# Mallory

- [Overview](https://docs.mallory.ai/index.md): What Mallory is and who it's for
- [Quickstart](https://docs.mallory.ai/quickstart.md): Get to your first value with Mallory in a few steps
- [Key concepts](https://docs.mallory.ai/concepts.md): How Mallory fits together: intelligence, the agent, your assets, integrations, sources, enrichments, and workspaces, and the supporting concepts under each
- [Capabilities](https://docs.mallory.ai/use/capabilities.md): Understand what integrations enable and what to configure after connecting them.
- [Integrations](https://docs.mallory.ai/integrations/overview.md): Connect your tools, then activate the capabilities you need.
- [Connect and activate](https://docs.mallory.ai/integrations/setup.md): Connect credentials, then create the source or enrichment that uses them.
- [Connect MCP tools](https://docs.mallory.ai/integrations/mcp-servers.md): Give the Mallory agent access to tools exposed by a remote MCP server.
- [Feed](https://docs.mallory.ai/use/intel/feed.md): Curated overview of the latest threats and vulnerabilities
- [Customizing the Feed](https://docs.mallory.ai/use/intel/customize-feed.md): Shape your feed by following entities, topics, and sources in your workspace
- [Stories](https://docs.mallory.ai/use/intel/stories.md): Curated security narratives and the sections that make them up
- [Story Entities & Roles](https://docs.mallory.ai/use/intel/story-entities.md): The key entities a story centers on, and the role each plays in the narrative
- [Search](https://docs.mallory.ai/use/intel/search.md): Find entities, references, and intelligence across Mallory
- [Entities](https://docs.mallory.ai/use/entities.md): Browse and understand threat actors, malware, vulnerabilities, and organizations
- [Observables](https://docs.mallory.ai/use/observables.md): Use the observables and IOC feed for detection and response
- [References](https://docs.mallory.ai/use/references.md): The source articles, advisories, and reports behind Mallory's intelligence
- [Mentions](https://docs.mallory.ai/use/mentions.md): Where entities appear in source content, and how central each appearance is
- [In the App](https://docs.mallory.ai/use/agent/builtin.md): The primary, most well-supported interface: use the Mallory agent in the app with search, reports, and scheduling tools
- [Threads](https://docs.mallory.ai/use/agent/threads.md): Query and explore Mallory's intelligence in a conversational thread with the Mallory agent
- [Shared threads](https://docs.mallory.ai/use/agent/shared-threads.md): Share a read-only snapshot of a thread with a link—publicly or with your organization
- [Asset inventory & queries](https://docs.mallory.ai/use/assets/overview.md): How Mallory syncs your asset inventory from connected integrations, and how to query it — live against the vendor or from the cached snapshot
- [How asset matching works](https://docs.mallory.ai/use/assets/matches.md): How Mallory links the assets your integrations report to products, software packages, and vulnerabilities in Mallory intelligence
- [Product matches](https://docs.mallory.ai/use/assets/products.md): How Mallory matches the software and services on your hosts and internet-facing assets to products in Mallory intelligence
- [Software package matches](https://docs.mallory.ai/use/assets/software-packages.md): How Mallory matches the open-source dependencies in your code repositories to software packages in Mallory intelligence
- [Vulnerability matches](https://docs.mallory.ai/use/assets/vulnerabilities.md): How Mallory matches the vulnerabilities your security tools report to Mallory intelligence, and how to prioritize them with CVSS, EPSS, KEV, and mention activity
- [Findings](https://docs.mallory.ai/use/findings/overview.md): Security issues Mallory surfaces from investigations, each tied to a defined finding type
- [Working a finding](https://docs.mallory.ai/use/findings/working-findings.md): Read the evidence behind a finding, apply the remediation, and close it out with a reason
- [Linked tickets](https://docs.mallory.ai/use/findings/linked-tickets.md): Connect a finding to the Jira, Linear, GitHub, or ServiceNow ticket tracking its fix
- [Mallory Data Importer v1](https://docs.mallory.ai/use/sources/data-importer.md): Import complete private JSON snapshots and manage their source lifecycle
- [Enrichments](https://docs.mallory.ai/use/enrichments/overview.md): Add provider context to your organization's observables with your own integration credentials
- [Supported providers](https://docs.mallory.ai/use/enrichments/providers.md): Compare tenant enrichment with Mallory-managed provider context
- [Configure enrichment](https://docs.mallory.ai/use/enrichments/configure.md): Connect a provider, control lookups, and inspect enrichment results
- [Tenants & workspaces](https://docs.mallory.ai/use/users/overview.md): How Mallory organizes your team — tenants, workspaces, roles, and what each role can see and do
- [Managing workspaces](https://docs.mallory.ai/use/users/managing-workspaces.md): Create, switch between, and configure workspaces — set visibility, manage members, and curate the entities, topics, and sources each team tracks
- [Inviting users](https://docs.mallory.ai/use/users/inviting.md): Add teammates to your Mallory tenant, assign roles, and manage seat allocation
- [Single sign-on (SSO)](https://docs.mallory.ai/use/auth/sso.md): Let your team sign in to Mallory with your own identity provider over SAML — Okta, Google Workspace, Microsoft Entra ID, or any custom SAML provider
- [Okta](https://docs.mallory.ai/use/auth/okta.md): Configure SAML single sign-on between Okta Workforce and Mallory
- [Google Workspace](https://docs.mallory.ai/use/auth/google.md): Configure SAML single sign-on between Google Workspace and Mallory
- [Microsoft Entra ID](https://docs.mallory.ai/use/auth/azure.md): Configure SAML single sign-on between Microsoft Entra ID (formerly Azure AD) and Mallory
- [Custom SAML provider](https://docs.mallory.ai/use/auth/custom.md): Configure SAML single sign-on between any SAML 2.0 identity provider and Mallory
- [LLM & Data Usage](https://docs.mallory.ai/data-usage.md): How inference is configured in Mallory, what data is sent to model providers, and how customer data is handled.
- [Deployment options](https://docs.mallory.ai/deployment.md): How Mallory can run for your organization: bring your own model provider key (BYOK), your own models (BYOM), or your own cloud (BYOC).
- [Censys](https://docs.mallory.ai/integrations/censys.md): Connect Censys and understand its queries, agent access, and data collection.
- [Mallory External Attack Surface](https://docs.mallory.ai/integrations/mallory-attack-surface.md): Set up Mallory-run external scanning of your domains and netblocks, see what it finds in Assets and the Table Explorer, and understand the issue types it reports
- [Mallory Redzone](https://docs.mallory.ai/integrations/redzone.md): Connect Mallory Redzone and understand its queries, agent access, and data collection.
- [SecurityTrails](https://docs.mallory.ai/integrations/securitytrails.md): Connect SecurityTrails and understand its queries, agent access, and data collection.
- [Shodan](https://docs.mallory.ai/integrations/shodan.md): Connect Shodan and understand its queries, agent access, and data collection.
- [Amazon Web Services](https://docs.mallory.ai/integrations/amazon-web-services.md): Connect Amazon Web Services and understand its queries, agent access, and data collection.
- [Axonius](https://docs.mallory.ai/integrations/axonius.md): Connect Axonius and understand its queries, agent access, and data collection.
- [Azure](https://docs.mallory.ai/integrations/azure.md): Connect Azure and understand its queries, agent access, and data collection.
