{
  "opencollection": "1.0.0",
  "info": {
    "name": "Malwarebytes Policies API",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "Policies",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Get policy by id",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "populate",
                "value": "",
                "type": "query"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get policy by id."
        },
        {
          "info": {
            "name": "Update policy",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Update policy."
        },
        {
          "info": {
            "name": "Delete policy",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete policy."
        },
        {
          "info": {
            "name": "Get policy isolation image by id",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id/isolation_image",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get policy isolation image by id."
        },
        {
          "info": {
            "name": "Add isolation image",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id/isolation_image",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "This route allows you to add an icon to display on the custom message screen.\n\nOther routes in this API accept `Content-Type: application/json`.\n\nThis route is meant for file uploads and expects the request following `Content-Type: multipart/form-data` structure.\n\nTechnically it is _form upload_ and the field for linking a file is called `metadata`.\n\nFile Requirements:\n\nFILE TYPE: BMP\nOPTIMAL FILE SIZE: 150PX BY 150PX\nFILE SIZE: 2MB (maximum)\n\nExample usage:\n\ncurl --location --request POST 'http"
        },
        {
          "info": {
            "name": "Delete policy isolation image",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id/isolation_image",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete policy isolation image."
        },
        {
          "info": {
            "name": "Get all policies",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/policies",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get all policies."
        },
        {
          "info": {
            "name": "Create policy",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/policies",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Create policy."
        },
        {
          "info": {
            "name": "Get policy auto-isolation",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id/auto_isolation",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get policy auto-isolation options by policy ID"
        },
        {
          "info": {
            "name": "Set policy auto-isolation",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id/auto_isolation",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Set policy auto-isolation options by policy ID"
        },
        {
          "info": {
            "name": "Get policy tamper protection password",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id/secret",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Policy ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get policy tamper protection password."
        },
        {
          "info": {
            "name": "Set policy tamper protection password",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id/secret",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Policy ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Set policy tamper protection password."
        },
        {
          "info": {
            "name": "Get system default policy",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/policies/system_default",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get system default policy."
        },
        {
          "info": {
            "name": "Clone policy",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/policies/:source_id/clone",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "source_id",
                "value": "",
                "type": "path",
                "description": "ID of the policy to be cloned (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Clone policy by id of an existing policy."
        },
        {
          "info": {
            "name": "Promote policy",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/nebula/v1/policies/:id/promote",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid UUID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Promote policy."
        },
        {
          "info": {
            "name": "Get all policies",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/policies",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get all policies"
        },
        {
          "info": {
            "name": "Create new policy",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/policies",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Create new Policy"
        },
        {
          "info": {
            "name": "Set default",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/policies/:id/default",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Mark policy as default"
        },
        {
          "info": {
            "name": "Get policy",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/policies/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get one policy by its id"
        },
        {
          "info": {
            "name": "Update policy",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/policies/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Update policy. by its id"
        },
        {
          "info": {
            "name": "Delete policy",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "https://api.threatdown.com/oneview/v1/policies/:id",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Delete policy. by its id"
        },
        {
          "info": {
            "name": "Get policy tamper protection password",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/policies/:id/secret",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Policy ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Get policy tamper protection password"
        },
        {
          "info": {
            "name": "Set policy tamper protection password",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/policies/:id/secret",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Policy ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Set policy tamper protection password"
        },
        {
          "info": {
            "name": "Get policy effective tamper protection level",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/sites/:siteId/policies/:id/tamper-protection",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "siteId",
                "value": "",
                "type": "path",
                "description": "Valid OneView site ID (Ex. \"30616562663436302D643733312D346238622D623338332D613031343538363566383333\")"
              },
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "Valid OneView policy ID (Ex. \"30616562663436302D643733312D346238622D623338332D613031343538363566383333\")"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Returns the effective tamper protection level (off, policy or site) for a policy resolved in the context of a specific site, along with the site override flag and presence indicators. The level is resolved against the site (child account) where the machine is installed, since a global policy can be owned by a parent account but the applied secret lives on the site. Use this before an uninstall to determine whether a passwordless uninstall is possible and, if not, which secret to retrieve. No sec"
        },
        {
          "info": {
            "name": "Assign to accounts",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.threatdown.com/oneview/v1/policies/:id/promote",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Assign policies to site accounts"
        }
      ]
    }
  ],
  "bundled": true
}