon_sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"minLength":64,"type":"string"},{"type":"null"}],"title":"Favicon Sha256"}},{"in":"query","name":"identifier_kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/IdentifierKind"},{"type":"null"}],"title":"Identifier Kind"}},{"in":"query","name":"identifier_value","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Identifier Value"}},{"in":"query","name":"identifier_normalized_value","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Identifier Normalized Value"}},{"in":"query","name":"behavior_kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Behavior Kind"}},{"in":"query","name":"behavior_name","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Behavior Name"}},{"in":"query","name":"behavior_arg_sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Behavior Arg Sha256"}},{"in":"query","name":"javascript_function_sha256","required":false,"schema":{"anyOf":[{"pattern":"^[0-9a-f]{64}$","type":"string"},{"type":"null"}],"title":"Javascript Function Sha256"}},{"in":"query","name":"signal_rule_id","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Signal Rule Id"}},{"in":"query","name":"signal_label","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Signal Label"}},{"in":"query","name":"signal_fingerprint","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Signal Fingerprint"}},{"in":"query","name":"infrastructure_host","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Infrastructure Host"}},{"in":"query","name":"infrastructure_domain","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Infrastructure Domain"}},{"in":"query","name":"infrastructure_ip","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Infrastructure Ip"}},{"in":"query","name":"infrastructure_asn","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"title":"Infrastructure Asn"}},{"in":"query","name":"infrastructure_provider","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Infrastructure Provider"}},{"in":"query","name":"has_screenshot","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Has Screenshot"}},{"in":"query","name":"has_wacz","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Has Wacz"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}},{"in":"query","name":"exclude_analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Exclude Analysis Id"}},{"in":"query","name":"tls_fingerprint","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Fingerprint"}},{"in":"query","name":"tls_spki_hash","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Spki Hash"}},{"in":"query","name":"tls_subject","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Tls Subject"}},{"in":"query","name":"tls_issuer","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Tls Issuer"}},{"in":"query","name":"tls_dns_name","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Tls Dns Name"}},{"in":"query","name":"tls_valid_at","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Tls Valid At"}},{"in":"query","name":"tls_expired","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Tls Expired"}},{"in":"query","name":"tls_not_yet_valid","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Tls Not Yet Valid"}},{"in":"query","name":"tls_expiring_before","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Tls Expiring Before"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Analyses Csv","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/upload":{"post":{"description":"Submit an HTML file or WACZ archive using multipart form data. File content selects the input kind. Limits are 8 MiB for HTML and 256 MiB for WACZ. Poll operation_id with get_operation after HTTP 202. Authentication is required. Record access follows account ownership.","operationId":"submit_wacz","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_submit_wacz"}}},"required":true},"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Submit Wacz","tags":["analyses"],"x-api-key-scopes":["data:read","analysis:submit"],"x-sdk-supported":true}},"/api/analyses/urlscan":{"post":{"description":"Fetch and durably ingest exact URLScan cases selected by an operator. Authentication is required. Record access follows account ownership.","operationId":"submit_urlscan_cases","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UrlscanIngestionRequest"}}},"required":true},"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UrlscanIngestionResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"502":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProviderFailureErrorResponse"}}},"description":"URLScan provider request failed","headers":{"Retry-After":{"description":"Bounded delay in seconds before a retry","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Submit Urlscan Cases","tags":["analyses"],"x-api-key-scopes":["data:read","analysis:submit"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}":{"get":{"description":"Read an analysis and its current_evaluation. The evaluation can be null before processing finishes. Read completeness, score, and verdict separately. Public records are available without authentication. Private records require their owner.","operationId":"get_analysis","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AnalysisDetail"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Analysis","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/behavior-events":{"get":{"description":"List Behavior Events. Public records are available without authentication. Private records require their owner.","operationId":"list_behavior_events","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"event_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Event Id"}},{"in":"query","name":"facet","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Facet"}},{"in":"query","name":"name","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Name"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":256,"minLength":1,"type":"string"},{"type":"null"}],"title":"Q"}},{"description":"Restrict to one navigation, by its index","in":"query","name":"navigation","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"description":"Restrict to one navigation, by its index","title":"Navigation"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_BehaviorEventOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Behavior Events","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/behavior-events/facets":{"get":{"description":"Behavior Event Facets. Public records are available without authentication. Private records require their owner.","operationId":"behavior_event_facets","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"description":"Restrict to one navigation, by its index","in":"query","name":"navigation","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"description":"Restrict to one navigation, by its index","title":"Navigation"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":256,"minLength":1,"type":"string"},{"type":"null"}],"title":"Q"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/BehaviorEventFacetOut"},"title":"Response Behavior Event Facets","type":"array"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Behavior Event Facets","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/clusters":{"get":{"description":"Return the derived kit and actor that contain one analysis.\n\n``AnalysisDep`` has already enforced that the caller may read the\nanalysis, so no further visibility filter is needed here. Public records are available without authentication. Private records require their owner.","operationId":"get_analysis_clusters","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AnalysisClustersOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Analysis Clusters","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/compare/{other_analysis_id}":{"get":{"description":"Compare a direct parent-child pair from stored PostgreSQL facts. Public records are available without authentication. Private records require their owner.","operationId":"compare_analysis","parameters":[{"in":"path","name":"other_analysis_id","required":true,"schema":{"format":"uuid","title":"Other Analysis Id","type":"string"}},{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AnalysisComparisonOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Compare Analysis","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/cookies":{"get":{"description":"Return current bounded cookie observations for one analysis. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_cookies","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"source","required":false,"schema":{"anyOf":[{"enum":["http_header","browser_jar"],"type":"string"},{"type":"null"}],"title":"Source"}},{"in":"query","name":"domain","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Domain"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"cookie_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Cookie Id"}},{"in":"query","name":"request_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"}},{"description":"Restrict to one navigation, by its index","in":"query","name":"navigation","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"description":"Restrict to one navigation, by its index","title":"Navigation"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_CookieObservationOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Cookies","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email":{"get":{"description":"Get Email Analysis. Public records are available without authentication. Private records require their owner.","operationId":"get_email_analysis","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EmailAnalysisDetail"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Email Analysis","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/attachments":{"get":{"description":"List Email Attachments. Public records are available without authentication. Private records require their owner.","operationId":"list_email_attachments","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_EmailAttachmentOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Email Attachments","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/attachments/{attachment_id}/download":{"get":{"description":"Download