- [Cloudflare](https://docs.mallory.ai/integrations/cloudflare.md): Connect Cloudflare and understand its queries, agent access, and data collection.
- [Google Cloud Platform](https://docs.mallory.ai/integrations/google-cloud.md): Connect Google Cloud Platform and understand its queries, agent access, and data collection.
- [Microsoft Entra ID](https://docs.mallory.ai/integrations/entra-id.md): Connect Microsoft Entra ID and understand its queries, agent access, and data collection.
- [Okta](https://docs.mallory.ai/integrations/okta.md): Connect Okta and understand its queries, agent access, and data collection.
- [Vercel](https://docs.mallory.ai/integrations/vercel.md): Connect Vercel and understand its queries, agent access, and data collection.
- [Wiz](https://docs.mallory.ai/integrations/wiz.md): Connect Wiz and understand its queries, agent access, and data collection.
- [CrowdStrike Falcon](https://docs.mallory.ai/integrations/crowdstrike.md): Connect CrowdStrike Falcon and understand its queries, agent access, and data collection.
- [Qualys](https://docs.mallory.ai/integrations/qualys.md): Connect Qualys and understand its queries, agent access, and data collection.
- [runZero](https://docs.mallory.ai/integrations/runzero.md): Connect runZero and understand its queries, agent access, and data collection.
- [SentinelOne](https://docs.mallory.ai/integrations/sentinelone.md): Connect SentinelOne and understand its queries, agent access, and data collection.
- [Spektion](https://docs.mallory.ai/integrations/spektion.md): Connect Spektion and understand its queries, agent access, and data collection.
- [Tenable Vulnerability Management](https://docs.mallory.ai/integrations/tenable.md): Connect Tenable Vulnerability Management and understand its queries, agent access, and data collection.
- [Bitbucket](https://docs.mallory.ai/integrations/bitbucket.md): Connect Bitbucket and understand its queries, agent access, and data collection.
- [Black Duck](https://docs.mallory.ai/integrations/blackduck.md): Connect Black Duck and understand its queries, agent access, and data collection.
- [GitHub](https://docs.mallory.ai/integrations/github.md): Connect GitHub and understand its queries, agent access, and data collection.
- [GitLab](https://docs.mallory.ai/integrations/gitlab.md): Connect GitLab and understand its queries, agent access, and data collection.
- [Domain Intelligence](https://docs.mallory.ai/integrations/domain-intelligence.md): Connect Domain Intelligence and understand its queries, agent access, and data collection.
- [Pulsedive](https://docs.mallory.ai/integrations/pulsedive.md): Connect Pulsedive and understand its queries, agent access, and data collection.
- [ThreatFox](https://docs.mallory.ai/integrations/threatfox.md): Connect ThreatFox and understand its queries, agent access, and data collection.
- [urlscan](https://docs.mallory.ai/integrations/urlscan.md): Connect urlscan and understand its queries, agent access, and data collection.
- [VirusTotal](https://docs.mallory.ai/integrations/virustotal.md): Connect VirusTotal and understand its queries, agent access, and data collection.
- [Google Chat (webhook)](https://docs.mallory.ai/integrations/google-chat.md): Send Mallory alerts and agent results to a Google Chat space via an incoming webhook
- [Slack (webhook)](https://docs.mallory.ai/integrations/slack-webhook.md): Send Mallory alerts and agent results to a Slack channel via an incoming webhook
- [Slack app](https://docs.mallory.ai/integrations/slack.md): Use the Mallory agent inside Slack — DM the bot or @-mention it in channels to run lookups, list assets, and trigger investigations
- [Slack channel delivery](https://docs.mallory.ai/integrations/slack-channel.md): Deliver scheduled Mallory messages to a Slack conversation.
- [In Teams](https://docs.mallory.ai/integrations/microsoft-teams.md): Use the Mallory agent inside Microsoft Teams — chat with the bot in channels or 1:1 to run lookups, list assets, and trigger investigations
- [Microsoft Teams channel delivery](https://docs.mallory.ai/integrations/teams-channel.md): Deliver scheduled Mallory messages to a Microsoft Teams conversation.
- [Agent model (BYOK)](https://docs.mallory.ai/integrations/agent-model.md): Use your own model provider credentials for the Mallory agent.
- [Amazon Bedrock](https://docs.mallory.ai/integrations/amazon-bedrock.md): Run the Mallory Agent on Claude in your own AWS account with an Amazon Bedrock API key
- [Via MCP (Any Agent)](https://docs.mallory.ai/integrations/mallory-mcp.md): Use Mallory intelligence from any MCP-compatible agent or IDE
- [In Claude Code](https://docs.mallory.ai/integrations/claude-code.md): Use Mallory capabilities in Claude Code via our plugin marketplace and the Mallory plugin
- [Asana MCP](https://docs.mallory.ai/integrations/mcp/asana.md): Connect Asana tools to the Mallory agent.
- [Bitbucket MCP](https://docs.mallory.ai/integrations/mcp/bitbucket.md): Connect Bitbucket tools to the Mallory agent.
- [Confluence MCP](https://docs.mallory.ai/integrations/mcp/confluence.md): Connect Confluence tools to the Mallory agent.
- [CrowdStrike MCP](https://docs.mallory.ai/integrations/mcp/crowdstrike.md): Connect CrowdStrike tools to the Mallory agent.
- [Datadog MCP](https://docs.mallory.ai/integrations/mcp/datadog.md): Connect Datadog tools to the Mallory agent.
- [GitHub MCP](https://docs.mallory.ai/integrations/mcp/github.md): Connect GitHub tools to the Mallory agent.
- [GitLab MCP](https://docs.mallory.ai/integrations/mcp/gitlab.md): Connect GitLab tools to the Mallory agent.
- [Jira MCP](https://docs.mallory.ai/integrations/mcp/jira.md): Connect Jira tools to the Mallory agent.
- [Linear MCP](https://docs.mallory.ai/integrations/mcp/linear.md): Connect Linear tools to the Mallory agent.
- [Notion MCP](https://docs.mallory.ai/integrations/mcp/notion.md): Connect Notion tools to the Mallory agent.
- [PagerDuty MCP](https://docs.mallory.ai/integrations/mcp/pagerduty.md): Connect PagerDuty tools to the Mallory agent.
- [Sentry MCP](https://docs.mallory.ai/integrations/mcp/sentry.md): Connect Sentry tools to the Mallory agent.
- [ServiceNow MCP](https://docs.mallory.ai/integrations/mcp/servicenow.md): Connect ServiceNow tools to the Mallory agent.
- [Tines MCP](https://docs.mallory.ai/integrations/mcp/tines.md): Connect Tines tools to the Mallory agent.
- [Torq MCP](https://docs.mallory.ai/integrations/mcp/torq.md): Connect Torq tools to the Mallory agent.
