API docs

Public API documentation

Query the public threat feed and semantic index via our read-only REST API.

GET /api/items

Curated items

List active curated items with pagination and feed facets.

• limitdefault 20, max 100
• offsetdefault 0, max 1,000,000
• tagscomma-separated threat or affected-tech tags
• itemTypecomma-separated item genres
• contentClasscomma-separated classes: threat, news, research, analysis, tool
• toolPosturecomma-separated postures: offensive, defensive, dual-use
• statusthreat lifecycle status
• actorthreat-actor display name (case-insensitive, trimmed match)
• minSeverityminimum threat severity (0..1)
• roleorigin role: original, aggregator, vendor
• sourceIdsource connector id
• frominclusive legacy publishedAt coverage lower bound, ISO 8601; not source publication
• toinclusive legacy publishedAt coverage upper bound, ISO 8601; not source publication
• originprovenance registry slug

curl "https://agentic-threat-tracker.com/api/items?limit=5&contentClass=threat&minSeverity=0.7"

{ "items": [ { "id": "...", "title": "...", "summary": "...", "severityScore": 0.8, ... } ], "total": 142, "limit": 5, "offset": 0 }

View all items as JSON

GET /api/search

Keyword search

Search item titles and summaries by keyword.

• qsearch query string
• limitdefault 20, max 100

curl "https://agentic-threat-tracker.com/api/search?q=zero+day"

{ "items": [ { "id": "...", "title": "...", "summary": "..." } ] }

Search JSON endpoint

GET /api/semantic

Semantic search

Embed a query and return vector-ranked curated items.

• qsearch query string
• topKdefault 10, max 50

curl "https://agentic-threat-tracker.com/api/semantic?q=prompt+injection&topK=5"

{ "results": [ { "item": { "id": "...", "title": "...", "summary": "..." }, "score": 0.92 } ] }

Semantic JSON endpoint

Optional freshness version 1 distinguishes source publication (firstPublishedAt/latestPublishedAt), observation (firstObservedAt/lastObservedAt), established activity (activityAt/activityBasis), meaningfulUpdatedAt and platform feedUpdatedAt. Public development exposes kind only. publishedAt and firstReportedAt are deprecated legacy coverage aggregates; from/to still filter legacy publishedAt. Publication dates are untrusted claims. Historical RSS rows without explicit provenance remain undated until a separately approved repair. Freshness is a stored membership evaluation; raw-date repairs must reconcile it.

RSS feed

GET /feed.xml

Subscribe to the latest 50 platform deliveries. Source publication dates remain honest; corroboration alone does not renew the window. Stable GUIDs do not guarantee reader notifications. It takes no query parameters.

Open /feed.xml