Email Attachment. Public records are available without authentication. Private records require their owner.","operationId":"download_email_attachment","parameters":[{"in":"path","name":"attachment_id","required":true,"schema":{"format":"uuid","title":"Attachment Id","type":"string"}},{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/octet-stream":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Download Email Attachment","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/authentication-runs":{"get":{"description":"List Email Authentication Runs. Public records are available without authentication. Private records require their owner.","operationId":"list_email_authentication_runs","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_EmailAuthenticationRunSummary_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Email Authentication Runs","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/authentication-runs/{run_id}":{"get":{"description":"Get Email Authentication Run. Public records are available without authentication. Private records require their owner.","operationId":"get_email_authentication_run","parameters":[{"in":"path","name":"run_id","required":true,"schema":{"format":"uuid","title":"Run Id","type":"string"}},{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EmailAuthenticationRunDetail"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Email Authentication Run","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/headers":{"get":{"description":"List Email Headers. Public records are available without authentication. Private records require their owner.","operationId":"list_email_headers","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_EmailHeaderOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Email Headers","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/hops":{"get":{"description":"List Email Hops. Public records are available without authentication. Private records require their owner.","operationId":"list_email_hops","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_EmailReceivedHopOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Email Hops","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/offline-reauthenticate":{"post":{"description":"Offline Reauthenticate Email. Authentication is required. Record access follows account ownership.","operationId":"offline_reauthenticate_email","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Offline Reauthenticate Email","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/parts":{"get":{"description":"List Email Parts. Public records are available without authentication. Private records require their owner.","operationId":"list_email_parts","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_EmailMimePartOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Email Parts","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/parts/{part_id}/body":{"get":{"description":"Return a bounded text source view. Never return executable markup. Public records are available without authentication. Private records require their owner.","operationId":"get_email_body_content","parameters":[{"in":"path","name":"part_id","required":true,"schema":{"format":"uuid","title":"Part Id","type":"string"}},{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EmailBodyContentOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Email Body Content","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/parts/{part_id}/decoded":{"get":{"description":"Download Decoded Email Part. Public records are available without authentication. Private records require their owner.","operationId":"download_decoded_email_part","parameters":[{"in":"path","name":"part_id","required":true,"schema":{"format":"uuid","title":"Part Id","type":"string"}},{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/octet-stream":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Download Decoded Email Part","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/parts/{part_id}/raw":{"get":{"description":"Download Raw Email Part. Public records are available without authentication. Private records require their owner.","operationId":"download_raw_email_part","parameters":[{"in":"path","name":"part_id","required":true,"schema":{"format":"uuid","title":"Part Id","type":"string"}},{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/octet-stream":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Download Raw Email Part","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/refresh-authentication":{"post":{"description":"Refresh Email Authentication. Authentication is required. Record access follows account ownership.","operationId":"refresh_email_authentication","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Refresh Email Authentication","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/reparse":{"post":{"description":"Reparse Email. Authentication is required. Record access follows account ownership.","operationId":"reparse_email","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Reparse Email","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/email/urls":{"get":{"description":"List Email Urls. Public records are available without authentication. Private records require their owner.","operationId":"list_email_urls","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_EmailUrlOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Email Urls","tags":["email-analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/evaluations":{"get":{"description":"Return immutable evaluation generations, newest first. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_evaluations","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_AnalysisEvaluationSummary_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Evaluations","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/favicons":{"get":{"description":"Return current favicon records, including one exact selected record. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_favicons","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"favicon_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Favicon Id"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_FaviconOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Favicons","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/identifiers":{"get":{"description":"List Analysis Identifiers. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_identifiers","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"identifier_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Identifier Id"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/IdentifierKind"},{"type":"null"}],"title":"Kind"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_IdentifierOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Identifiers","tags":["identifiers"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/infrastructure":{"get":{"description":"Return endpoints grouped by network service with their technologies. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_infrastructure","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"endpoint","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Endpoint"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_InfrastructureEndpointOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Infrastructure","tags":["infrastructure"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/javascript-functions":{"get":{"description":"List Analysis Javascript Functions. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_javascript_functions","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":256,"minLength":1,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"fingerprint_sha256","required":false,"schema":{"anyOf":[{"pattern":"^[0-9a-f]{64}$","type":"string"},{"type":"null"}],"title":"Fingerprint Sha256"}},{"in":"query","name":"function_kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Function Kind"}},{"in":"query","name":"source_kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Source Kind"}},{"in":"query","name":"resource_url","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Resource Url"}},{"in":"query","name":"request_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"}},{"in":"query","name":"low_information","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Low Information"}},{"in":"query","name":"include_suppressed","required":false,"schema":{"default":false,"title":"Include Suppressed","type":"boolean"}},{"in":"query","name":"only_suppressed","required":false,"schema":{"default":false,"title":"Only Suppressed","type":"boolean"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_JavaScriptFunctionGlobalOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Javascript Functions","tags":["javascript-functions"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/navigation-children/eligibility":{"get":{"description":"Return source modes that each current navigation can use. Public records are available without authentication. Private records require their owner.","operationId":"navigation_child_eligibility","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/NavigationChildEligibilityOut"},"title":"Response Navigation Child Eligibility","type":"array"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Navigation Child Eligibility","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/navigations/{navigation_id}/children":{"post":{"description":"Create one isolated child from current navigation evidence. Authentication is required. Record access follows account ownership.","operationId":"create_navigation_child","parameters":[{"in":"path","name":"navigation_id","required":true,"schema":{"format":"uuid","title":"Navigation Id","type":"string"}},{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/NavigationChildCreateRequest"}}},"required":true},"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/NavigationChildResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Create Navigation Child","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/overview":{"get":{"description":"Return exact, compact distributions