Reports

Source intelligence documents — the immutable ground truth that every entity links back to.

GET/reports

Returns all reports ordered by published date, newest first.

GET/reports/:id

Full report including extracted entities, relationships, and source metadata.

What's new

GET/whatsnew

Returns reports, actors, clusters, and tools added within a recent time window. Useful for tracking new intelligence since your last check.

Parameter	Type		Description
days	number	opt	Lookback window in days (1–365, default 30)

The response contains four arrays, each capped to the most recent entries within the window:

Key	Cap	Contents
reports	50	Reports with entity counts (threat_actor_count, tool_count, indicator_count, ttp_count) and source metadata
actors	30	Newly added actors with id, name, type, country_code, motivation, created_at
clusters	30	Newly added clusters with id, name, maturity, country_code, created_at
tools	30	Newly added tools with id, name, type, platform, created_at

The top-level window_days key echoes the effective lookback used.