- [Ways to Build](https://docs.mallory.ai/build.md): Integrate Mallory into your apps and workflows via the API, bulk exports, or open source tooling
- [Ways to Build](https://docs.mallory.ai/build.md): Integrate Mallory into your apps and workflows via the API, bulk exports, or open source tooling
- [Authentication](https://docs.mallory.ai/build/api/auth.md): Use API keys and Bearer tokens to authenticate with the Mallory API
- [Data Importer API](https://docs.mallory.ai/build/api/data-importer.md): Validate and ingest complete private JSON snapshots into Bronze
- [Tenant enrichment](https://docs.mallory.ai/build/api/enrichments.md): Configure providers, request observable enrichment, and read tenant results through the API
- [Search & Filter Syntax](https://docs.mallory.ai/build/api/search-syntax.md): How to filter and query list endpoints in the Mallory API
- [Monitor Trending](https://docs.mallory.ai/build/api/monitor.md): Get trending entities, IOCs, and stories via the API
- [Generated CVSS v4](https://docs.mallory.ai/build/api/generated-cvss-v4.md): Read Mallory-predicted CVSS v4 Base scores, vectors, and per-metric uncertainty from the API and exports
- [Shared threads](https://docs.mallory.ai/build/api/threads.md): Create, read, update, and revoke read-only thread shares via the API
- [Sightings & tags](https://docs.mallory.ai/build/api/sightings.md): Record SIEM sightings, tag indicators, and read opinions from tenant sources
- [Errors & Rate Limits](https://docs.mallory.ai/build/api/errors.md): HTTP status codes, error responses, and rate limiting
- [Python SDK](https://docs.mallory.ai/build/api/sdk/python.md): Use the official Python client to call the Mallory API
- [IOC sync integration](https://docs.mallory.ai/build/api/observables-integration.md): Build a polling integration that pulls observables and opinions from the Mallory API on a schedule
- [API Reference](https://docs.mallory.ai/build/api/reference.md): Full endpoint reference for the Mallory API
- [Product vuln lookup](https://docs.mallory.ai/build/api/vulnerability-inference.md): Find CVEs for a software product and version with a single API request
- [Package vuln lookup](https://docs.mallory.ai/build/api/software-dependencies.md): Check an installed library for known vulnerabilities and reported supply chain compromises
- [Exports](https://docs.mallory.ai/build/exports/index.md): Bulk export and export endpoints for vulnerability and other intelligence
- [Vulnerability intelligence export format](https://docs.mallory.ai/build/exports/vuln-intel-format.md): Schema and field reference for the vulnerability intelligence bulk export
- [IOC intelligence export format](https://docs.mallory.ai/build/exports/ioc-intel-format.md): Schema and field reference for the IOC (indicator of compromise) bulk export
- [Newly observed domains export format](https://docs.mallory.ai/build/exports/newly-observed-domains-format.md): Schema and field reference for the newly observed domains (NOD) bulk export
- [Open Source](https://docs.mallory.ai/build/opensource.md): Mallory's open source API client, Asset Query, and Claude Code plugins
- [API Reference](https://docs.mallory.ai/api-reference/introduction.md): Mallory API overview, base URL, and authentication
- [Search](https://docs.mallory.ai/api-reference/search.md)
- [Threat Actors Index](https://docs.mallory.ai/api-reference/threat-actors-index.md): Endpoint to browse for threat actors, with filters on some criteria.
- [Lookup Threat Actor](https://docs.mallory.ai/api-reference/lookup-threat-actor.md)
- [Single Threat Actor Attack Patterns](https://docs.mallory.ai/api-reference/single-threat-actor-attack-patterns.md): Get attack patterns (TTPs) used by a specific threat actor.
- [Single Threat Actor Attack Patterns Overview](https://docs.mallory.ai/api-reference/single-threat-actor-attack-patterns-overview.md): Get an attack pattern (TTP) overview for a specific threat actor.
- [Single Threat Actor Breaches](https://docs.mallory.ai/api-reference/single-threat-actor-breaches.md): Get breaches associated with a specific threat actor.
- [Single Threat Actor Breaches Overview](https://docs.mallory.ai/api-reference/single-threat-actor-breaches-overview.md): Get a breach overview for a specific threat actor.
- [Single Threat Actor Detection Signatures](https://docs.mallory.ai/api-reference/single-threat-actor-detection-signatures.md)
- [Single Threat Actor Exploitations](https://docs.mallory.ai/api-reference/single-threat-actor-exploitations.md): Get exploitation evidence for a specific threat actor.
- [Single Threat Actor Exploitations Overview](https://docs.mallory.ai/api-reference/single-threat-actor-exploitations-overview.md): Get an exploitation overview for a specific threat actor.
- [Export Threat Actor](https://docs.mallory.ai/api-reference/export-threat-actor.md): Export complete threat actor profile with all related data.
- [Single Threat Actor Malware](https://docs.mallory.ai/api-reference/single-threat-actor-malware.md): Get malware used by a specific threat actor.
- [Single Threat Actor Malware Overview](https://docs.mallory.ai/api-reference/single-threat-actor-malware-overview.md): Get a malware overview for a specific threat actor.
- [Single Threat Actor Mentions](https://docs.mallory.ai/api-reference/single-threat-actor-mentions.md)
- [Single Threat Actor Observables](https://docs.mallory.ai/api-reference/single-threat-actor-observables.md): Get observables (IoCs) linked to a specific threat actor.
- [Similar Actors](https://docs.mallory.ai/api-reference/similar-actors.md): Find threat actors similar to the specified one.
- [Single Threat Actor Source Geographies](https://docs.mallory.ai/api-reference/single-threat-actor-source-geographies.md): Get source geography evidence for a specific threat actor.
- [Single Threat Actor Source Geographies Overview](https://docs.mallory.ai/api-reference/single-threat-actor-source-geographies-overview.md): Get a source geography overview for a specific threat actor.
- [Single Threat Actor Target Geographies](https://docs.mallory.ai/api-reference/single-threat-actor-target-geographies.md): Get targeted geography evidence for a specific threat actor.
- [Single Threat Actor Target Geographies Overview](https://docs.mallory.ai/api-reference/single-threat-actor-target-geographies-overview.md): Get a targeted geography overview for a specific threat actor.
- [Single Threat Actor Target Industries](https://docs.mallory.ai/api-reference/single-threat-actor-target-industries.md): Get targeted industry evidence for a specific threat actor.
- [Single Threat Actor Target Industries Overview](https://docs.mallory.ai/api-reference/single-threat-actor-target-industries-overview.md): Get a targeted industry overview for a specific threat actor.
- [Attack Patterns Index](https://docs.mallory.ai/api-reference/attack-patterns-index.md): Endpoint to browse attack patterns (MITRE ATT&CK techniques), with filters on various criteria.
- [Single Attack Pattern](https://docs.mallory.ai/api-reference/single-attack-pattern.md): Get a single attack pattern by UUID, MITRE ATT&CK ID, or name.
- [Single Attack Pattern Detection Signatures](https://docs.mallory.ai/api-reference/single-attack-pattern-detection-signatures.md)
- [Single Attack Pattern Malware](https://docs.mallory.ai/api-reference/single-attack-pattern-malware.md): Get malware that uses this attack pattern (TTP).
- [Single Attack Pattern Malware Overview](https://docs.mallory.ai/api-reference/single-attack-pattern-malware-overview.md): Get a malware overview for a specific attack pattern (TTP).
- [Single Attack Pattern Mentions](https://docs.mallory.ai/api-reference/single-attack-pattern-mentions.md): Get mentions for a specific attack pattern.
- [Single Attack Pattern Threat Actors](https://docs.mallory.ai/api-reference/single-attack-pattern-threat-actors.md): Get threat actors that use this attack pattern (TTP).