for the analysis Overview tab. Public records are available without authentication. Private records require their owner.","operationId":"get_analysis_overview","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AnalysisOverviewPlots"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Analysis Overview","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/page-snapshots":{"get":{"description":"Return rendered DOM facts in capture order. Public records are available without authentication. Private records require their owner.","operationId":"list_page_snapshots","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"description":"Restrict to one navigation, by its index","in":"query","name":"navigation","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"description":"Restrict to one navigation, by its index","title":"Navigation"}},{"in":"query","name":"snapshot_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Snapshot Id"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/PageSnapshotOut"},"title":"Response List Page Snapshots","type":"array"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Page Snapshots","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/page-snapshots/{snapshot_id}/screenshot":{"get":{"description":"Page Snapshot Screenshot. Public records are available without authentication. Private records require their owner.","operationId":"page_snapshot_screenshot","parameters":[{"in":"path","name":"snapshot_id","required":true,"schema":{"format":"uuid","title":"Snapshot Id","type":"string"}},{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"image/png":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Page Snapshot Screenshot","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/payloads":{"get":{"description":"List Analysis Payloads. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_payloads","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"minLength":64,"pattern":"^[0-9a-f]{64}$","type":"string"},{"type":"null"}],"title":"Sha256"}},{"in":"query","name":"kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Kind"}},{"in":"query","name":"acquisition","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Acquisition"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_PayloadOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Payloads","tags":["payloads"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/qr-codes":{"get":{"description":"List decoded values, exact source frames, and related group analyses. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_qr_codes","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"qr_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Qr Id"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/QrCodeListOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Qr Codes","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/reanalyse":{"post":{"description":"Replay the stored archive through an instrumented browser.\n\nNeeded only when the instrumentation itself changed. A replayed run can\ndiverge from the recorded one; see ``replay_miss_count`` on the result. Authentication is required. Record access follows account ownership.","operationId":"reanalyse","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Reanalyse","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/recapture":{"post":{"description":"Capture the source again as a new immutable analysis member. Authentication is required. Record access follows account ownership.","operationId":"recapture","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Recapture","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/refresh-archive":{"post":{"description":"Refresh archive extraction and stored-screenshot QR decoding without a browser. Authentication is required. Record access follows account ownership.","operationId":"refresh_archive","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Refresh Archive","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/requests":{"get":{"description":"List Analysis Requests. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_requests","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"navigation","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"title":"Navigation"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"host","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Host"}},{"in":"query","name":"domain","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Domain"}},{"in":"query","name":"path","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Path"}},{"in":"query","name":"filename","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Filename"}},{"in":"query","name":"remote_ip","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Remote Ip"}},{"in":"query","name":"hash","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Hash"}},{"in":"query","name":"mime","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Mime"}},{"in":"query","name":"method","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Method"}},{"in":"query","name":"resource_type","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Resource Type"}},{"in":"query","name":"status","required":false,"schema":{"anyOf":[{"maximum":599,"minimum":100,"type":"integer"},{"type":"null"}],"title":"Status"}},{"in":"query","name":"tls_fingerprint","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Fingerprint"}},{"in":"query","name":"tls_spki_hash","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Spki Hash"}},{"in":"query","name":"tls_version","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Tls Version"}},{"in":"query","name":"tls_cipher","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Cipher"}},{"in":"query","name":"tls_sni","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Tls Sni"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_RequestOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Requests","tags":["requests"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/requests/facets":{"get":{"description":"Request Filter Options. Public records are available without authentication. Private records require their owner.","operationId":"request_filter_options","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/RequestFilterOptions"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Request Filter Options","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/rescore":{"post":{"description":"Re-run the rules over stored observations.\n\nNo browser and no replay. This is the loop to use after changing a rule. Authentication is required. Record access follows account ownership.","operationId":"rescore","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Rescore","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/screenshot":{"get":{"description":"Return the preferred screenshot, without a provider warning when possible. Public records are available without authentication. Private records require their owner.","operationId":"analysis_screenshot","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"image/png":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Analysis Screenshot","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/similar":{"get":{"description":"Return visible, eligible analyses with matching current web facts. Public records are available without authentication. Private records require their owner.","operationId":"list_similar_analyses","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":20,"maximum":100,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"kit_threshold","required":false,"schema":{"default":70,"maximum":100,"minimum":0,"title":"Kit Threshold","type":"integer"}},{"in":"query","name":"operation_threshold","required":false,"schema":{"default":70,"maximum":100,"minimum":0,"title":"Operation Threshold","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SimilarAnalysesResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"409":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Conflict","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Similar Analyses","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/source":{"get":{"description":"Download a persisted HTML input after the strongest available verification. Public records are available without authentication. Private records require their owner.","operationId":"download_html_source","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/octet-stream":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Download Html Source","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/tls-certificates":{"get":{"description":"List Analysis Tls Certificates. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_tls_certificates","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"fingerprint","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Fingerprint"}},{"in":"query","name":"spki_hash","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Spki Hash"}},{"in":"query","name":"subject","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Subject"}},{"in":"query","name":"issuer","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Issuer"}},{"in":"query","name":"dns_name","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Dns Name"}},{"description":"Return certificates that are valid at this inclusive UTC instant","in":"query","name":"valid_at","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"description":"Return certificates that are valid at this inclusive UTC instant","title":"Valid At"}},{"description":"Compare not_after with the current database time","in":"query","name":"expired","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Compare not_after with the current database time","title":"Expired"}},{"description":"Compare not_before with the current database time","in":"query","name":"not_yet_valid","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Compare not_before with the current database time","title":"Not Yet Valid"}},{"description":"Return certificates with not_after before this exclusive instant","in":"query","name":"expiring_before","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"description":"Return certificates with not_after before this exclusive instant","title":"Expiring Before"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_TlsCertificateOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Tls Certificates","tags":["tls-certificates"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analyses/{analysis_id}/wacz":{"get":{"description":"Download the stored archive. Public records are available without authentication. Private records require their owner.","operationId":"download_wacz","parameters":[{"in":"path","name":"analysis_id","required":true,"schema":{"format":"uuid","title":"Analysis Id","type":"string"}}],"responses":{"200":{"content":{"application/wacz":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Download Wacz","tags":["analyses"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups":{"get":{"description":"List Analysis Groups. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_groups","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"status","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisGroupStatus"},{"type":"null"}],"title":"Status"}},{"in":"query","name":"origin","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisGroupOrigin"},{"type":"null"}],"title":"Origin"}},{"in":"query","name":"completeness","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisGroupCompleteness"},{"type":"null"}],"title":"Completeness"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":512,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_AnalysisGroupSummary_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Groups","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/eml":{"post":{"description":"Submit an EML message using multipart form data. The limit is 25 MiB. The response contains primary_analysis_id, group_id, and operation_id. Related group members can finish after the primary operation. Public records are available without authentication. Private records require their owner.","operationId":"submit_eml","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_submit_eml"}}},"required":true},"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EmlAcceptedResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Submit Eml","tags":["analysis-groups"],"x-api-key-scopes":["data:read","analysis:submit"],"x-sdk-supported":true}},"/api/analysis-groups/export.csv":{"get":{"description":"Export Analysis Groups Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_analysis_groups_csv","parameters":[{"in":"query","name":"status","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisGroupStatus"},{"type":"null"}],"title":"Status"}},{"in":"query","name":"origin","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisGroupOrigin"},{"type":"null"}],"title":"Origin"}},{"in":"query","name":"completeness","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/AnalysisGroupCompleteness"},{"type":"null"}],"title":"Completeness"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":512,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Analysis Groups Csv","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/{group_id}":{"get":{"description":"Get Analysis Group. Public records are available without authentication. Private records require their owner.","operationId":"get_analysis_group","parameters":[{"in":"path","name":"group_id","required":true,"schema":{"format":"uuid","title":"Group Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AnalysisGroupDetail"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Analysis Group","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/{group_id}/members":{"get":{"description":"List Analysis Group Members. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_group_members","parameters":[{"in":"path","name":"group_id","required":true,"schema":{"format":"uuid","title":"Group Id","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_AnalysisSummary_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Group Members","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/{group_id}/relationships":{"get":{"description":"Return a bounded graph with member and relationship context. Public records are available without authentication. Private records require their owner.","operationId":"list_analysis_group_relationships","parameters":[{"in":"path","name":"group_id","required":true,"schema":{"format":"uuid","title":"Group Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/RelationshipGraph"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Analysis Group Relationships","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/{group_id}/source":{"get":{"description":"Download an EML group source after exact integrity verification. Public records are available without authentication. Private records require their owner.","operationId":"download_eml_source","parameters":[{"in":"path","name":"group_id","required":true,"schema":{"format":"uuid","title":"Group Id","type":"string"}}],"responses":{"200":{"content":{"application/octet-stream":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Download Eml Source","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/{group_id}/sources/{source_member_key}/variants":{"post":{"description":"Atomically create missing variants, operations, and outbox messages. Authentication is required. Record access follows account ownership.","operationId":"create_execution_variants","parameters":[{"in":"path","name":"source_member_key","required":true,"schema":{"title":"Source Member Key","type":"string"}},{"in":"path","name":"group_id","required":true,"schema":{"format":"uuid","title":"Group Id","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VariantCreateRequest"}}},"required":true},"responses":{"202":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VariantBatchResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Create Execution Variants","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/{group_id}/sources/{source_member_key}/variants/preview":{"post":{"description":"Preview a bounded profile combination request. Authentication is required. Record access follows account ownership.","operationId":"preview_execution_variants","parameters":[{"in":"path","name":"source_member_key","required":true,"schema":{"title":"Source Member Key","type":"string"}},{"in":"path","name":"group_id","required":true,"schema":{"format":"uuid","title":"Group Id","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VariantPreviewRequest"}}},"required":true},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VariantBatchResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Preview Execution Variants","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/{group_id}/variant-comparison":{"get":{"description":"Compare each representative web variant with its source baseline. Public records are available without authentication. Private records require their owner.","operationId":"get_variant_comparison","parameters":[{"in":"path","name":"group_id","required":true,"schema":{"format":"uuid","title":"Group Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VariantComparisonMatrix"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Variant Comparison","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/analysis-groups/{group_id}/variants":{"get":{"description":"List the representative attempt for each group variant. Public records are available without authentication. Private records require their owner.","operationId":"list_execution_variants","parameters":[{"in":"path","name":"group_id","required":true,"schema":{"format":"uuid","title":"Group Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/VariantItem"},"title":"Response List Execution Variants","type":"array"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Execution Variants","tags":["analysis-groups"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/behavior-events":{"get":{"description":"List Global Behavior Events. Public records are available without authentication. Private records require their owner.","operationId":"list_global_behavior_events","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"navigation","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"title":"Navigation"}},{"in":"query","name":"kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Kind"}},{"in":"query","name":"name","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Name"}},{"in":"query","name":"source_api","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Source Api"}},{"in":"query","name":"argument_sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"minLength":64,"type":"string"},{"type":"null"}],"title":"Argument Sha256"}},{"in":"query","name":"user_gesture","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"User Gesture"}},{"in":"query","name":"ts_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Ts From"}},{"in":"query","name":"ts_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Ts To"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_BehaviorEventOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Global Behavior Events","tags":["behavior-events"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/behavior-events/export.csv":{"get":{"description":"Export Behavior Events Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_behavior_events_csv","parameters":[{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"navigation","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"title":"Navigation"}},{"in":"query","name":"kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Kind"}},{"in":"query","name":"name","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Name"}},{"in":"query","name":"source_api","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Source Api"}},{"in":"query","name":"argument_sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"minLength":64,"type":"string"},{"type":"null"}],"title":"Argument Sha256"}},{"in":"query","name":"user_gesture","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"User Gesture"}},{"in":"query","name":"ts_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Ts From"}},{"in":"query","name":"ts_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Ts To"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Behavior Events Csv","tags":["behavior-events"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/brands":{"get":{"description":"List