DEVELOPER GUIDE

Published intelligence.
A straightforward API.

Use your API key to retrieve the same public summaries available in the observation explorer.

Get a key

Register with your email, verify the six-digit code and copy the key shown once. Keep it in your server’s secret store. Keys expire after 30 days.

Read reports

GET https://deceptionstrike.com/api/v1/reports
Authorization: Bearer YOUR_API_KEY

The response includes source, mode, updatedAt, checkedAt, refreshSeconds and reports. Each report contains id, category, severity, title, summary, firstSeen, sensors, indicatorCount, technique, tags, access and locked. A locked report exposes its published summary only, without premium evidence.

Freshness

mode is archive when the source is over 24 hours old or the saved fallback is used. updatedAt is the source timestamp; checkedAt is when the service last read it. A current source is a recent publication, not a streaming telemetry feed.

Limits and errors

Each key allows 60 requests per minute. Invalid, revoked and expired keys return 401; rate limits return 429 with Retry-After. No sensor management or private tenant data is available through API keys.

Revoke a key

DELETE https://deceptionstrike.com/api/v1/key
Authorization: Bearer YOUR_API_KEY