SOC API reference (generated)

Auto-generated from the live SOC OpenAPI spec by scripts/sync-api-refs.ts (DOCS-160). Do not hand-edit. Complements the semantic reference in this section.

Title: Cirius SOC · version: 1.0.0 · endpoints: 144

Method	Path	Summary
DELETE	/api/agents/runs	Delete Runs
DELETE	/api/incidents/{incident_id}/links/{linked_id}	Delete Link
DELETE	/api/maintenance/{window_id}	Delete Window
DELETE	/api/rules/{rule_id}	Delete Rule
DELETE	/api/webhooks/{webhook_id}	Delete Webhook
GET	/	Root
GET	/agents/health	Agent Health Ui
GET	/api/agent-decisions	List Decisions
GET	/api/agents/health	Get Health
GET	/api/agents/runs	List Runs
GET	/api/assets/by-ip/{ip}	Get Asset By Ip Api
GET	/api/assets/{system}	Get Asset Api
GET	/api/assets	List Assets Api
GET	/api/attack-team/campaigns	List Campaign Summaries
GET	/api/changes/	List Changes
GET	/api/changes/recent	Get Recent Changes
GET	/api/changes/{change_id}	Get Change
GET	/api/detections/{detection_id}	Get Detection
GET	/api/detections	List Detections
GET	/api/events/stats	Events Stats
GET	/api/incidents/	List Incidents
GET	/api/incidents/actor-summary	Actor Summary
GET	/api/incidents/closed-patterns	Closed Patterns
GET	/api/incidents/detection-efficacy	Detection Efficacy
GET	/api/incidents/export	Export Incidents
GET	/api/incidents/kg-queue	Kg Queue
GET	/api/incidents/newly-opened	List Newly Opened
GET	/api/incidents/open	List Open Incidents
GET	/api/incidents/pending-analyst	List Pending Analyst
GET	/api/incidents/prior-verdicts	Prior Verdicts
GET	/api/incidents/resolved	List Resolved Incidents
GET	/api/incidents/summary	Incident Summary
GET	/api/incidents/suppression-effectiveness	Suppression Effectiveness
GET	/api/incidents/type-summary	Incident Type Summary
GET	/api/incidents/unenriched-open	List Unenriched Open
GET	/api/incidents/{incident_id}/adjacent	Get Adjacent Incidents
GET	/api/incidents/{incident_id}/audit	List Audit
GET	/api/incidents/{incident_id}/comments	List Comments
GET	/api/incidents/{incident_id}/ioc-matches	Ioc Matches
GET	/api/incidents/{incident_id}/links	List Links
GET	/api/incidents/{incident_id}	Get Incident
GET	/api/known-good/stale	List Stale Rules
GET	/api/known-good/stats	Known Good Stats
GET	/api/known-good	List Rules Api
GET	/api/maintenance/	List Windows
GET	/api/maintenance/active	Get Active Windows
GET	/api/metrics/	Get Metrics
GET	/api/metrics/analyst-workload	Analyst Workload
GET	/api/metrics/environment-breakdown	Environment Breakdown
GET	/api/metrics/export	Export Metrics
GET	/api/metrics/phi-exposure	Phi Exposure
GET	/api/metrics/severity-breakdown	Severity Breakdown
GET	/api/metrics/soc-on-call-handoff	Soc On Call Handoff
GET	/api/metrics/weekly-trend	Weekly Trend
GET	/api/mini-trigger/latest	Get Latest
GET	/api/playbooks/runs/{run_id}	Get Run
GET	/api/playbooks/runs	List Runs
GET	/api/playbooks/{playbook_id}	Get Playbook
GET	/api/playbooks	List Playbooks
GET	/api/rules/{rule_id}/hits	Get Rule Hits
GET	/api/rules/{rule_id}	Get Rule
GET	/api/rules	List Rules
GET	/api/search/facets	Search Facets
GET	/api/search/saved	List Saved Searches
GET	/api/tenants/	List Tenants
GET	/api/tenants/{tenant_id}	Get Tenant
GET	/api/threat-intel/cache	Get Cache
GET	/api/threat-intel/{intel_id}	Get Threat Intel
GET	/api/threat-intel	List Threat Intel