registry brands with the case count the caller can see. Public records are available without authentication. Private records require their owner.","operationId":"list_brands","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"description":"Substring of the name or slug","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"description":"Substring of the name or slug","title":"Q"}},{"description":"Only brands the rules load","in":"query","name":"enabled","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Only brands the rules load","title":"Enabled"}},{"description":"Only brands flagged for review","in":"query","name":"needs_review","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Only brands flagged for review","title":"Needs Review"}},{"description":"Only brands with at least one visible case","in":"query","name":"has_cases","required":false,"schema":{"default":false,"description":"Only brands with at least one visible case","title":"Has Cases","type":"boolean"}},{"in":"query","name":"sort","required":false,"schema":{"default":"last_seen","enum":["last_seen","cases","name","slug"],"title":"Sort","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_BrandOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Brands","tags":["brands"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/brands/export.csv":{"get":{"description":"Export the filtered brand registry as CSV. Public records are available without authentication. Private records require their owner.","operationId":"export_brands","parameters":[{"description":"Substring of the name or slug","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"description":"Substring of the name or slug","title":"Q"}},{"description":"Only brands the rules load","in":"query","name":"enabled","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Only brands the rules load","title":"Enabled"}},{"description":"Only brands flagged for review","in":"query","name":"needs_review","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Only brands flagged for review","title":"Needs Review"}},{"description":"Only brands with at least one visible case","in":"query","name":"has_cases","required":false,"schema":{"default":false,"description":"Only brands with at least one visible case","title":"Has Cases","type":"boolean"}},{"in":"query","name":"sort","required":false,"schema":{"default":"last_seen","enum":["last_seen","cases","name","slug"],"title":"Sort","type":"string"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Brands","tags":["brands"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/brands/{slug}":{"get":{"description":"Return one brand, its detection records, and where it was abused. Public records are available without authentication. Private records require their owner.","operationId":"get_brand","parameters":[{"in":"path","name":"slug","required":true,"schema":{"title":"Slug","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/BrandDetailOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Brand","tags":["brands"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/brands/{slug}/analyses":{"get":{"description":"List the cases whose current evaluation names this brand. Public records are available without authentication. Private records require their owner.","operationId":"brand_analyses","parameters":[{"in":"path","name":"slug","required":true,"schema":{"title":"Slug","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_AnalysisSummary_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Brand Analyses","tags":["brands"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/brands/{slug}/mark":{"get":{"description":"Return the stored mark for one brand.\n\nThe bytes are served from the registry rather than proxied. The API has\nno outbound access, and a request to the mark source from an analyst's\nbrowser would disclose which brand is being reviewed.\n\nThe registry is public, so this needs no visibility check: the response\nsays which brand exists, which the brand list already says. Public records are available without authentication. Private records require their owner.","operationId":"render_brand_mark","parameters":[{"in":"path","name":"slug","required":true,"schema":{"title":"Slug","type":"string"}}],"responses":{"200":{"content":{"image/*":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Render Brand Mark","tags":["brands"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/execution-profiles":{"get":{"description":"Return the committed profile catalog without secret values. Public records are available without authentication. Private records require their owner.","operationId":"get_execution_profiles","responses":{"200":{"content":{"application/json":{"schema":{"additionalProperties":true,"title":"Response Get Execution Profiles","type":"object"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Execution Profiles","tags":["execution-profiles"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/favicons/{favicon_id}/content":{"get":{"description":"Return the exact decoded bytes for a current favicon record. Public records are available without authentication. Private records require their owner.","operationId":"render_favicon_content","parameters":[{"in":"path","name":"favicon_id","required":true,"schema":{"format":"uuid","title":"Favicon Id","type":"string"}}],"responses":{"200":{"content":{"image/*":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Render Favicon Content","tags":["favicons"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/guest/usage":{"get":{"description":"Return quota use for the trusted guest IP. Public records are available without authentication. Private records require their owner.","operationId":"get_guest_usage","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/GuestUsageSummaryOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Guest Usage","tags":["usage"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/identifiers":{"get":{"description":"List Identifiers. Public records are available without authentication. Private records require their owner.","operationId":"list_identifiers","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"description":"Substring of the identifier value","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"description":"Substring of the identifier value","title":"Q"}},{"in":"query","name":"kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/IdentifierKind"},{"type":"null"}],"title":"Kind"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"normalized_value","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Normalized Value"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_IdentifierGlobalOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Identifiers","tags":["identifiers"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/identifiers/export.csv":{"get":{"description":"Export Identifiers Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_identifiers_csv","parameters":[{"description":"Substring of the identifier value","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"description":"Substring of the identifier value","title":"Q"}},{"in":"query","name":"kind","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/IdentifierKind"},{"type":"null"}],"title":"Kind"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"normalized_value","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Normalized Value"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Identifiers Csv","tags":["identifiers"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/infrastructure/export.csv":{"get":{"description":"Export Infrastructure Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_infrastructure_csv","parameters":[{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"host","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Host"}},{"in":"query","name":"domain","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Domain"}},{"in":"query","name":"ip","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Ip"}},{"in":"query","name":"asn","required":false,"schema":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"title":"Asn"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Infrastructure Csv","tags":["infrastructure"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/interaction-actions/export.csv":{"get":{"description":"Export Interaction Actions Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_interaction_actions_csv","parameters":[{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Kind"}},{"in":"query","name":"outcome","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Outcome"}},{"in":"query","name":"credential_field","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Credential Field"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Interaction Actions Csv","tags":["interactions"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/interaction-credentials/lookup":{"post":{"description":"Lookup Interaction Credential. Public records are available without authentication. Private records require their owner.","operationId":"lookup_interaction_credential","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CredentialLookupRequest"}}},"required":true},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CredentialLookupOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Lookup Interaction Credential","tags":["interactions"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/javascript-functions":{"get":{"description":"List Javascript Functions. Public records are available without authentication. Private records require their owner.","operationId":"list_javascript_functions","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":256,"minLength":1,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"fingerprint_sha256","required":false,"schema":{"anyOf":[{"pattern":"^[0-9a-f]{64}$","type":"string"},{"type":"null"}],"title":"Fingerprint Sha256"}},{"in":"query","name":"function_kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Function Kind"}},{"in":"query","name":"source_kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Source Kind"}},{"in":"query","name":"resource_url","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Resource