---
title: "List threat actors"
method: GET
path: "/api/hunt/actors"
tags: ["Hunt"]
---

# List threat actors

`GET /api/hunt/actors`

## Request

- Base URL: `https://app.cotool.ai`
- URL: `https://app.cotool.ai/api/hunt/actors`
- Auth: HTTP bearer

Actor grouping nodes for the current organization, used as Threat catalog filter options.

## Response `200`

Successful response

- object
  - `actors` object[], required
    - `id` string, required
    - `organizationId` string, required
    - `name` string, required
    - `aliases` string[], required

## Other responses

- `400`: Bad request — input validation failed or the request was malformed
- `401`: Unauthorized — missing or invalid API key / session
- `403`: Forbidden — the authenticated user lacks the required permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/cotool/apis/cotool-api.md) - [All operations](https://skmtc.dev/cotool/apis/cotool-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cotool/apis/cotool-api/revisions/f5abe0add203?raw)