{
  "opencollection": "1.0.0",
  "info": {
    "name": "Malwarebytes Email Protection API",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "Email Protection",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Get domains",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/domains",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection domains for an account"
        },
        {
          "info": {
            "name": "Add domains",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/domains",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Add email protection domains for an account"
        },
        {
          "info": {
            "name": "Delete domains",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/domains",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete email protection domais for an account"
        },
        {
          "info": {
            "name": "Get 911 mailbox",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/911-mailbox",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection 911 mailbox"
        },
        {
          "info": {
            "name": "Edit 911 mailbox",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/911-mailbox",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Edit email protection 911 mailbox"
        },
        {
          "info": {
            "name": "Delete 911 mailbox",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/911-mailbox",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete email protection 911 mailbox"
        },
        {
          "info": {
            "name": "Delete account",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/disable",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete email protection account"
        },
        {
          "info": {
            "name": "Get auto-sync status",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/auto-sync",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account auto-sync status"
        },
        {
          "info": {
            "name": "Enable auto-sync",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/auto-sync",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Enable email protection account auto-sync"
        },
        {
          "info": {
            "name": "Disable auto-sync",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/auto-sync",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Disable email protection account auto-sync"
        },
        {
          "info": {
            "name": "Create allow list entry",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/configurations/allow-list",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Create a new email protection configurations allow list entry for an account"
        },
        {
          "info": {
            "name": "Update allow list",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/configurations/allow-list",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Update email protection configurations allow list for an account"
        },
        {
          "info": {
            "name": "Delete allow list entry",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/configurations/allow-list",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete an email protection configurations allow list entry for an account"
        },
        {
          "info": {
            "name": "Disable Integration",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/disable",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Disable integration with Google Workspace or O365"
        },
        {
          "info": {
            "name": "Get account details",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/details",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account details"
        },
        {
          "info": {
            "name": "Get account settings",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/settings",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account settings"
        },
        {
          "info": {
            "name": "Edit account settings",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/settings",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Edit email protection account settings"
        },
        {
          "info": {
            "name": "Get statistics",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/stats",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "period",
                "value": "",
                "type": "query"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection statistics for an account"
        },
        {
          "info": {
            "name": "Get allow list",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/configurations/allow-list/search",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection configurations allow list for an account"
        },
        {
          "info": {
            "name": "Get email protection domains statistics",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/stats/domains",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection domains statistics for an account"
        },
        {
          "info": {
            "name": "Get incident details",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/incidents/:incident_id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the details of a email protection incident for an account"
        },
        {
          "info": {
            "name": "Get Integration Status status",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/status",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the status of the integration"
        },
        {
          "info": {
            "name": "Get notification recipients",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/configurations/notifications/recipients",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection notification recipients for an account"
        },
        {
          "info": {
            "name": "Create notification recipients",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/configurations/notifications/recipients",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Create email protection notification recipients for an account"
        },
        {
          "info": {
            "name": "Register account",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/register",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Register email protection account"
        },
        {
          "info": {
            "name": "Check Domain",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/domains/check",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Check one or more domains for dkim, spf and dmarc records"
        },
        {
          "info": {
            "name": "Classify Incident",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/incidents/:incident_id/classify",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Classify a specific incident for an account"
        },
        {
          "info": {
            "name": "Get daily usage",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/daily-usage",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account daily usage"
        },
        {
          "info": {
            "name": "Get email statistics",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/stats/emails",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection statistics for an account"
        },
        {
          "info": {
            "name": "Export incidents",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/incidents/export",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Export email protection incidents for an account"
        },
        {
          "info": {
            "name": "Export mailboxes",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/mailboxes/export",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Export email protection mailboxes for an account"
        },
        {
          "info": {
            "name": "Export Scanback incidents",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/incidents/scanback/export",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Export Scanback email protection incidents for an account"
        },
        {
          "info": {
            "name": "Get Phishing Button Manifest",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/o365/phishing-button-manifest",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the manifest for the Phishing Button OWA XML Manifest"
        },
        {
          "info": {
            "name": "Get GW Admin Consent URL",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/gw/admin-consent-url",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the admin consent URL for the Google Workspace integration"