Url"}},{"in":"query","name":"request_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"}},{"in":"query","name":"low_information","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Low Information"}},{"in":"query","name":"include_suppressed","required":false,"schema":{"default":false,"title":"Include Suppressed","type":"boolean"}},{"in":"query","name":"only_suppressed","required":false,"schema":{"default":false,"title":"Only Suppressed","type":"boolean"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_JavaScriptFunctionGlobalOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Javascript Functions","tags":["javascript-functions"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/javascript-functions/export.csv":{"get":{"description":"Export Javascript Functions Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_javascript_functions_csv","parameters":[{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":256,"minLength":1,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"fingerprint_sha256","required":false,"schema":{"anyOf":[{"pattern":"^[0-9a-f]{64}$","type":"string"},{"type":"null"}],"title":"Fingerprint Sha256"}},{"in":"query","name":"function_kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Function Kind"}},{"in":"query","name":"source_kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Source Kind"}},{"in":"query","name":"resource_url","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Resource Url"}},{"in":"query","name":"request_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Request Id"}},{"in":"query","name":"low_information","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Low Information"}},{"in":"query","name":"include_suppressed","required":false,"schema":{"default":false,"title":"Include Suppressed","type":"boolean"}},{"in":"query","name":"only_suppressed","required":false,"schema":{"default":false,"title":"Only Suppressed","type":"boolean"}},{"in":"query","name":"created_from","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created From"}},{"in":"query","name":"created_to","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"title":"Created To"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Javascript Functions Csv","tags":["javascript-functions"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/javascript-functions/{function_id}":{"get":{"description":"Get Javascript Function. Public records are available without authentication. Private records require their owner.","operationId":"get_javascript_function","parameters":[{"in":"path","name":"function_id","required":true,"schema":{"format":"uuid","title":"Function Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/JavaScriptFunctionGlobalOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Javascript Function","tags":["javascript-functions"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/operations/{operation_id}":{"get":{"description":"Read durable work status. Poll with a delay until status is succeeded, failed, or cancelled. A successful operation does not establish a threat verdict. Public records are available without authentication. Private records require their owner.","operationId":"get_operation","parameters":[{"in":"path","name":"operation_id","required":true,"schema":{"format":"uuid","title":"Operation Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/OperationOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Operation","tags":["operations"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/operations/{operation_id}/cancel":{"post":{"description":"Cancel Operation. Authentication is required. Record access follows account ownership.","operationId":"cancel_operation","parameters":[{"in":"path","name":"operation_id","required":true,"schema":{"format":"uuid","title":"Operation Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/OperationOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Cancel Operation","tags":["operations"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/payloads":{"get":{"description":"List Payloads. Public records are available without authentication. Private records require their owner.","operationId":"list_payloads","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"sha256","required":false,"schema":{"anyOf":[{"maxLength":64,"minLength":64,"pattern":"^[0-9a-f]{64}$","type":"string"},{"type":"null"}],"title":"Sha256"}},{"in":"query","name":"kind","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Kind"}},{"in":"query","name":"acquisition","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Acquisition"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_PayloadOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Payloads","tags":["payloads"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/payloads/{payload_id}":{"get":{"description":"Get Payload. Public records are available without authentication. Private records require their owner.","operationId":"get_payload","parameters":[{"in":"path","name":"payload_id","required":true,"schema":{"format":"uuid","title":"Payload Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PayloadOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Payload","tags":["payloads"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/payloads/{payload_id}/sample":{"get":{"description":"Return the delivered file inside an encrypted archive.\n\nThis endpoint requires an account. It hands a live malware sample to the\ncaller, so the request must be attributable.\n\nThe archive uses AES with the fixed password ``infected``. The password\nis published and adds no secrecy. It prevents the recipient's browser and\nendpoint protection from opening or quarantining the file in transit. Authentication is required. Record access follows account ownership.","operationId":"download_payload_sample","parameters":[{"in":"path","name":"payload_id","required":true,"schema":{"format":"uuid","title":"Payload Id","type":"string"}}],"responses":{"200":{"content":{"application/zip":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{"HTTPBearer":[]}],"summary":"Download Payload Sample","tags":["payloads"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/phishing-kits":{"get":{"description":"List derived phishing kits the caller can see. Public records are available without authentication. Private records require their owner.","operationId":"list_phishing_kits","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"description":"Substring of the codename","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"description":"Substring of the codename","title":"Q"}},{"in":"query","name":"technology","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Technology"}},{"in":"query","name":"evidence","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Evidence"}},{"in":"query","name":"min_members","required":false,"schema":{"default":2,"maximum":10000,"minimum":2,"title":"Min Members","type":"integer"}},{"in":"query","name":"state","required":false,"schema":{"$ref":"#/components/schemas/ClusterState","default":"active"}},{"in":"query","name":"sort","required":false,"schema":{"default":"last_seen","enum":["members","last_seen","first_seen"],"title":"Sort","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_PhishingKitOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Phishing Kits","tags":["phishing-kits"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/phishing-kits/export.csv":{"get":{"description":"Export the visible phishing kits as CSV. Public records are available without authentication. Private records require their owner.","operationId":"export_phishing_kits_csv","parameters":[{"description":"Substring of the codename","in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"description":"Substring of the codename","title":"Q"}},{"in":"query","name":"technology","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Technology"}},{"in":"query","name":"evidence","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Evidence"}},{"in":"query","name":"min_members","required":false,"schema":{"default":2,"maximum":10000,"minimum":2,"title":"Min Members","type":"integer"}},{"in":"query","name":"state","required":false,"schema":{"$ref":"#/components/schemas/ClusterState","default":"active"}},{"in":"query","name":"sort","required":false,"schema":{"default":"last_seen","enum":["members","last_seen","first_seen"],"title":"Sort","type":"string"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Phishing Kits Csv","tags":["phishing-kits"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/phishing-kits/stats":{"get":{"description":"Return corpus-level kit counts for the caller. Public records are available without authentication. Private records require their owner.","operationId":"phishing_kit_stats","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ClusterStatsResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Phishing Kit Stats","tags":["phishing-kits"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/phishing-kits/{slug}":{"get":{"description":"Return one derived phishing kit. Public records are available without authentication. Private records require their owner.","operationId":"get_phishing_kit","parameters":[{"in":"path","name":"slug","required":true,"schema":{"title":"Slug","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PhishingKitDetailOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Phishing Kit","tags":["phishing-kits"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/phishing-kits/{slug}/analyses":{"get":{"description":"List visible kit cases, optionally shared with a current actor.