- [Single Attack Pattern Threat Actors Overview](https://docs.mallory.ai/api-reference/single-attack-pattern-threat-actors-overview.md): Get a threat actor overview for a specific attack pattern (TTP).
- [Breaches Index](https://docs.mallory.ai/api-reference/breaches-index.md): Endpoint to browse for breaches, with filters on some criteria.
- [Lookup Breach](https://docs.mallory.ai/api-reference/lookup-breach.md): Retrieve a single breach by UUID or internal_name.
- [Breach Attack Patterns](https://docs.mallory.ai/api-reference/breach-attack-patterns.md): Get attack patterns associated with a breach.
- [Breach Attack Patterns Overview](https://docs.mallory.ai/api-reference/breach-attack-patterns-overview.md): Get an attack pattern overview for a specific breach.
- [Export Breach](https://docs.mallory.ai/api-reference/export-breach.md): Export complete breach with all related data.
- [Breach Malware](https://docs.mallory.ai/api-reference/breach-malware.md): Get malware associated with a breach.
- [Breach Malware Overview](https://docs.mallory.ai/api-reference/breach-malware-overview.md): Get a malware overview for a specific breach.
- [Breach Mentions](https://docs.mallory.ai/api-reference/breach-mentions.md): Get mentions associated with a breach.
- [Breach Organizations](https://docs.mallory.ai/api-reference/breach-organizations.md): Get all organizations associated with a breach.
- [Breach Threat Actors](https://docs.mallory.ai/api-reference/breach-threat-actors.md): Get threat actors associated with a breach.
- [Breach Threat Actors Overview](https://docs.mallory.ai/api-reference/breach-threat-actors-overview.md): Get a threat actor overview for a specific breach.
- [Detection Signature Index](https://docs.mallory.ai/api-reference/detection-signature-index.md): Endpoint to browse for detection signatures, with filters on some criteria.
- [Lookup Detection Signature](https://docs.mallory.ai/api-reference/lookup-detection-signature.md)
- [Signature Content](https://docs.mallory.ai/api-reference/signature-content.md)
- [Signature Download](https://docs.mallory.ai/api-reference/signature-download.md)
- [Signature Revisions](https://docs.mallory.ai/api-reference/signature-revisions.md)
- [Exploitations Index](https://docs.mallory.ai/api-reference/exploitations-index.md): Endpoint to browse for exploitations.
- [Lookup Exploitation](https://docs.mallory.ai/api-reference/lookup-exploitation.md)
- [Exploits Index](https://docs.mallory.ai/api-reference/exploits-index.md): Endpoint to browse exploits, with filters on some criteria.
- [Lookup Exploit](https://docs.mallory.ai/api-reference/lookup-exploit.md)
- [Export Exploit](https://docs.mallory.ai/api-reference/export-exploit.md): Export complete exploit with all related data.
- [Similar Exploits](https://docs.mallory.ai/api-reference/similar-exploits.md): Find exploits similar to the specified one.
- [Exploit Vulnerabilities](https://docs.mallory.ai/api-reference/exploit-vulnerabilities.md): Get vulnerabilities associated with a specific exploit with pagination and filtering.
- [List Geographies](https://docs.mallory.ai/api-reference/list-geographies.md): Get the full ISO 3166-1 country list.
- [Get Geography By Code](https://docs.mallory.ai/api-reference/get-geography-by-code.md): Get a specific ISO 3166-1 country by its alpha-2 code.
- [Get Gics Codes](https://docs.mallory.ai/api-reference/get-gics-codes.md): Get the GICS (Global Industry Classification Standard) hierarchy.
- [Get Industry By Code](https://docs.mallory.ai/api-reference/get-industry-by-code.md): Get a specific GICS industry by its 6-digit code.
- [Malware Index](https://docs.mallory.ai/api-reference/malware-index.md): Endpoint to browse for malware, with filters on some criteria.
- [Lookup Malware](https://docs.mallory.ai/api-reference/lookup-malware.md)
- [Single Malware Attack Patterns](https://docs.mallory.ai/api-reference/single-malware-attack-patterns.md): Get attack patterns (TTPs) used by a specific malware.
- [Single Malware Attack Patterns Overview](https://docs.mallory.ai/api-reference/single-malware-attack-patterns-overview.md): Get an attack pattern (TTP) overview for a specific malware.
- [Single Malware Detection Signatures](https://docs.mallory.ai/api-reference/single-malware-detection-signatures.md)
- [Export Malware](https://docs.mallory.ai/api-reference/export-malware.md): Export complete malware with all related data.
- [Single Malware Mentions](https://docs.mallory.ai/api-reference/single-malware-mentions.md)
- [Single Malware Observables](https://docs.mallory.ai/api-reference/single-malware-observables.md): Get observables (IoCs) linked to a specific malware.
- [Similar Malware](https://docs.mallory.ai/api-reference/similar-malware.md): Find malware similar to the specified family.
- [Single Malware Threat Actors](https://docs.mallory.ai/api-reference/single-malware-threat-actors.md): Get threat actors that use a specific malware.
- [Single Malware Threat Actors Overview](https://docs.mallory.ai/api-reference/single-malware-threat-actors-overview.md): Get a threat actor overview for a specific malware.
- [Single Malware Vulnerabilities](https://docs.mallory.ai/api-reference/single-malware-vulnerabilities.md): Get vulnerability evidence for a specific malware.
- [Single Malware Vulnerabilities Overview](https://docs.mallory.ai/api-reference/single-malware-vulnerabilities-overview.md): Get a vulnerability overview for a specific malware.
- [Organizations Index](https://docs.mallory.ai/api-reference/organizations-index.md): Endpoint to browse for organizations, with filters on some criteria.
- [Lookup Organization](https://docs.mallory.ai/api-reference/lookup-organization.md)
- [Single Organization Breaches](https://docs.mallory.ai/api-reference/single-organization-breaches.md): Get all breaches associated with an organization.
- [Export Organization](https://docs.mallory.ai/api-reference/export-organization.md): Export complete organization with all related data.
- [Single Organization Mentions](https://docs.mallory.ai/api-reference/single-organization-mentions.md)
- [Single Organization Products](https://docs.mallory.ai/api-reference/single-organization-products.md): Get all products produced by an organization (formerly vendor products).
- [Similar Organizations](https://docs.mallory.ai/api-reference/similar-organizations.md): Find organizations similar to the specified one.
- [Product Index](https://docs.mallory.ai/api-reference/product-index.md): Endpoint to browse for products.
- [Lookup Product](https://docs.mallory.ai/api-reference/lookup-product.md)
- [Export Product](https://docs.mallory.ai/api-reference/export-product.md): Export complete product with all related data.
- [Single Product Mentions](https://docs.mallory.ai/api-reference/single-product-mentions.md)
- [Similar Products](https://docs.mallory.ai/api-reference/similar-products.md): Find products similar to the specified one.
- [Single Product Technology Product Advisories](https://docs.mallory.ai/api-reference/single-product-technology-product-advisories.md)
- [Search Products](https://docs.mallory.ai/api-reference/search-products.md): Resolve catalog products, preserving qualifiers for subsequent CVE search.
- [Software Extensions Index](https://docs.mallory.ai/api-reference/software-extensions-index.md): Browse software extensions across marketplaces.
- [Lookup Extension](https://docs.mallory.ai/api-reference/lookup-extension.md): Look up a single software extension by UUID.
