TAXII

TAXII 2.1 standard endpoints (taxii-server Anti-Corruption Layer)

TAXII Discovery

GET

https://api.reyhford.com

/taxii2/

Returns server discovery information per TAXII 2.1 spec

TAXII Discovery › Responses

TAXII discovery object

TaxiiDiscovery

title

string

description

string

versions

string[]

max_content_length

integer

List Collections

GET

https://api.reyhford.com

/taxii2/collections/

List Collections › Headers

Authorization

string · required

The Authorization header is used to authenticate with the API using your API key. Value is of the format Bearer YOUR_KEY_HERE.

List Collections › Responses

List of TAXII collections

CollectionList

Collection[]

Get Objects

GET

https://api.reyhford.com

/taxii2/collections/{collectionId}/objects/

Retrieve STIX 2.1 objects from a collection

Get Objects › path Parameters

collectionId

string · required

Get Objects › query Parameters

added_after

string · date-time

Return only objects added after this timestamp

limit

integer · min: 1 · max: 1000

Default: 100

next

string

Pagination cursor

Get Objects › Headers

Authorization

string · required

The Authorization header is used to authenticate with the API using your API key. Value is of the format Bearer YOUR_KEY_HERE.

Get Objects › Responses

STIX Bundle

StixBundle

type

string · enum

Enum values:

bundle

id

string

spec_version

string · enum

Enum values:

2.1

StixIndicator[]

more

boolean

next

string

Pagination cursor

GET/taxii2/collections/{collectionId}/objects/

curl https://api.reyhford.com/taxii2/collections/:collectionId/objects \
  --header 'Authorization: Bearer <token>'

Example Responses

{
  "type": "bundle",
  "id": "id",
  "spec_version": "2.1",
  "objects": [
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "00000000-0000-0000-0000-000000000000",
      "created": "2024-08-25T15:00:00Z",
      "modified": "2024-08-25T15:00:00Z",
      "name": "name",
      "pattern": "[ipv4-addr:value = '1.2.3.4']",
      "pattern_type": "stix",
      "valid_from": "2024-08-25T15:00:00Z",
      "confidence": 0,
      "labels": [
        "string"
      ]
    }
  ],
  "more": true,
  "next": "next"
}

json

application/taxii+json;version=2.1

Health

List Collections

GET

https://api.reyhford.com

/taxii2/collections/

List Collections › Headers

Authorization

string · required

The Authorization header is used to authenticate with the API using your API key. Value is of the format Bearer YOUR_KEY_HERE.

List Collections › Responses

List of TAXII collections

CollectionList

Collection[]

Get Objects

GET

https://api.reyhford.com

/taxii2/collections/{collectionId}/objects/

Retrieve STIX 2.1 objects from a collection

Get Objects › path Parameters

collectionId

string · required

Get Objects › query Parameters

added_after

string · date-time

Return only objects added after this timestamp

limit

integer · min: 1 · max: 1000

Default: 100

next

string

Pagination cursor

Get Objects › Headers

Authorization

string · required

The Authorization header is used to authenticate with the API using your API key. Value is of the format Bearer YOUR_KEY_HERE.

Get Objects › Responses

STIX Bundle

StixBundle

type

string · enum

Enum values:

bundle

id

string

spec_version

string · enum

Enum values:

2.1

StixIndicator[]

more

boolean

next

string

Pagination cursor