\n\nA filtered historical pair returns 409 with code ``cluster_not_current``. Public records are available without authentication. Private records require their owner.","operationId":"list_phishing_kit_analyses","parameters":[{"in":"path","name":"slug","required":true,"schema":{"title":"Slug","type":"string"}},{"description":"Shared actor filter","in":"query","name":"actor_slug","required":false,"schema":{"anyOf":[{"maxLength":64,"minLength":1,"type":"string"},{"type":"null"}],"description":"Shared actor filter","title":"Actor Slug"}},{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_ClusterMemberOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"409":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Conflict","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Phishing Kit Analyses","tags":["phishing-kits"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/requests":{"get":{"description":"List Requests. Public records are available without authentication. Private records require their owner.","operationId":"list_requests","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"host","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Host"}},{"in":"query","name":"domain","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Domain"}},{"in":"query","name":"path","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Path"}},{"in":"query","name":"filename","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Filename"}},{"in":"query","name":"remote_ip","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Remote Ip"}},{"in":"query","name":"hash","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Hash"}},{"in":"query","name":"mime","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Mime"}},{"in":"query","name":"method","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Method"}},{"in":"query","name":"resource_type","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Resource Type"}},{"in":"query","name":"status","required":false,"schema":{"anyOf":[{"maximum":599,"minimum":100,"type":"integer"},{"type":"null"}],"title":"Status"}},{"in":"query","name":"tls_fingerprint","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Fingerprint"}},{"in":"query","name":"tls_spki_hash","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Spki Hash"}},{"in":"query","name":"tls_version","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Tls Version"}},{"in":"query","name":"tls_cipher","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Cipher"}},{"in":"query","name":"tls_sni","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Tls Sni"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_RequestOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Requests","tags":["requests"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/requests/export.csv":{"get":{"description":"Export Requests Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_requests_csv","parameters":[{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"q","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Q"}},{"in":"query","name":"host","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Host"}},{"in":"query","name":"domain","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Domain"}},{"in":"query","name":"path","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Path"}},{"in":"query","name":"filename","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Filename"}},{"in":"query","name":"remote_ip","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Remote Ip"}},{"in":"query","name":"hash","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Hash"}},{"in":"query","name":"mime","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Mime"}},{"in":"query","name":"method","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Method"}},{"in":"query","name":"resource_type","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Resource Type"}},{"in":"query","name":"status","required":false,"schema":{"anyOf":[{"maximum":599,"minimum":100,"type":"integer"},{"type":"null"}],"title":"Status"}},{"in":"query","name":"tls_fingerprint","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Fingerprint"}},{"in":"query","name":"tls_spki_hash","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Spki Hash"}},{"in":"query","name":"tls_version","required":false,"schema":{"anyOf":[{"maxLength":32,"type":"string"},{"type":"null"}],"title":"Tls Version"}},{"in":"query","name":"tls_cipher","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Tls Cipher"}},{"in":"query","name":"tls_sni","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Tls Sni"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Requests Csv","tags":["requests"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/requests/{request_id}":{"get":{"description":"Get Request. Public records are available without authentication. Private records require their owner.","operationId":"get_request","parameters":[{"in":"path","name":"request_id","required":true,"schema":{"format":"uuid","title":"Request Id","type":"string"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/RequestOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Request","tags":["requests"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/requests/{request_id}/body":{"get":{"description":"Read Request Body. Public records are available without authentication. Private records require their owner.","operationId":"read_request_body","parameters":[{"in":"path","name":"request_id","required":true,"schema":{"format":"uuid","title":"Request Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/RequestBodyOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Read Request Body","tags":["requests"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/requests/{request_id}/content":{"get":{"description":"Return decoded entity bytes for a sandboxed browser preview. Public records are available without authentication. Private records require their owner.","operationId":"render_request_content","parameters":[{"in":"path","name":"request_id","required":true,"schema":{"format":"uuid","title":"Request Id","type":"string"}}],"responses":{"200":{"content":{"*/*":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Render Request Content","tags":["requests"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/requests/{request_id}/raw":{"get":{"description":"Download Request Raw. Public records are available without authentication. Private records require their owner.","operationId":"download_request_raw","parameters":[{"in":"path","name":"request_id","required":true,"schema":{"format":"uuid","title":"Request Id","type":"string"}}],"responses":{"200":{"content":{"application/octet-stream":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Download Request Raw","tags":["requests"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/requests/{request_id}/request-body":{"get":{"description":"Read Archived Request Body. Public records are available without authentication. Private records require their owner.","operationId":"read_archived_request_body","parameters":[{"in":"path","name":"request_id","required":true,"schema":{"format":"uuid","title":"Request Id","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/RequestBodyOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Read Archived Request Body","tags":["requests"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/rules":{"get":{"description":"List Rules. Public records are available without authentication. Private records require their owner.","operationId":"list_rules","responses":{"200":{"content":{"application/json":{"schema":{"items":{"$ref":"#/components/schemas/RuleOut"},"title":"Response List Rules","type":"array"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Rules","tags":["rules"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/search":{"get":{"description":"Search visible evidence using q or JSON-encoded filters. Use per_type_limit rather than limit. Offset pagination is supported only with type=analysis. total_is_exact=false identifies a lower-bound count. Public records are available without authentication. Private records require their owner.","operationId":"search_all","parameters":[{"in":"query","name":"q","required":false,"schema":{"default":"","maxLength":512,"title":"Q","type":"string"}},{"in":"query","name":"per_type_limit","required":false,"schema":{"default":10,"maximum":25,"minimum":1,"title":"Per Type Limit","type":"integer"}},{"in":"query","name":"type","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/SearchResultType"},{"type":"null"}],"title":"Type"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"maximum":100000,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"filters","required":false,"schema":{"anyOf":[{"maxLength":16384,"type":"string"},{"type":"null"}],"title":"Filters"}},{"description":"Compute exact totals. False returns a lower bound and fetches one extra match to detect truncation.","in":"query","name":"include_total","required":false,"schema":{"default":true,"description":"Compute exact totals. False returns a lower bound and fetches one extra match to detect truncation.","title":"Include Total","type":"boolean"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SearchResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Search All","tags":["search"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/signals":{"get":{"description":"List Signals. Public records are available without authentication. Private records require their owner.","operationId":"list_signals","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"signal_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Signal Id"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"rule_id","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Rule Id"}},{"in":"query","name":"severity","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/Severity"},{"type":"null"}],"title":"Severity"}},{"in":"query","name":"label","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Label"}},{"in":"query","name":"fingerprint","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Fingerprint"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_SignalOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Signals","tags":["signals"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/signals/export.csv":{"get":{"description":"Export Signals Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_signals_csv","parameters":[{"in":"query","name":"signal_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Signal Id"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}},{"in":"query","name":"rule_id","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Rule