- [Software Extension Configurations Index](https://docs.mallory.ai/api-reference/software-extension-configurations-index.md): List the per-version configurations for an extension.
- [Single Software Extension Mentions](https://docs.mallory.ai/api-reference/single-software-extension-mentions.md): List mentions for a specific software extension.
- [Software Packages Index](https://docs.mallory.ai/api-reference/software-packages-index.md): Endpoint to browse software packages.
- [Lookup Software Package](https://docs.mallory.ai/api-reference/lookup-software-package.md): Get a specific software package by UUID.
- [Software Package Compromises](https://docs.mallory.ai/api-reference/software-package-compromises.md): List compromise evidence for a specific software package.
- [Software Package Configurations](https://docs.mallory.ai/api-reference/software-package-configurations.md): List configurations for a specific software package, each annotated with a count of associated vulnerabilities.
- [Single Software Package Mentions](https://docs.mallory.ai/api-reference/single-software-package-mentions.md): List mentions for a specific software package, plus a 30-day daily series in ``results_by_day`` for sparkline rendering.
- [Search Software Package](https://docs.mallory.ai/api-reference/search-software-package.md): Check one installed package for stored vulnerabilities and compromise evidence.
- [Technology Product Advisories Index](https://docs.mallory.ai/api-reference/technology-product-advisories-index.md)
- [Technology Product Advisory Sources](https://docs.mallory.ai/api-reference/technology-product-advisory-sources.md)
- [Single Technology Product Advisory](https://docs.mallory.ai/api-reference/single-technology-product-advisory.md)
- [Export Technology Product Advisory](https://docs.mallory.ai/api-reference/export-technology-product-advisory.md): Export complete advisory with all related data.
- [Single Technology Product Advisory Products](https://docs.mallory.ai/api-reference/single-technology-product-advisory-products.md)
- [Single Technology Product Advisory Vulnerabilities](https://docs.mallory.ai/api-reference/single-technology-product-advisory-vulnerabilities.md)
- [Vulnerabilities Index](https://docs.mallory.ai/api-reference/vulnerabilities-index.md): Endpoint to browse vulnerabilities, with filters on some criteria.
- [Single Vulnerability](https://docs.mallory.ai/api-reference/single-vulnerability.md)
- [Single Vulnerability Configurations](https://docs.mallory.ai/api-reference/single-vulnerability-configurations.md)
- [Single Vulnerability Detection Signatures](https://docs.mallory.ai/api-reference/single-vulnerability-detection-signatures.md)
- [Single Vulnerability Epss History](https://docs.mallory.ai/api-reference/single-vulnerability-epss-history.md): Return chronological EPSS points for a vulnerability.
- [Single Vulnerability Exploitations](https://docs.mallory.ai/api-reference/single-vulnerability-exploitations.md)
- [Single Vulnerability Exploits](https://docs.mallory.ai/api-reference/single-vulnerability-exploits.md)
- [Export Vulnerability](https://docs.mallory.ai/api-reference/export-vulnerability.md): Export complete vulnerability intelligence with all related entities.
- [Single Vulnerability Malware](https://docs.mallory.ai/api-reference/single-vulnerability-malware.md): Get malware evidence for a specific vulnerability.
- [Single Vulnerability Malware Overview](https://docs.mallory.ai/api-reference/single-vulnerability-malware-overview.md): Get a malware overview for a specific vulnerability.
- [Single Vulnerability Mentions](https://docs.mallory.ai/api-reference/single-vulnerability-mentions.md)
- [Single Vulnerability Observables](https://docs.mallory.ai/api-reference/single-vulnerability-observables.md): Get observables (IoCs) linked to a specific vulnerability.
- [Single Vulnerability Products](https://docs.mallory.ai/api-reference/single-vulnerability-products.md)
- [Similar Vulnerabilities](https://docs.mallory.ai/api-reference/similar-vulnerabilities.md): Find vulnerabilities similar to the specified one.
- [Single Vulnerability Technology Product Advisories](https://docs.mallory.ai/api-reference/single-vulnerability-technology-product-advisories.md)
- [Single Vulnerability Threat Actors](https://docs.mallory.ai/api-reference/single-vulnerability-threat-actors.md): Get threat actors associated with a specific vulnerability.
- [Single Vulnerability Threat Actors Overview](https://docs.mallory.ai/api-reference/single-vulnerability-threat-actors-overview.md): Get a threat actor overview for a specific vulnerability.
- [Vulnerable Technology Product Configuration Set Index](https://docs.mallory.ai/api-reference/vulnerable-technology-product-configuration-set-index.md): Endpoint to browse vulnerable technology product configuration sets based on various criteria.
- [Get By Configuration](https://docs.mallory.ai/api-reference/get-by-configuration.md): Get all vulnerable configuration sets for a specific technology product configuration.
- [Get By Vulnerability](https://docs.mallory.ai/api-reference/get-by-vulnerability.md): Get all configuration sets for a specific vulnerability.
- [Lookup Vulnerable Technology Product Configuration Set](https://docs.mallory.ai/api-reference/lookup-vulnerable-technology-product-configuration-set.md): Get a specific vulnerable technology product configuration set by ID or UUID.
- [Search Affected Configurations](https://docs.mallory.ai/api-reference/search-affected-configurations.md): Find distinct CVEs from a CPE, vendor/product or canonical product UUID.
- [Weakness Index](https://docs.mallory.ai/api-reference/weakness-index.md): Endpoint to browse weaknesses based on various criteria.
- [Lookup Weakness](https://docs.mallory.ai/api-reference/lookup-weakness.md): Endpoint to lookup a weakness by its unique identifier. Can use either CWE-ID (e.g., CWE-79) or UUID.
- [Mentions Index](https://docs.mallory.ai/api-reference/mentions-index.md): Get all mentions, optionally filtered by entity type. Supports pagination, sorting, and filtering.
- [Actor Mentions Index](https://docs.mallory.ai/api-reference/actor-mentions-index.md)
- [Vulnerability Mentions Index](https://docs.mallory.ai/api-reference/vulnerability-mentions-index.md)
- [Stories Index](https://docs.mallory.ai/api-reference/stories-index.md): Get paginated list of stories.
- [Story Topics](https://docs.mallory.ai/api-reference/story-topics.md): Get all unique topic labels across stories with their story counts.
- [Story Topic Taxonomy](https://docs.mallory.ai/api-reference/story-topic-taxonomy.md): Get the full story topic taxonomy.
- [Single Story](https://docs.mallory.ai/api-reference/single-story.md): Retrieve a story by its UUID.
- [Story Citations](https://docs.mallory.ai/api-reference/story-citations.md): Get citations associated with a specific story with pagination and sorting.
- [Story Entities](https://docs.mallory.ai/api-reference/story-entities.md): Get focus entities for a specific story with role assignments.
- [Story Events](https://docs.mallory.ai/api-reference/story-events.md): Get timeline events for a specific story with pagination and sorting.
- [Export Story](https://docs.mallory.ai/api-reference/export-story.md): Export complete story intelligence with all related entities.
- [Story Observables](https://docs.mallory.ai/api-reference/story-observables.md): Get observables linked to a story through its references, with verdict counts.
- [Story References](https://docs.mallory.ai/api-reference/story-references.md): Get references associated with a specific story with pagination and sorting.