        },
        {
          "info": {
            "name": "Authorize GW Integration",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/gw/authorize",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Authorize Google Workspace integration"
        },
        {
          "info": {
            "name": "Get incident statistics",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/stats/incidents",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection incident statistics for an account"
        },
        {
          "info": {
            "name": "Get monthly usage",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/monthly-usage",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account monthly usage"
        },
        {
          "info": {
            "name": "Get most targeted departments",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/stats/most-targeted-departments",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection most targeted departments for an account"
        },
        {
          "info": {
            "name": "Get most targeted users",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/stats/most-targeted-users",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection most targeted users for an account"
        },
        {
          "info": {
            "name": "Get Admin Consent URL",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/o365/admin-consent-url",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the admin consent URL for O365"
        },
        {
          "info": {
            "name": "Authorize O365",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/integrations/o365/authorize",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Authorize access to the O365 tenant"
        },
        {
          "info": {
            "name": "Search Scanback incidents",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/incidents/scanback",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search Scanback email protection incidents for an account"
        },
        {
          "info": {
            "name": "Search auto-sync groups",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/account/auto-sync/groups",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search email protection account auto-sync groups"
        },
        {
          "info": {
            "name": "Search emails",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/emails",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search email protection emails for an account"
        },
        {
          "info": {
            "name": "Search incidents",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/incidents",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search email protection incidents for an account"
        },
        {
          "info": {
            "name": "Search Mailboxes",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/mailboxes",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search email protection mailboxes for an account"
        },
        {
          "info": {
            "name": "Edit mailboxes",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/mailboxes",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Edit email protection mailboxes"
        },
        {
          "info": {
            "name": "Uncluster incident emails",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/email-protection/incidents/:incident_id/uncluster",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Reclassify incident emails by moving emails from one incident to a new incident with a different classification"
        },
        {
          "info": {
            "name": "Get domains",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/domains",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection domains"
        },
        {
          "info": {
            "name": "Add domains",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/domains",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Add email protection domains"
        },
        {
          "info": {
            "name": "Delete domains",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/domains",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete email protection domais"
        },
        {
          "info": {
            "name": "Get 911 mailbox",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/account/911-mailbox",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection 911 mailbox"
        },
        {
          "info": {
            "name": "Edit 911 mailbox",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/account/911-mailbox",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Edit email protection 911 mailbox"
        },
        {
          "info": {
            "name": "Delete 911 mailbox",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/account/911-mailbox",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete email protection 911 mailbox"
        },
        {
          "info": {
            "name": "Disable email protection account",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/disable",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Disable an email protection account"
        },
        {
          "info": {
            "name": "Get account auto-sync status",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/auto-sync",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account auto-sync status"
        },
        {
          "info": {
            "name": "Enable account auto-sync",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/auto-sync",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Enable email protection account auto-sync"
        },
        {
          "info": {
            "name": "Disable account auto-sync",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/auto-sync",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Disable email protection account auto-sync"
        },
        {
          "info": {
            "name": "Create allow list entry",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/configurations/allow-list",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Create a new email protection configurations allow list entry"
        },
        {
          "info": {
            "name": "Update allow list",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/configurations/allow-list",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Update email protection configurations allow list"
        },
        {
          "info": {
            "name": "Delete allow list entry",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/configurations/allow-list",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete an email protection configurations allow list entry"
        },
        {
          "info": {
            "name": "Disable the integration",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/disable",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Disable the integration with Google Workspace or O365"
        },
        {
          "info": {
            "name": "Get account details",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/details",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account details"
        },
        {
          "info": {
            "name": "Get account settings",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/account/settings",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account settings"
        },
        {
          "info": {
            "name": "Edit account settings",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/account/settings",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Edit email protection account settings"
        },
        {
          "info": {
            "name": "Get statistics",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/stats",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "period",
                "value": "",
                "type": "query"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection statistics for an account"
        },
        {
          "info": {
            "name": "Get allow list",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/configurations/allow-list/search",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection configurations allow list"
        },
        {
          "info": {
            "name": "Get email protection domains statistics",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/stats/domains",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection domains statistics"
        },
        {
          "info": {
            "name": "Get incident details",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/incidents/:incident_id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the details of a email protection incident for an account"
        },
        {
          "info": {
            "name": "Get Integration status",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/status",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the status of the integration"
        },
        {
          "info": {
            "name": "Get notification recipients",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/configurations/notifications/recipients",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection notification recipients"
        },
        {
          "info": {
            "name": "Create notification recipients",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/configurations/notifications/recipients",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Create email protection notification recipients"
        },
        {
          "info": {
            "name": "Authorize O365",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/o365/authorize",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Authorize access to the O365 tenant"
        },
        {
          "info": {
            "name": "Register email protection account",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/register",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Register an email protection account"
        },
        {
          "info": {
            "name": "Check Domain",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/domains/check",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Check one or more domains for dkim, spf and dmarc records"
        },
        {
          "info": {
            "name": "Classify an Incident",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/incidents/:incident_id/classify",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Classify a specific incident for an account"
        },
        {
          "info": {
            "name": "Get daily usage",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/account/daily-usage",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account daily usage"
        },
        {
          "info": {
            "name": "Get email statistics",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/stats/emails",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection statistics"
        },
        {
          "info": {
            "name": "Export incidents",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/incidents/export",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Export email protection incidents for an account"
        },
        {
          "info": {
            "name": "Export mailboxes",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/mailboxes/export",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Export email protection mailboxes for an account"
        },
        {
          "info": {
            "name": "Export Scanback incidents",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/incidents/scanback/export",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Export Scanback email protection incidents for an account"
        },
        {
          "info": {
            "name": "Get phishing button manifest",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/o365/phishing-button-manifest",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the manifest for the Phishing Button OWA XML Manifest"
        },
        {
          "info": {
            "name": "Get GW Admin Consent URL",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/gw/admin-consent-url",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the admin consent URL for the Google Workspace integration"
        },
        {
          "info": {
            "name": "Authorize GW Integration",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/gw/authorize",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Authorize Google Workspace integration"
        },
        {
          "info": {
            "name": "Get incident statistics",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/stats/incidents",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection incident statistics"
        },
        {
          "info": {
            "name": "Migrate Email Protection",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/migrate",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Migrate an email protection direct customer account to a new MSP parent account"
        },
        {
          "info": {
            "name": "Migration Eligibility",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/migration-eligibility",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Check if an account is eligible for migration to a new parent"
        },
        {
          "info": {
            "name": "Get monthly usage",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/account/monthly-usage",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection account monthly usage"
        },
        {
          "info": {
            "name": "Get most targeted departments",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/stats/most-targeted-departments",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection most targeted departments"
        },
        {
          "info": {
            "name": "Get most targeted users",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/stats/most-targeted-users",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection most targeted users"
        },
        {
          "info": {
            "name": "Get admin consent URL",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/integrations/o365/admin-consent-url",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get the admin consent URL for the email protection integration"
        },
        {
          "info": {
            "name": "Register email protection MSP account",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/register-msp",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Register an email protection MSP account"
        },
        {
          "info": {
            "name": "Search Scanback incidents",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/incidents/scanback",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search Scanback email protection incidents for an account"
        },
        {
          "info": {
            "name": "Search auto-sync groups",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/auto-sync/groups",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search email protection account auto-sync groups"
        },
        {
          "info": {
            "name": "Search emails",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/emails",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search email protection emails"
        },
        {
          "info": {
            "name": "Search incidents",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/incidents",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search email protection incidents for an account"
        },
        {
          "info": {
            "name": "Search Mailboxes",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/mailboxes",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Account ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Search email protection mailboxes for an account"
        },
        {
          "info": {
            "name": "Edit mailboxes",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/mailboxes",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Edit email protection mailboxes"
        },
        {
          "info": {
            "name": "Get site integration status",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/site/integration/status",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get email protection site integration status"
        },
        {
          "info": {
            "name": "Uncluster incident emails",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/incidents/:incident_id/uncluster",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Reclassify incident emails by moving emails from one incident to a new incident with a different classification"
        },
        {
          "info": {
            "name": "Register email protection MSP site account",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/email-protection/register-msp-site",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Register an email protection MSP site account"
        }
      ]
    }
  ],
  "bundled": true
}