---
title: "GET /action-center/overview"
method: GET
path: "/action-center/overview"
tags: ["action-center"]
---

# GET /action-center/overview

`GET /action-center/overview`

## Response `200`

Prioritized SOC action center overview

- ActionCenterOverview
  - `degraded` boolean, required
  - `generatedAt` string, required
  - `metrics` ActionCenterMetrics, required
    - `acknowledgedAlerts` integer, required
    - `activeExploitFindings` integer, required
    - `kevFindings` integer, required
    - `openCases` integer, required
    - `openCriticalAlerts` integer, required
    - `openHighAlerts` integer, required
    - `staleOpenAlerts` integer, required
  - `priorityQueue` ActionCenterItem[], required
    - `createdAt` string, nullable
    - `description` string, nullable
    - `entityType` string, nullable
    - `entityValue` string, nullable
    - `href` string, required
    - `id` string, required
    - `primaryAction` string, required
    - `priority` string, required
    - `reason` string, required
    - `source` string, required
    - `status` string, required
    - `title` string, required
    - `updatedAt` string, nullable
  - `socActions` ActionCenterSocAction[], required
    - `href` string, required
    - `id` string, required
    - `priority` string, required
    - `source` string, required
    - `title` string, required

## Other responses

- `401` — Unauthorized

## Changes

- **2026-08-31** `9d9ef31d83e5` — 2 breaking
  - the response property `message` became nullable for the status `401`
  - the response property `message` became optional for the status `401`

[Change history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/action-center/overview/get.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/eb1bf7b5e785?raw)