Skip to content
Cloudflare API
Start here
API Reference
Cloudforce One

Threat Signals

Threat Signals API for managing threat intelligence feeds, articles, indicators, and AI skills in Cloudforce One.

Prerequisites

  1. API token — requests must use an API token with Cloudforce One permissions; write operations (creating, editing, or deleting feeds, skills, and tags) require write access.
  2. Plan limits — access on the Free plan is limited; feed quotas and managed default skills apply.

Threat SignalsSearch

Search Threat Signals articles using AI Search
client.CloudforceOne.ThreatSignals.Search.Search(ctx, params) (*ThreatSignalSearchSearchResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/search

Threat SignalsCategories

List Threat Signals feed categories
client.CloudforceOne.ThreatSignals.Categories.List(ctx, query) (*ThreatSignalCategoryListResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/categories

Threat SignalsFeeds

List Threat Signals feeds
client.CloudforceOne.ThreatSignals.Feeds.List(ctx, params) (*V4PagePagination[ThreatSignalFeedListResponse], error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds
Create Threat Signals feed
client.CloudforceOne.ThreatSignals.Feeds.New(ctx, params) (*ThreatSignalFeedNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds
Update Threat Signals feed
client.CloudforceOne.ThreatSignals.Feeds.Edit(ctx, feedID, params) (*ThreatSignalFeedEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}
Delete Threat Signals feed
client.CloudforceOne.ThreatSignals.Feeds.Delete(ctx, feedID, body) (*ThreatSignalFeedDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}
Trigger Threat Signals feed poll
client.CloudforceOne.ThreatSignals.Feeds.Poll(ctx, params) (*ThreatSignalFeedPollResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/poll

Threat SignalsFeedsRaw

Get Threat Signals feed XML
client.CloudforceOne.ThreatSignals.Feeds.Raw.Get(ctx, feedID, params) (*string, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/raw

Threat SignalsFeedsSkills

Get Threat Signals feed skills
client.CloudforceOne.ThreatSignals.Feeds.Skills.Get(ctx, feedID, query) (*ThreatSignalFeedSkillGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/skills
Set Threat Signals feed skills
client.CloudforceOne.ThreatSignals.Feeds.Skills.Update(ctx, feedID, params) (*ThreatSignalFeedSkillUpdateResponse, error)
PUT/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/skills

Threat SignalsArticles

List Threat Signals articles
client.CloudforceOne.ThreatSignals.Articles.List(ctx, params) (*ThreatSignalArticleListResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles
Bulk update Threat Signals article read status
client.CloudforceOne.ThreatSignals.Articles.BulkEdit(ctx, params) (*ThreatSignalArticleBulkEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles
Get Threat Signals article
client.CloudforceOne.ThreatSignals.Articles.Get(ctx, articleID, query) (*ThreatSignalArticleGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}
Update Threat Signals article read status
client.CloudforceOne.ThreatSignals.Articles.Edit(ctx, articleID, params) (*ThreatSignalArticleEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}

Threat SignalsArticlesContent

Get Threat Signals article content
client.CloudforceOne.ThreatSignals.Articles.Content.Get(ctx, articleID, params) (*string, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/content

Threat SignalsArticlesTags

Add tag to Threat Signals article
client.CloudforceOne.ThreatSignals.Articles.Tags.New(ctx, articleID, params) (*ThreatSignalArticleTagNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags
Remove tag from Threat Signals article
client.CloudforceOne.ThreatSignals.Articles.Tags.Delete(ctx, articleID, tagID, body) (*ThreatSignalArticleTagDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags/{tag_id}
Generate Threat Signals article AI tags
client.CloudforceOne.ThreatSignals.Articles.Tags.Generate(ctx, articleID, body) (*ThreatSignalArticleTagGenerateResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tag

Threat SignalsArticlesSkill Outputs

Get Threat Signals article skill output
client.CloudforceOne.ThreatSignals.Articles.SkillOutputs.Get(ctx, articleID, skillID, query) (*ThreatSignalArticleSkillOutputGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/output

Threat SignalsIndicators

List Threat Signals article indicators
client.CloudforceOne.ThreatSignals.Indicators.List(ctx, params) (*ThreatSignalIndicatorListResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/indicators

Threat SignalsSkills

List Threat Signals skills
client.CloudforceOne.ThreatSignals.Skills.List(ctx, params) (*V4PagePagination[ThreatSignalSkillListResponse], error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills
Create Threat Signals skill
client.CloudforceOne.ThreatSignals.Skills.New(ctx, params) (*ThreatSignalSkillNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills
Get Threat Signals skill
client.CloudforceOne.ThreatSignals.Skills.Get(ctx, skillID, query) (*ThreatSignalSkillGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}
Update Threat Signals skill
client.CloudforceOne.ThreatSignals.Skills.Edit(ctx, skillID, params) (*ThreatSignalSkillEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}
Delete Threat Signals skill
client.CloudforceOne.ThreatSignals.Skills.Delete(ctx, skillID, body) (*ThreatSignalSkillDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}

Threat SignalsSkillsTag Categories

Get Threat Signals skill tag categories
client.CloudforceOne.ThreatSignals.Skills.TagCategories.Get(ctx, skillID, query) (*ThreatSignalSkillTagCategoryGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories
Replace Threat Signals skill tag categories
client.CloudforceOne.ThreatSignals.Skills.TagCategories.Update(ctx, skillID, params) (*ThreatSignalSkillTagCategoryUpdateResponse, error)
PUT/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories