Reports
Source intelligence documents — the immutable ground truth that every entity links back to.
GET/reports
Returns reports page by page, newest first (by published date, or ingestion date when the published date is unknown).
| Parameter | Type | Description | |
|---|---|---|---|
limit | number | opt | Reports per page (default 100, max 500) |
page | number | opt | Page number, starting at 1 |
The response is { data, total, page, limit, pages }. Each report in data carries its source (source_name, source_evidence_type), entity counts, and up to six names each of the actors, tools, campaigns, TTPs and CVEs it documents.
GET/reports/:id
Full report including its relationships (
edges), its indicators, and source metadata. Accepts the report UUID.What's new
GET/whatsnew
Returns reports, actors, clusters, and tools added to Babel within a recent time window (by date added, not date published). Useful for tracking new intelligence since your last check.
| Parameter | Type | Description | |
|---|---|---|---|
days | number | opt | Lookback window in days (1–365, default 30) |
The response contains four arrays, each capped to the most recent entries within the window:
| Key | Cap | Contents |
|---|---|---|
reports | 50 | Reports with entity counts (threat_actor_count, tool_count, indicator_count, ttp_count) and source metadata |
actors | 30 | Newly added actors with id, name, type, country_code, motivation, created_at |
clusters | 30 | Newly added clusters with id, name, maturity, country_code, created_at |
tools | 30 | Newly added tools with id, name, type, platform, created_at |
The top-level window_days key echoes the effective lookback used.