---
title: "Recordedfuture (@recordedfuture)"
description: "Cyber threat intelligence provider for organizations."
account: "recordedfuture"
---

# Recordedfuture

Cyber threat intelligence provider for organizations.

## APIs

23 public APIs with a stored document.
Each links to its markdown overview; the same address with
`/llms.txt` in place of `.md` lists its operations.
Changes across these APIs: https://skmtc.dev/recordedfuture/feed.md

- [Customer APIs V2](https://skmtc.dev/recordedfuture/apis/customer-apis-v2.md): Security findings: retrieve findings by target, security domain or criteria, and finding ID
- [Mastercard Riskrecon API](https://skmtc.dev/recordedfuture/apis/mastercard-riskrecon-api.md): Security posture monitoring: scan third-party vendors' security ratings, findings, hosts, alerts and action plans
- [Common Platform Enumeration APIs V0](https://skmtc.dev/recordedfuture/apis/common-platform-enumeration-apis-v0.md): Vulnerability lookup: match products and versions to CPEs, CVEs and threat intel
- [Customer APIs V0](https://skmtc.dev/recordedfuture/apis/customer-apis-v0.md): Third-party risk: portfolio member data, domain security ratings and industry trends by TOE ID
- [Threat API](https://skmtc.dev/recordedfuture/apis/threat-api.md): Threat intelligence: search threat actors, malware and threat maps, plus their categories
- [Soar API](https://skmtc.dev/recordedfuture/apis/soar-api.md): Threat intelligence: bulk risk checks on IPs, domains, hashes, URLs and vulnerabilities
- [recorded-future-sandbox-api-secopsti](https://skmtc.dev/recordedfuture/apis/recorded-future-sandbox-api-secopsti.md): Malware sandbox: submit files and URLs, pull behavioral reports, PCAPs and YARA rules
- [Risk API](https://skmtc.dev/recordedfuture/apis/risk-api.md): Threat intelligence: search risk history and look up active risk rules with evidence
- [Payment Fraud Intelligence API](https://skmtc.dev/recordedfuture/apis/payment-fraud-intelligence-api.md): Fraud intelligence: run pipelines on stolen card, bank account and check data, plus Magecart domain scanning
- [Recorded Future Malware Intelligence](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence.md): Malware intelligence: query threat data, generate YARA and Sigma detection rules, fetch sandbox reports
- [List API](https://skmtc.dev/recordedfuture/apis/list-api.md): Lists: create, search and manage entities, tags and text entries in user lists
- [Links API](https://skmtc.dev/recordedfuture/apis/links-api.md): Threat intelligence: search verified links between cyber threats and entities, plus link metadata
- [Recorded Future Identity API](https://skmtc.dev/recordedfuture/apis/recorded-future-identity-api.md): Identity intelligence: search leaked credentials, check passwords, and look up exposed hosts and IPs
- [Fusion API](https://skmtc.dev/recordedfuture/apis/fusion-api.md): Threat intelligence: manage Fusion flows, feed files and custom blocks, run and monitor jobs
- [Entity Match API](https://skmtc.dev/recordedfuture/apis/entity-match-api.md): Threat intelligence: resolve entity names and types to IDs and look up entities by ID
- [Connect API](https://skmtc.dev/recordedfuture/apis/connect-api.md)
- [Detection Rule API](https://skmtc.dev/recordedfuture/apis/detection-rule-api.md)
- [Collective Insights API](https://skmtc.dev/recordedfuture/apis/collective-insights-api.md)
- [Autonomous Threat Operations API](https://skmtc.dev/recordedfuture/apis/autonomous-threat-operations-api.md)
- [Attack Surface Intelligence](https://skmtc.dev/recordedfuture/apis/attack-surface-intelligence.md)
- [Analyst Note API](https://skmtc.dev/recordedfuture/apis/analyst-note-api.md)
- [Recorded Future Playbook Alerts](https://skmtc.dev/recordedfuture/apis/recorded-future-playbook-alerts.md)
- [Alert API](https://skmtc.dev/recordedfuture/apis/alert-api.md): Threat intelligence: retrieve and manage alerts, alert rules, and domain, IP, hash and URL entities