---
title: Threat Signals
---

[Skip to content](#_top)

[API Reference](https://developers.cloudflare.com/api/go)

[Cloudforce One](https://developers.cloudflare.com/api/go/resources/cloudforce_one)

Copy Markdown

Open in **Claude**Open in **ChatGPT**Open in **Cursor**

---

**Copy Markdown****View as Markdown**

# Threat Signals

Threat Signals API for managing threat intelligence feeds, articles, indicators, and AI skills in Cloudforce One.

## Prerequisites

1. **API token** — requests must use an API token with Cloudforce One permissions; write operations (creating, editing, or deleting feeds, skills, and tags) require write access.
2. **Plan limits** — access on the Free plan is limited; feed quotas and managed default skills apply.

#### Threat SignalsSearch

##### [Search Threat Signals articles using AI Search](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/search/methods/search)

client.CloudforceOne.ThreatSignals.Search.Search(ctx, params) (\*[ThreatSignalSearchSearchResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.search%20%3E%20(model)%20ThreatSignalSearchSearchResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/search

#### Threat SignalsCategories

##### [List Threat Signals feed categories](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/categories/methods/list)

client.CloudforceOne.ThreatSignals.Categories.List(ctx, query) (\*[ThreatSignalCategoryListResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.categories%20%3E%20(model)%20ThreatSignalCategoryListResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/categories

#### Threat SignalsFeeds

##### [List Threat Signals feeds](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/feeds/methods/list)

client.CloudforceOne.ThreatSignals.Feeds.List(ctx, params) (\*V4PagePagination\[[ThreatSignalFeedListResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.feeds%20%3E%20(model)%20ThreatSignalFeedListResponse%20%3E%20(schema)>)], error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/feeds

##### [Create Threat Signals feed](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/feeds/methods/create)

client.CloudforceOne.ThreatSignals.Feeds.New(ctx, params) (\*[ThreatSignalFeedNewResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.feeds%20%3E%20(model)%20ThreatSignalFeedNewResponse%20%3E%20(schema)>), error)

POST/accounts/{account\_id}/cloudforce-one/v2/threat-signals/feeds

##### [Update Threat Signals feed](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/feeds/methods/edit)

client.CloudforceOne.ThreatSignals.Feeds.Edit(ctx, feedID, params) (\*[ThreatSignalFeedEditResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.feeds%20%3E%20(model)%20ThreatSignalFeedEditResponse%20%3E%20(schema)>), error)

PATCH/accounts/{account\_id}/cloudforce-one/v2/threat-signals/feeds/{feed\_id}

##### [Delete Threat Signals feed](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/feeds/methods/delete)

client.CloudforceOne.ThreatSignals.Feeds.Delete(ctx, feedID, body) (\*[ThreatSignalFeedDeleteResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.feeds%20%3E%20(model)%20ThreatSignalFeedDeleteResponse%20%3E%20(schema)>), error)

DELETE/accounts/{account\_id}/cloudforce-one/v2/threat-signals/feeds/{feed\_id}

##### [Trigger Threat Signals feed poll](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/feeds/methods/poll)

client.CloudforceOne.ThreatSignals.Feeds.Poll(ctx, params) (\*[ThreatSignalFeedPollResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.feeds%20%3E%20(model)%20ThreatSignalFeedPollResponse%20%3E%20(schema)>), error)

POST/accounts/{account\_id}/cloudforce-one/v2/threat-signals/feeds/poll

#### Threat SignalsFeedsRaw

##### [Get Threat Signals feed XML](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/feeds/subresources/raw/methods/get)

client.CloudforceOne.ThreatSignals.Feeds.Raw.Get(ctx, feedID, params) (\*string, error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/feeds/{feed\_id}/raw

#### Threat SignalsFeedsSkills

##### [Get Threat Signals feed skills](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/feeds/subresources/skills/methods/get)

client.CloudforceOne.ThreatSignals.Feeds.Skills.Get(ctx, feedID, query) (\*[ThreatSignalFeedSkillGetResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.feeds.skills%20%3E%20(model)%20ThreatSignalFeedSkillGetResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/feeds/{feed\_id}/skills

##### [Set Threat Signals feed skills](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/feeds/subresources/skills/methods/update)

client.CloudforceOne.ThreatSignals.Feeds.Skills.Update(ctx, feedID, params) (\*[ThreatSignalFeedSkillUpdateResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.feeds.skills%20%3E%20(model)%20ThreatSignalFeedSkillUpdateResponse%20%3E%20(schema)>), error)

PUT/accounts/{account\_id}/cloudforce-one/v2/threat-signals/feeds/{feed\_id}/skills

#### Threat SignalsArticles

##### [List Threat Signals articles](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/methods/list)

client.CloudforceOne.ThreatSignals.Articles.List(ctx, params) (\*[ThreatSignalArticleListResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.articles%20%3E%20(model)%20ThreatSignalArticleListResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles

##### [Bulk update Threat Signals article read status](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/methods/bulk_edit)

client.CloudforceOne.ThreatSignals.Articles.BulkEdit(ctx, params) (\*[ThreatSignalArticleBulkEditResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.articles%20%3E%20(model)%20ThreatSignalArticleBulkEditResponse%20%3E%20(schema)>), error)

PATCH/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles

##### [Get Threat Signals article](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/methods/get)

client.CloudforceOne.ThreatSignals.Articles.Get(ctx, articleID, query) (\*[ThreatSignalArticleGetResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.articles%20%3E%20(model)%20ThreatSignalArticleGetResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles/{article\_id}