- [Similar Stories](https://docs.mallory.ai/api-reference/similar-stories.md): Find stories similar to the specified story.
- [Story Timeline](https://docs.mallory.ai/api-reference/story-timeline.md): Get timeline entries for a specific story with pagination.
- [Update Story](https://docs.mallory.ai/api-reference/update-story.md): Update a story's title and/or description (admin only).
- [Content Chunks Index](https://docs.mallory.ai/api-reference/content-chunks-index.md)
- [Content Chunks Search](https://docs.mallory.ai/api-reference/content-chunks-search.md): For agent to search content chunks by embedding
- [Lookup Content Chunk](https://docs.mallory.ai/api-reference/lookup-content-chunk.md): Retrieve a reference by its identifier.
- [References Index](https://docs.mallory.ai/api-reference/references-index.md)
- [Get Content Labels](https://docs.mallory.ai/api-reference/get-content-labels.md): Get available content labels for filtering references.
- [Lookup Reference](https://docs.mallory.ai/api-reference/lookup-reference.md): Retrieve a reference by its identifier.
- [Get Reference Citations](https://docs.mallory.ai/api-reference/get-reference-citations.md): Retrieve citations (upstream URLs) associated with a reference.
- [Get Reference Entities](https://docs.mallory.ai/api-reference/get-reference-entities.md): Retrieve all entities associated with a reference, grouped by type.
- [Get Reference Observables](https://docs.mallory.ai/api-reference/get-reference-observables.md): Retrieve all observables associated with a reference via opinions.
- [Get Threat Actor Mentions](https://docs.mallory.ai/api-reference/get-threat-actor-mentions.md)
- [Get Threat Actors](https://docs.mallory.ai/api-reference/get-threat-actors.md): Retrieve threat actors associated with a reference.
- [Get Vulnerabilities](https://docs.mallory.ai/api-reference/get-vulnerabilities.md): Retrieve vulnerabilities associated with a reference.
- [Get Vulnerability Mentions](https://docs.mallory.ai/api-reference/get-vulnerability-mentions.md)
- [Create References](https://docs.mallory.ai/api-reference/create-references.md): Create new references from a list of URLs (admin only).
- [Delete Observable](https://docs.mallory.ai/api-reference/delete-observable.md): Delete a tenant observable and cascade its direct tags and sightings.
- [Observables Index](https://docs.mallory.ai/api-reference/observables-index.md): List all observables with pagination, filtering, verdict counts, and scores.
- [List Enrichment Providers](https://docs.mallory.ai/api-reference/list-enrichment-providers.md): List the enrichment providers this deployment can return.
- [Observable Sources](https://docs.mallory.ai/api-reference/observable-sources.md): Distinct opinion sources (with counts), for the source filter dropdown.
- [Observable Tags](https://docs.mallory.ai/api-reference/observable-tags.md): Tag usage counts: distinct opinion assignments plus directly tagged observables.
- [Get Entities By Observable Type And Name](https://docs.mallory.ai/api-reference/get-entities-by-observable-type-and-name.md): Get the entities an observable is attributed to, by type and name.
- [Get Opinions By Observable Type And Name](https://docs.mallory.ai/api-reference/get-opinions-by-observable-type-and-name.md): Get opinions for observable (direct lookup by type and name).
- [Get Observable By Type And Name](https://docs.mallory.ai/api-reference/get-observable-by-type-and-name.md): Get specific observable by type and name with verdict counts and score. The name parameter should be URL-encoded if it contains special characters (e.g., for URI type observables).
- [Get Observable By Uuid](https://docs.mallory.ai/api-reference/get-observable-by-uuid.md): Get specific observable by UUID with verdict counts and score.
- [Get Entities By Observable Uuid](https://docs.mallory.ai/api-reference/get-entities-by-observable-uuid.md): Get the entities an observable is attributed to.
- [Get Opinions By Observable Uuid](https://docs.mallory.ai/api-reference/get-opinions-by-observable-uuid.md): Get opinions for the exact observable identity (via UUID lookup).
- [Direct Observable Tags](https://docs.mallory.ai/api-reference/direct-observable-tags.md): Return the complete direct tag set; reading never creates a tenant copy.
- [Opinions Index](https://docs.mallory.ai/api-reference/opinions-index.md): List all opinions with filtering.
- [Get Grouped Opinions](https://docs.mallory.ai/api-reference/get-grouped-opinions.md): Get opinions grouped by observable (observable_type, observable_name). Pagination is applied at the grouped observable level, so limit=10 returns 10 distinct observables, each with all their matching opinions.
- [Get Opinion By Uuid](https://docs.mallory.ai/api-reference/get-opinion-by-uuid.md): Get specific opinion by UUID.
- [Update Observable](https://docs.mallory.ai/api-reference/update-observable.md): Update an observable. Only description and attributes can be updated.
- [Replace Direct Observable Tags](https://docs.mallory.ai/api-reference/replace-direct-observable-tags.md): Replace caller direct annotations atomically; inherited opinion tags remain.
- [List Sightings](https://docs.mallory.ai/api-reference/sightings/list-sightings.md): List this tenant's sightings, ordered by occurrence time and UUID descending.
- [Create Sighting](https://docs.mallory.ai/api-reference/sightings/create-sighting.md): Record an occurrence; exact retries return the persisted UUID and timestamps.
- [Create Sightings Bulk](https://docs.mallory.ai/api-reference/sightings/create-sightings-bulk.md): Atomically record 1–500 items within 1 MiB and a 30-second POST deadline.
- [Delete Finding Instance](https://docs.mallory.ai/api-reference/findings/delete-finding-instance.md): Delete a finding (cascades to its entity and ticket links).
- [Finding Instances Index](https://docs.mallory.ai/api-reference/findings/finding-instances-index.md): List the tenant's findings, with each finding's own severity plus its definition's category / title.
- [Finding Metrics](https://docs.mallory.ai/api-reference/findings/finding-metrics.md): UTC half-open range of 1–90 days. Current summary ignores the date range.
- [Get Finding Instance](https://docs.mallory.ai/api-reference/findings/get-finding-instance.md): Fetch one finding with its definition metadata, linked entities, and linked tickets.
- [Batch Update Finding Instances](https://docs.mallory.ai/api-reference/findings/batch-update-finding-instances.md): Apply one partial update by UUID list or by the list filter surface.
- [Update Finding Instance](https://docs.mallory.ai/api-reference/findings/update-finding-instance.md): Partial update: status, the free-text / detail fields and the asset link. The asset identity (``asset_type`` / ``asset_identifier``) and definition are immutable here.
- [Create Finding Instance](https://docs.mallory.ai/api-reference/findings/create-finding-instance.md): Create a finding. The definition must exist (422 otherwise); a duplicate open finding for the same definition + asset + qualifier is rejected (409).
- [Delete Finding Definition](https://docs.mallory.ai/api-reference/finding_definitions/delete-finding-definition.md): Delete a tenant-custom definition. 403 for managed/global rows, 404 if absent, 409 if findings still reference it (FK RESTRICT).
- [Finding Definitions Index](https://docs.mallory.ai/api-reference/finding_definitions/finding-definitions-index.md): List finding definitions visible to the tenant (global catalog + custom).
- [Get Finding Definition](https://docs.mallory.ai/api-reference/finding_definitions/get-finding-definition.md): Fetch one definition by slug. Resolves the tenant's own row first, then the global catalog; ``scope`` pins the lookup to one side.