Id"}},{"in":"query","name":"severity","required":false,"schema":{"anyOf":[{"$ref":"#/components/schemas/Severity"},{"type":"null"}],"title":"Severity"}},{"in":"query","name":"label","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Label"}},{"in":"query","name":"fingerprint","required":false,"schema":{"anyOf":[{"maxLength":64,"type":"string"},{"type":"null"}],"title":"Fingerprint"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Signals Csv","tags":["signals"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/stats/distribution":{"get":{"description":"Distribution. Public records are available without authentication. Private records require their owner.","operationId":"distribution","parameters":[{"in":"query","name":"dimension","required":false,"schema":{"default":"rule","pattern":"^(rule|severity|status|input_kind|execution_kind|brand)$","title":"Dimension","type":"string"}},{"in":"query","name":"limit","required":false,"schema":{"default":10,"maximum":100,"minimum":1,"title":"Limit","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DistributionResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Distribution","tags":["stats"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/stats/growth":{"get":{"description":"Growth. Public records are available without authentication. Private records require their owner.","operationId":"growth","parameters":[{"in":"query","name":"days","required":false,"schema":{"default":30,"maximum":365,"minimum":1,"title":"Days","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/GrowthResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Growth","tags":["stats"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/stats/hosting-countries":{"get":{"description":"Count visible malicious web analyses once per observed server country. Public records are available without authentication. Private records require their owner.","operationId":"hosting_countries","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/HostingCountriesResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Hosting Countries","tags":["stats"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/stats/identifier-kinds":{"get":{"description":"Identifier kinds observed across the most distinct analyses. Public records are available without authentication. Private records require their owner.","operationId":"identifier_kinds","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":10,"maximum":100,"minimum":1,"title":"Limit","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DistributionResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Identifier Kinds","tags":["stats"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/stats/overview":{"get":{"description":"Counts for the dashboard header.\n\nExact counts are used deliberately: this table holds one row per\nsubmission, so it stays small enough that an approximation from\npg_class would trade accuracy for nothing. Public records are available without authentication. Private records require their owner.","operationId":"overview","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Overview"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Overview","tags":["stats"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/stats/top-domains":{"get":{"description":"Third-party domains observed across the most distinct analyses. Public records are available without authentication. Private records require their owner.","operationId":"top_domains","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":10,"maximum":100,"minimum":1,"title":"Limit","type":"integer"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DistributionResponse"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Top Domains","tags":["stats"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/tls-certificates":{"get":{"description":"List Tls Certificates. Public records are available without authentication. Private records require their owner.","operationId":"list_tls_certificates","parameters":[{"in":"query","name":"limit","required":false,"schema":{"default":50,"maximum":500,"minimum":1,"title":"Limit","type":"integer"}},{"in":"query","name":"offset","required":false,"schema":{"default":0,"minimum":0,"title":"Offset","type":"integer"}},{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"fingerprint","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Fingerprint"}},{"in":"query","name":"spki_hash","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Spki Hash"}},{"in":"query","name":"subject","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Subject"}},{"in":"query","name":"issuer","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Issuer"}},{"in":"query","name":"dns_name","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Dns Name"}},{"description":"Return certificates that are valid at this inclusive UTC instant","in":"query","name":"valid_at","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"description":"Return certificates that are valid at this inclusive UTC instant","title":"Valid At"}},{"description":"Compare not_after with the current database time","in":"query","name":"expired","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Compare not_after with the current database time","title":"Expired"}},{"description":"Compare not_before with the current database time","in":"query","name":"not_yet_valid","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Compare not_before with the current database time","title":"Not Yet Valid"}},{"description":"Return certificates with not_after before this exclusive instant","in":"query","name":"expiring_before","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"description":"Return certificates with not_after before this exclusive instant","title":"Expiring Before"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Page_TlsCertificateOut_"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"List Tls Certificates","tags":["tls-certificates"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/tls-certificates/export.csv":{"get":{"description":"Export Tls Certificates Csv. Public records are available without authentication. Private records require their owner.","operationId":"export_tls_certificates_csv","parameters":[{"in":"query","name":"analysis","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis"}},{"in":"query","name":"fingerprint","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Fingerprint"}},{"in":"query","name":"spki_hash","required":false,"schema":{"anyOf":[{"maxLength":128,"type":"string"},{"type":"null"}],"title":"Spki Hash"}},{"in":"query","name":"subject","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Subject"}},{"in":"query","name":"issuer","required":false,"schema":{"anyOf":[{"maxLength":4096,"type":"string"},{"type":"null"}],"title":"Issuer"}},{"in":"query","name":"dns_name","required":false,"schema":{"anyOf":[{"maxLength":2048,"type":"string"},{"type":"null"}],"title":"Dns Name"}},{"description":"Return certificates that are valid at this inclusive UTC instant","in":"query","name":"valid_at","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"description":"Return certificates that are valid at this inclusive UTC instant","title":"Valid At"}},{"description":"Compare not_after with the current database time","in":"query","name":"expired","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Compare not_after with the current database time","title":"Expired"}},{"description":"Compare not_before with the current database time","in":"query","name":"not_yet_valid","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"description":"Compare not_before with the current database time","title":"Not Yet Valid"}},{"description":"Return certificates with not_after before this exclusive instant","in":"query","name":"expiring_before","required":false,"schema":{"anyOf":[{"format":"date-time","type":"string"},{"type":"null"}],"description":"Return certificates with not_after before this exclusive instant","title":"Expiring Before"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Export Tls Certificates Csv","tags":["tls-certificates"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/tls-certificates/{certificate_id}":{"get":{"description":"Get Tls Certificate. Public records are available without authentication. Private records require their owner.","operationId":"get_tls_certificate","parameters":[{"in":"path","name":"certificate_id","required":true,"schema":{"format":"uuid","title":"Certificate Id","type":"string"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/TlsCertificateOut"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Get Tls Certificate","tags":["tls-certificates"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}},"/api/tls-certificates/{certificate_id}/der":{"get":{"description":"Download Tls Certificate Der. Public records are available without authentication. Private records require their owner.","operationId":"download_tls_certificate_der","parameters":[{"in":"path","name":"certificate_id","required":true,"schema":{"format":"uuid","title":"Certificate Id","type":"string"}},{"in":"query","name":"analysis_id","required":false,"schema":{"anyOf":[{"format":"uuid","type":"string"},{"type":"null"}],"title":"Analysis Id"}}],"responses":{"200":{"content":{"application/pkix-cert":{"schema":{"format":"binary","type":"string"}}},"description":"Successful Response","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"422":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"Request validation failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"429":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"A request or submission limit was reached.","headers":{"Retry-After":{"description":"Seconds to wait before another request.","schema":{"type":"string"}},"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}},"default":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorResponse"}}},"description":"The request failed.","headers":{"X-Request-ID":{"description":"Request identifier for support and diagnostics.","schema":{"type":"string"}}}}},"security":[{},{"HTTPBearer":[]}],"summary":"Download Tls Certificate Der","tags":["tls-certificates"],"x-api-key-scopes":["data:read"],"x-sdk-supported":true}}},"servers":[{"url":"https://sandfi.sh"}],"x-sandfish-sdk-contract":1}