##### [Update Threat Signals article read status](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/methods/edit)

client.CloudforceOne.ThreatSignals.Articles.Edit(ctx, articleID, params) (\*[ThreatSignalArticleEditResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.articles%20%3E%20(model)%20ThreatSignalArticleEditResponse%20%3E%20(schema)>), error)

PATCH/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles/{article\_id}

#### Threat SignalsArticlesContent

##### [Get Threat Signals article content](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/subresources/content/methods/get)

client.CloudforceOne.ThreatSignals.Articles.Content.Get(ctx, articleID, params) (\*string, error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles/{article\_id}/content

#### Threat SignalsArticlesTags

##### [Add tag to Threat Signals article](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/subresources/tags/methods/create)

client.CloudforceOne.ThreatSignals.Articles.Tags.New(ctx, articleID, params) (\*[ThreatSignalArticleTagNewResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.articles.tags%20%3E%20(model)%20ThreatSignalArticleTagNewResponse%20%3E%20(schema)>), error)

POST/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles/{article\_id}/tags

##### [Remove tag from Threat Signals article](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/subresources/tags/methods/delete)

client.CloudforceOne.ThreatSignals.Articles.Tags.Delete(ctx, articleID, tagID, body) (\*[ThreatSignalArticleTagDeleteResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.articles.tags%20%3E%20(model)%20ThreatSignalArticleTagDeleteResponse%20%3E%20(schema)>), error)

DELETE/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles/{article\_id}/tags/{tag\_id}

##### [Generate Threat Signals article AI tags](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/subresources/tags/methods/generate)

client.CloudforceOne.ThreatSignals.Articles.Tags.Generate(ctx, articleID, body) (\*[ThreatSignalArticleTagGenerateResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.articles.tags%20%3E%20(model)%20ThreatSignalArticleTagGenerateResponse%20%3E%20(schema)>), error)

POST/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles/{article\_id}/tag

#### Threat SignalsArticlesSkill Outputs

##### [Get Threat Signals article skill output](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/articles/subresources/skill_outputs/methods/get)

client.CloudforceOne.ThreatSignals.Articles.SkillOutputs.Get(ctx, articleID, skillID, query) (\*[ThreatSignalArticleSkillOutputGetResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.articles.skill_outputs%20%3E%20(model)%20ThreatSignalArticleSkillOutputGetResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/articles/{article\_id}/skills/{skill\_id}/output

#### Threat SignalsIndicators

##### [List Threat Signals article indicators](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/indicators/methods/list)

client.CloudforceOne.ThreatSignals.Indicators.List(ctx, params) (\*[ThreatSignalIndicatorListResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.indicators%20%3E%20(model)%20ThreatSignalIndicatorListResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/indicators

#### Threat SignalsSkills

##### [List Threat Signals skills](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/skills/methods/list)

client.CloudforceOne.ThreatSignals.Skills.List(ctx, params) (\*V4PagePagination\[[ThreatSignalSkillListResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.skills%20%3E%20(model)%20ThreatSignalSkillListResponse%20%3E%20(schema)>)], error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/skills

##### [Create Threat Signals skill](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/skills/methods/create)

client.CloudforceOne.ThreatSignals.Skills.New(ctx, params) (\*[ThreatSignalSkillNewResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.skills%20%3E%20(model)%20ThreatSignalSkillNewResponse%20%3E%20(schema)>), error)

POST/accounts/{account\_id}/cloudforce-one/v2/threat-signals/skills

##### [Get Threat Signals skill](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/skills/methods/get)

client.CloudforceOne.ThreatSignals.Skills.Get(ctx, skillID, query) (\*[ThreatSignalSkillGetResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.skills%20%3E%20(model)%20ThreatSignalSkillGetResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/skills/{skill\_id}

##### [Update Threat Signals skill](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/skills/methods/edit)

client.CloudforceOne.ThreatSignals.Skills.Edit(ctx, skillID, params) (\*[ThreatSignalSkillEditResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.skills%20%3E%20(model)%20ThreatSignalSkillEditResponse%20%3E%20(schema)>), error)

PATCH/accounts/{account\_id}/cloudforce-one/v2/threat-signals/skills/{skill\_id}

##### [Delete Threat Signals skill](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/skills/methods/delete)

client.CloudforceOne.ThreatSignals.Skills.Delete(ctx, skillID, body) (\*[ThreatSignalSkillDeleteResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.skills%20%3E%20(model)%20ThreatSignalSkillDeleteResponse%20%3E%20(schema)>), error)

DELETE/accounts/{account\_id}/cloudforce-one/v2/threat-signals/skills/{skill\_id}

#### Threat SignalsSkillsTag Categories

##### [Get Threat Signals skill tag categories](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/skills/subresources/tag_categories/methods/get)

client.CloudforceOne.ThreatSignals.Skills.TagCategories.Get(ctx, skillID, query) (\*[ThreatSignalSkillTagCategoryGetResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.skills.tag_categories%20%3E%20(model)%20ThreatSignalSkillTagCategoryGetResponse%20%3E%20(schema)>), error)

GET/accounts/{account\_id}/cloudforce-one/v2/threat-signals/skills/{skill\_id}/tag-categories

##### [Replace Threat Signals skill tag categories](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_signals/subresources/skills/subresources/tag_categories/methods/update)

client.CloudforceOne.ThreatSignals.Skills.TagCategories.Update(ctx, skillID, params) (\*[ThreatSignalSkillTagCategoryUpdateResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_signals.skills.tag_categories%20%3E%20(model)%20ThreatSignalSkillTagCategoryUpdateResponse%20%3E%20(schema)>), error)

PUT/accounts/{account\_id}/cloudforce-one/v2/threat-signals/skills/{skill\_id}/tag-categories