- [Update Finding Definition](https://docs.mallory.ai/api-reference/finding_definitions/update-finding-definition.md): Update a tenant-custom definition. 403 if the slug names a managed/global row (read-only), 404 if it does not exist.
- [Create Finding Definition](https://docs.mallory.ai/api-reference/finding_definitions/create-finding-definition.md): Create a tenant-custom finding definition. Managed/global definitions are only created by the catalog sync, never through this endpoint.
- [Delete External Ticket](https://docs.mallory.ai/api-reference/finding_tickets/delete-external-ticket.md): Delete Mallory's tracking record for an external ticket (cascades to its finding links). Does NOT delete the ticket in the external system.
- [Detach Finding](https://docs.mallory.ai/api-reference/finding_tickets/detach-finding.md): Remove a finding<->ticket link (idempotent — absent link is a no-op).
- [List External Tickets](https://docs.mallory.ai/api-reference/finding_tickets/list-external-tickets.md): List the tenant's tracked external tickets.
- [List Ticketing Connections](https://docs.mallory.ai/api-reference/finding_tickets/list-ticketing-connections.md): List the tenant's ticketing connections (registered MCP servers for a supported provider) and whether each is ready to create a ticket.
- [Get Ticketing Connection](https://docs.mallory.ai/api-reference/finding_tickets/get-ticketing-connection.md): Fetch one ticketing connection with its create tool's live input schema and ``required_fields`` (fetched from the upstream MCP server), so a client knows which vendor-specific fields to supply in ``ticket.extra_fields`` (e.g. Linear's ``team``). ``schema_error`` is set when the schema can't be fetch…
- [Lookup External Ticket](https://docs.mallory.ai/api-reference/finding_tickets/lookup-external-ticket.md): Read a ticket's current title, state and assignee from the external system **without persisting anything**.
- [Get External Ticket](https://docs.mallory.ai/api-reference/finding_tickets/get-external-ticket.md): Fetch one external ticket with the UUIDs of its linked findings.
- [Create Or Link External Ticket](https://docs.mallory.ai/api-reference/finding_tickets/create-or-link-external-ticket.md): Create an external ticket for a set of findings, or link an already-created one.
- [Attach Findings](https://docs.mallory.ai/api-reference/finding_tickets/attach-findings.md): Idempotently link additional findings to an existing external ticket.
- [Refresh External Ticket](https://docs.mallory.ai/api-reference/finding_tickets/refresh-external-ticket.md): Re-read a tracked ticket from its external system and persist what came back — title, state, assignee, and ``last_synced_at``.
- [Get Live Catalog](https://docs.mallory.ai/api-reference/get-live-catalog.md): Return schemas and accepted qualifiers for connected live plugins.
- [Search Live Plugin Tables](https://docs.mallory.ai/api-reference/search-live-plugin-tables.md): Rank a connected plugin's tables against a plain-language query.
- [List Entity Matches](https://docs.mallory.ai/api-reference/assets/list-entity-matches.md): List the tenant's threat-intel matches, filtered and paginated.
- [Entity Match Summary](https://docs.mallory.ai/api-reference/assets/entity-match-summary.md): Per-entity-type counts and all matched source tables for the tenant.
- [List Vulnerability Entity Matches](https://docs.mallory.ai/api-reference/assets/list-vulnerability-entity-matches.md): List the tenant's vulnerability matches with intel fields inline.
- [Get Story Entity Matches](https://docs.mallory.ai/api-reference/assets/get-story-entity-matches.md): The tenant's entity matches that overlap a story's focus entities.
- [Get Entity Match](https://docs.mallory.ai/api-reference/assets/get-entity-match.md): Look up a single match ("is this tenant matched to entity E?").
- [Get Matched Assets](https://docs.mallory.ai/api-reference/assets/get-matched-assets.md): Return the tenant's actual asset rows for one ``source_table`` (silver).
- [Get Matched Assets Schema](https://docs.mallory.ai/api-reference/assets/get-matched-assets-schema.md): The queryable columns of a match's silver ``source_table``.
- [Query Matched Assets](https://docs.mallory.ai/api-reference/assets/query-matched-assets.md): Query a match's silver ``source_table`` with explorer-style controls.
- [Delete Malware Sample](https://docs.mallory.ai/api-reference/malware-samples/delete-malware-sample.md)
- [List Malware Samples](https://docs.mallory.ai/api-reference/malware-samples/list-malware-samples.md)
- [List Malware Sandbox Providers](https://docs.mallory.ai/api-reference/malware-samples/list-malware-sandbox-providers.md)
- [Get Malware Sample](https://docs.mallory.ai/api-reference/malware-samples/get-malware-sample.md)
- [Get Malware Sample Analysis](https://docs.mallory.ai/api-reference/malware-samples/get-malware-sample-analysis.md)
- [Get Malware Sample Report](https://docs.mallory.ai/api-reference/malware-samples/get-malware-sample-report.md)
- [Get Malware Sample Report Artifact](https://docs.mallory.ai/api-reference/malware-samples/get-malware-sample-report-artifact.md)
- [Create Malware Sample](https://docs.mallory.ai/api-reference/malware-samples/create-malware-sample.md)
- [Request Malware Sample Analyses](https://docs.mallory.ai/api-reference/malware-samples/request-malware-sample-analyses.md)
- [Upload Malware Sample Content](https://docs.mallory.ai/api-reference/malware-samples/upload-malware-sample-content.md)
- [Workspaces Index](https://docs.mallory.ai/api-reference/workspaces-index.md): List all workspaces accessible to the current user in their tenant.
- [Create Workspace](https://docs.mallory.ai/api-reference/create-workspace.md): Create a new workspace.
- [Get Workspace By Uuid](https://docs.mallory.ai/api-reference/get-workspace-by-uuid.md): Get a specific workspace by UUID with its entities and topics.
- [Update Workspace](https://docs.mallory.ai/api-reference/update-workspace.md): Update a workspace, optionally replacing all entities and topics.
- [List Workspace Entities](https://docs.mallory.ai/api-reference/list-workspace-entities.md): List entities for a workspace with combined details across all entity types.
- [Add Entities To Workspace](https://docs.mallory.ai/api-reference/add-entities-to-workspace.md): Add entities to a workspace, skipping duplicates.
- [Add Topics To Workspace](https://docs.mallory.ai/api-reference/add-topics-to-workspace.md): Add topics to a workspace, skipping duplicates.
- [Delete Workspace](https://docs.mallory.ai/api-reference/delete-workspace.md): Delete a workspace and all associated entities, topics, and members.
- [Remove Entities From Workspace](https://docs.mallory.ai/api-reference/remove-entities-from-workspace.md): Remove entities from a workspace in one request. Idempotent — entities not present are ignored. The single-item counterpart is ``DELETE /{uuid}/entities/{entity_type}/{entity_uuid}``.
- [Delete Workspace Entity](https://docs.mallory.ai/api-reference/delete-workspace-entity.md): Remove a single entity from a workspace. Idempotent. To remove many at once, use ``POST /{uuid}/remove_entities``.
- [Remove Topics From Workspace](https://docs.mallory.ai/api-reference/remove-topics-from-workspace.md): Remove topics from a workspace in one request. Idempotent — topics not present are ignored. The single-item counterpart is ``DELETE /{uuid}/topics/{topic}``.