GET	/api/webhooks/	List Webhooks
GET	/changes/	Changes List
GET	/changes/{change_id}	Change Detail
GET	/dashboard	Dashboard Redirect
GET	/detections/	Detections List
GET	/health	Health
GET	/incidents/	Incidents List
GET	/incidents/{incident_id}	Incident Detail
GET	/known-good/	List Rules Ui
GET	/known-good/partial	List Rules Partial
GET	/maintenance/	Maintenance Index
GET	/metrics/	Metrics Ui
GET	/playbooks/	Playbooks List
GET	/playbooks/partial	Playbooks Partial
GET	/playbooks/{playbook_id}	Playbook Detail
GET	/robots.txt	Robots
GET	/rules	Rules Page
GET	/threat-intel/	Threat Intel List
GET	/webhooks/	Webhooks Ui
PATCH	/api/assets/{system}/classify	Classify Asset Api
PATCH	/api/assets/{system}/reclassify	Reclassify Asset Api
PATCH	/api/changes/{change_id}	Update Change
PATCH	/api/incidents/{incident_id}	Patch Incident
PATCH	/api/known-good/{rule_id}	Patch Rule Api
PATCH	/api/maintenance/{window_id}	Update Window
PATCH	/api/rules/{rule_id}	Patch Rule
PATCH	/api/tenants/{tenant_id}	Update Tenant
PATCH	/api/webhooks/{webhook_id}	Update Webhook
POST	/api/agent-decisions	Create Decision
POST	/api/agents/runs	Report Run
POST	/api/agents/self-check	Self Check
POST	/api/assets/{system}/sources/{source}	Write Source Bucket
POST	/api/attack-team/campaigns	Record Campaign Summary
POST	/api/changes/	Create Change
POST	/api/detection/queries/na	Mark Not Applicable
POST	/api/detection/queries	Register Agent Queries
POST	/api/detections/{detection_id}/toggle	Toggle Detection
POST	/api/detections	Create Detection
POST	/api/incidents/	Create Incident
POST	/api/incidents/bulk-reset-new	Bulk Reset To New
POST	/api/incidents/bulk-resolve	Bulk Resolve
POST	/api/incidents/refresh-sla	Refresh Sla
POST	/api/incidents/{incident_id}/analyst-decision	Analyst Decision
POST	/api/incidents/{incident_id}/comments	Add Comment
POST	/api/incidents/{incident_id}/detection-enrichment	Detection Enrichment
POST	/api/incidents/{incident_id}/links	Create Link
POST	/api/incidents/{incident_id}/playbook/{playbook_id}/step/{step_index}	Toggle Step
POST	/api/incidents/{incident_id}/resolve	Resolve Incident
POST	/api/ingest/findings	Ingest Findings
POST	/api/known-good/prune-stale	Prune Stale Rules
POST	/api/known-good/reset-weekly-counters	Reset Weekly Counters
POST	/api/known-good/{rule_id}/hit	Record Hit
POST	/api/known-good	Create Rule Api
POST	/api/maintenance/	Create Window
POST	/api/mini-trigger	Post Trigger
POST	/api/playbooks/runs/{run_id}/approve	Approve Run
POST	/api/playbooks/{playbook_id}/toggle	Toggle Playbook
POST	/api/playbooks	Create Playbook
POST	/api/rules/{rule_id}/toggle	Toggle Rule
POST	/api/rules	Create Rule
POST	/api/search/events	Search Events
POST	/api/search/save	Save Search
POST	/api/tenants/	Create Tenant
POST	/api/threat-intel/cache	Upsert Cache
POST	/api/threat-intel/{intel_id}/toggle	Toggle Threat Intel
POST	/api/threat-intel	Create Threat Intel
POST	/api/webhooks/	Create Webhook
POST	/known-good/new	Create Rule Ui
POST	/known-good/suggest	Suggest Rule Ui
POST	/known-good/{rule_id}/approve	Approve Rule
POST	/known-good/{rule_id}/delete	Delete Rule
POST	/known-good/{rule_id}/reject	Reject Rule
POST	/known-good/{rule_id}/toggle	Toggle Rule
POST	/maintenance/	Maintenance Create
POST	/maintenance/{window_id}/delete	Maintenance Delete