ICUICU

API Documentation

6 REST endpoints for threat intelligence data

All endpoints return JSON responses. Pagination is included where applicable. Rate limit: 100 requests/minute/IP.

Base URL: https://icu.example.com

GET/api/threats

List all threats with pagination and filtering

Parameters

pagenumberPage number (default: 1)
limitnumberItems per page (default: 20, max: 100)
riskstringFilter by risk level: critical, high, medium, low
categorystringFilter by category: prompt_injection, data_exfiltration, obfuscation, suspicious_commands, network_suspicious
marketplacestringFilter by marketplace name
qstringSearch packages by name or description
sortstringSort by: firstSeen, lastScanned, name, riskLevel
orderstringSort order: asc or desc

Example

curl 'https://icu.example.com/api/threats?risk=critical&limit=5'
GET/api/threats/:id

Get full threat report including scan history and findings

Example

curl 'https://icu.example.com/api/threats/clx123abc'
GET/api/authors

List all authors with pagination

Parameters

pagenumberPage number (default: 1)
limitnumberItems per page (default: 20, max: 100)
qstringSearch authors by name
sortstringSort by: lastSeen, firstSeen, name

Example

curl 'https://icu.example.com/api/authors?limit=10'
GET/api/authors/:id

Get author profile with their packages

Example

curl 'https://icu.example.com/api/authors/clx456def'
GET/api/stats

Get dashboard aggregate statistics and marketplace data

Example

curl 'https://icu.example.com/api/stats'
GET/api/search

Cross-entity search across packages and authors

Parameters

qstringSearch query (min 2 characters)
typestringScope: packages, authors, or all (default)
limitnumberMax results per type (default: 10, max: 50)

Example

curl 'https://icu.example.com/api/search?q=claude&type=packages'