- [Delete Workspace Topic](https://docs.mallory.ai/api-reference/delete-workspace-topic.md): Remove a single topic from a workspace. Idempotent. To remove many at once, use ``POST /{uuid}/remove_topics``.
- [List Workspace Sources](https://docs.mallory.ai/api-reference/list-workspace-sources.md): List followed sources for a workspace.
- [Add Sources To Workspace](https://docs.mallory.ai/api-reference/add-sources-to-workspace.md): Add sources to a workspace, skipping duplicates.
- [Remove Sources From Workspace](https://docs.mallory.ai/api-reference/remove-sources-from-workspace.md): Remove sources from a workspace in one request. Idempotent — sources not present are ignored. The single-item counterpart is ``DELETE /{uuid}/sources/{source_uuid}``.
- [Delete Workspace Source](https://docs.mallory.ai/api-reference/delete-workspace-source.md): Remove a single source from a workspace. Idempotent. To remove many at once, use ``POST /{uuid}/remove_sources``.
- [List Workspace Members](https://docs.mallory.ai/api-reference/list-workspace-members.md): List workspace members.
- [Add Workspace Member](https://docs.mallory.ai/api-reference/add-workspace-member.md): Add an explicit workspace member.
- [Update Workspace Member](https://docs.mallory.ai/api-reference/update-workspace-member.md): Update a workspace member's role.
- [Remove Workspace Member](https://docs.mallory.ai/api-reference/remove-workspace-member.md): Remove an explicit workspace member. Idempotent.
- [Get User](https://docs.mallory.ai/api-reference/get-user.md): Get the current authenticated user's information
- [List User Tenants](https://docs.mallory.ai/api-reference/tenants/list-user-tenants.md)
- [List Tenant Users](https://docs.mallory.ai/api-reference/tenants/list-tenant-users.md): List the tenant's users (for the member-add picker).
- [List Exports](https://docs.mallory.ai/api-reference/list-exports.md): Base exports endpoint. Returns export history and mirrors /history.
- [Get Export History](https://docs.mallory.ai/api-reference/get-export-history.md): Get export history
- [Get Latest Export Url](https://docs.mallory.ai/api-reference/get-latest-export-url.md): Get a signed URL for the latest export.
- [Get Export Url By Uuid](https://docs.mallory.ai/api-reference/get-export-url-by-uuid.md): Get a signed URL for a specific export by export UUID.
- [Delete Integration](https://docs.mallory.ai/api-reference/delete-integration.md): Delete an integration.
- [List Integrations](https://docs.mallory.ai/api-reference/list-integrations.md): List all integrations for the current tenant.
- [Get Integration Capabilities](https://docs.mallory.ai/api-reference/get-integration-capabilities.md): Get available capabilities for all registered integration types.
- [Get Integration Schemas](https://docs.mallory.ai/api-reference/get-integration-schemas.md): Get JSON schemas for all registered integration types.
- [Get Integration](https://docs.mallory.ai/api-reference/get-integration.md): Get a specific integration by UUID.
- [Update Integration](https://docs.mallory.ai/api-reference/update-integration.md): Update an existing integration.
- [Create Integration](https://docs.mallory.ai/api-reference/create-integration.md): Create a new integration for the current tenant.
- [Execute Integration Action](https://docs.mallory.ai/api-reference/execute-integration-action.md): Execute an action on an integration.
- [Delete Schedule](https://docs.mallory.ai/api-reference/delete-schedule.md): Delete a schedule.
- [List Schedules](https://docs.mallory.ai/api-reference/list-schedules.md): List schedules with optional filtering and sorting before pagination.
- [Get Schedule](https://docs.mallory.ai/api-reference/get-schedule.md): Get a specific schedule by UUID.
- [Get Schedule Executions](https://docs.mallory.ai/api-reference/get-schedule-executions.md): Get execution history for a schedule.
- [Update Schedule](https://docs.mallory.ai/api-reference/update-schedule.md): Update an existing schedule.
- [Create Schedule](https://docs.mallory.ai/api-reference/create-schedule.md): Create a new schedule.
- [Take Schedule Ownership](https://docs.mallory.ai/api-reference/take-schedule-ownership.md): Reassign a schedule to the calling tenant owner.
- [Sources Index](https://docs.mallory.ai/api-reference/sources-index.md): List all enabled source configurations with reference counts. Every row carries ``access`` and only the fields that access level serves; the 200 schema documents them all.
- [Get Scan Config](https://docs.mallory.ai/api-reference/sources/get-scan-config.md): Read complete live scan settings and capabilities from the authoritative panel.
- [Formats](https://docs.mallory.ai/api-reference/ingest-files/formats.md)
- [Schema](https://docs.mallory.ai/api-reference/ingest-files/schema.md)
- [Example](https://docs.mallory.ai/api-reference/ingest-files/example.md)
- [Show](https://docs.mallory.ai/api-reference/sources/show.md)
- [Upload](https://docs.mallory.ai/api-reference/sources/upload.md)
- [Complete](https://docs.mallory.ai/api-reference/sources/complete.md)
- [Preview](https://docs.mallory.ai/api-reference/ingest-files/preview.md)
- [Submit](https://docs.mallory.ai/api-reference/sources/submit.md)
- [History](https://docs.mallory.ai/api-reference/ingest-files/history.md)
- [Show Import](https://docs.mallory.ai/api-reference/sources/show-import.md)
- [Retry](https://docs.mallory.ai/api-reference/ingest-files/retry.md)
- [Enablement](https://docs.mallory.ai/api-reference/ingest-files/enablement.md)
- [Clear](https://docs.mallory.ai/api-reference/sources/clear.md)
- [Cleanup](https://docs.mallory.ai/api-reference/ingest-files/cleanup.md)
- [Workspaces Index](https://docs.mallory.ai/api-reference/profiles-deprecated/workspaces-index.md): List all workspaces accessible to the current user in their tenant.
- [Create Workspace](https://docs.mallory.ai/api-reference/profiles-deprecated/create-workspace.md): Create a new workspace.
- [Get Workspace By Uuid](https://docs.mallory.ai/api-reference/profiles-deprecated/get-workspace-by-uuid.md): Get a specific workspace by UUID with its entities and topics.
- [Update Workspace](https://docs.mallory.ai/api-reference/profiles-deprecated/update-workspace.md): Update a workspace, optionally replacing all entities and topics.
- [Delete Workspace](https://docs.mallory.ai/api-reference/profiles-deprecated/delete-workspace.md): Delete a workspace and all associated entities, topics, and members.
- [List Workspace Entities](https://docs.mallory.ai/api-reference/profiles-deprecated/list-workspace-entities.md): List entities for a workspace with combined details across all entity types.
- [Add Entities To Workspace](https://docs.mallory.ai/api-reference/profiles-deprecated/add-entities-to-workspace.md): Add entities to a workspace, skipping duplicates.
- [Add Topics To Workspace](https://docs.mallory.ai/api-reference/profiles-deprecated/add-topics-to-workspace.md): Add topics to a workspace, skipping duplicates.

## OpenAPI Specs

- [openapi](https://api.mallory.ai/openapi.json)

## Optional

- [Support Community](https://join.slack.com/t/mallorycommunity/shared_invite/zt-3h9c09jw3-xmWYwAgPaU7~briLd9XUtQ)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.