---
title: "Retrieve summary for a list of IoCs."
method: POST
path: "/iocs/summary"
---

# Retrieve summary for a list of IoCs.

`POST /iocs/summary`

## Request

- Base URL: `https://www.virustotal.com/api/v3`
- URL: `https://www.virustotal.com/api/v3/iocs/summary`
- Auth: none required

Retrieve summary for a list of IoCs.

The request body must contain a `data` object with an `iocs` list of IoC descriptors.

## Headers

- `x-apikey` string, required

## Request body

- object
  - `data` object, required: Request payload container.
    - `iocs` object[], required: Array of IoC descriptors (up to 1,000 items).
      - `type` 'file' | 'url' | 'domain' | 'ip_address', required: Type of IoC.
      - `id` string, required: IoC identifier (SHA-256 hash for files, domain name, IP address, or URL / URL ID).

## Response `200`

Successful response

- object
  - `data` object[]

## Other responses

- `400`: Bad Request

---

[API](https://skmtc.dev/virustotal/apis/ioc-investigation.md) - [All operations](https://skmtc.dev/virustotal/apis/ioc-investigation/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/ioc-investigation/revisions/4d4fadbb8cbc?raw)