---
title: "Submit Sources"
method: POST
path: "/submit"
tags: ["submit"]
---

# Submit Sources

`POST /submit`

Submit new threat intelligence sources (max 50 per request) to the
community database. Requires an organization-linked account. Each URL is
probed for reachability before acceptance; already-known URLs are skipped
and counted in `duplicatesSkipped`. Daily submission caps are per plan.

**Categories:** malware, phishing, spam, scam, fraud, botnet, ransomware, c2

## Request body

- SubmitSourcesRequest — Submit sources request body
  - `sources` ThreatSource[], required
    - `category` string, nullable — Threat category (optional)
    - `name` string, required — Name of the threat feed
    - `type` string, required — Type of entities in the feed
    - `url` string, required — URL to the threat feed

## Response `200`

Submission accepted (also returned when every source was already known — `inserted: 0`)

- SubmitResponse — Submit sources response (`api/submit.rs::post`)
  - `duplicatesSkipped` integer, required — Number of sources skipped because they already exist
  - `inserted` integer, required — Number of sources inserted for review
  - `message` string, required — Success message

## Other responses

- `400` — No sources provided, more than 50 sources, or unreachable URLs (the latter carries `urls`)
- `401` — Unauthorized - Missing or invalid API key, or account has no organization
- `429` — Daily submission limit exceeded

## Changes

- **2026-08-31** `9d9ef31d83e5` — 4 breaking, 6 info
  - the response property `message` became nullable for the status `400`
  - the response property `message` became nullable for the status `401`
  - the response property `message` became optional for the status `400`
  - the response property `message` became optional for the status `401`
  - …6 more

[Change history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/submit/post.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/0fa256b179f3?raw)