--- title: Intel --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Intel #### IntelASN ##### [Get ASN Overview.](https://developers.cloudflare.com/api/python/resources/intel/subresources/asn/methods/get) intel.asn.get([ASN]()asn, ASNGetParams\*\*kwargs) -> [ASN]() GET/accounts/{account\_id}/intel/asn/{asn} #### IntelASNSubnets ##### [Get ASN Subnets](https://developers.cloudflare.com/api/python/resources/intel/subresources/asn/subresources/subnets/methods/get) intel.asn.subnets.get([ASN]()asn, SubnetGetParams\*\*kwargs) -> [SubnetGetResponse]() GET/accounts/{account\_id}/intel/asn/{asn}/subnets ##### ModelsExpand Collapse
class SubnetGetResponse: … asn: Optional\[ASN] Link to this property count: Optional\[float] Total results returned based on your search parameters. Link to this property ip\_count\_total: Optional\[int] Link to this property page: Optional\[float] Current page within paginated list of results. Link to this property per\_page: Optional\[float] Number of results per page of results. Link to this property subnets: Optional\[List\[str]] Link to this property
[Link to this property](<#(resource)%20intel.asn.subnets%20%3E%20(model)%20subnet_get_response%20%3E%20(schema)>) #### IntelDNS ##### [Get Passive DNS by IP](https://developers.cloudflare.com/api/python/resources/intel/subresources/dns/methods/list) intel.dns.list(DNSListParams\*\*kwargs) -> SyncV4PagePagination\[Optional\[DNS]] GET/accounts/{account\_id}/intel/dns ##### ModelsExpand Collapse
class DNS: … count: Optional\[float] Total results returned based on your search parameters. Link to this property page: Optional\[float] Current page within paginated list of results. Link to this property per\_page: Optional\[float] Number of results per page of results. Link to this property
reverse\_records: Optional\[List\[ReverseRecord]] Reverse DNS look-ups observed during the time period. first\_seen: Optional\[date] First seen date of the DNS record during the time period. formatdate Link to this property hostname: Optional\[str] Hostname that the IP was observed resolving to. Link to this property last\_seen: Optional\[date] Last seen date of the DNS record during the time period. formatdate Link to this property
Link to this property
[Link to this property](<#(resource)%20intel.dns%20%3E%20(model)%20dns%20%3E%20(schema)>) #### IntelDomains ##### [Get Domain Details](https://developers.cloudflare.com/api/python/resources/intel/subresources/domains/methods/get) intel.domains.get(DomainGetParams\*\*kwargs) -> [Domain]() GET/accounts/{account\_id}/intel/domain ##### ModelsExpand Collapse
class Domain: …
additional\_information: Optional\[AdditionalInformation] Additional information related to the host name. suspected\_malware\_family: Optional\[str] Suspected DGA malware family. Link to this property
Link to this property
application: Optional\[Application] Application that the hostname belongs to. id: Optional\[int] Link to this property name: Optional\[str] Link to this property
Link to this property
content\_categories: Optional\[List\[ContentCategory]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property domain: Optional\[str] Link to this property
inherited\_content\_categories: Optional\[List\[InheritedContentCategory]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property inherited\_from: Optional\[str] Domain from which inherited_content_categories and inherited_risk_types are inherited, if applicable. Link to this property
inherited\_risk\_types: Optional\[List\[InheritedRiskType]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property popularity\_rank: Optional\[int] Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000. Link to this property
resolves\_to\_refs: Optional\[List\[ResolvesToRef]] Specifies a list of references to one or more IP addresses or domain names that the domain name currently resolves to. id: Optional\[str] STIX 2.1 identifier: https://docs.oasis-open.org/cti/stix/v2.1/cs02/stix-v2.1-cs02.html#\_64yvzeku5a5c. Link to this property value: Optional\[str] IP address or domain name. Link to this property
Link to this property risk\_score: Optional\[float] Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk). Link to this property
risk\_types: Optional\[List\[RiskType]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property
[Link to this property](<#(resource)%20intel.domains%20%3E%20(model)%20domain%20%3E%20(schema)>) #### IntelDomainsBulks ##### [Get Multiple Domain Details](https://developers.cloudflare.com/api/python/resources/intel/subresources/domains/subresources/bulks/methods/get) intel.domains.bulks.get(BulkGetParams\*\*kwargs) -> [BulkGetResponse]() GET/accounts/{account\_id}/intel/domain/bulk ##### ModelsExpand Collapse
Optional\[List\[BulkGetResponseItem]]
additional\_information: Optional\[BulkGetResponseItemAdditionalInformation] Additional information related to the host name. suspected\_malware\_family: Optional\[str] Suspected DGA malware family. Link to this property
Link to this property
application: Optional\[BulkGetResponseItemApplication] Application that the hostname belongs to. id: Optional\[int] Link to this property name: Optional\[str] Link to this property
Link to this property
content\_categories: Optional\[List\[BulkGetResponseItemContentCategory]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property domain: Optional\[str] Link to this property
inherited\_content\_categories: Optional\[List\[BulkGetResponseItemInheritedContentCategory]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property inherited\_from: Optional\[str] Domain from which inherited_content_categories and inherited_risk_types are inherited, if applicable. Link to this property
inherited\_risk\_types: Optional\[List\[BulkGetResponseItemInheritedRiskType]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property popularity\_rank: Optional\[int] Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000. Link to this property risk\_score: Optional\[float] Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk). Link to this property
risk\_types: Optional\[List\[BulkGetResponseItemRiskType]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property
[Link to this property](<#(resource)%20intel.domains.bulks%20%3E%20(model)%20bulk_get_response%20%3E%20(schema)>) #### IntelDomain History ##### [Get Domain History](https://developers.cloudflare.com/api/python/resources/intel/subresources/domain_history/methods/get) intel.domain\_history.get(DomainHistoryGetParams\*\*kwargs) -> [DomainHistoryGetResponse]() GET/accounts/{account\_id}/intel/domain-history ##### ModelsExpand Collapse
class DomainHistory: …
categorizations: Optional\[List\[Categorization]]
categories: Optional\[List\[CategorizationCategory]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property
Link to this property end: Optional\[date] formatdate Link to this property start: Optional\[date] formatdate Link to this property
Link to this property domain: Optional\[str] Link to this property
[Link to this property](<#(resource)%20intel.domain_history%20%3E%20(model)%20domain_history%20%3E%20(schema)>)
Optional\[List\[DomainHistory]]
categorizations: Optional\[List\[Categorization]]
categories: Optional\[List\[CategorizationCategory]] id: Optional\[int] Link to this property name: Optional\[str] Link to this property
Link to this property end: Optional\[date] formatdate Link to this property start: Optional\[date] formatdate Link to this property
Link to this property domain: Optional\[str] Link to this property
[Link to this property](<#(resource)%20intel.domain_history%20%3E%20(model)%20domain_history_get_response%20%3E%20(schema)>) #### IntelIPs ##### [Get IP Overview](https://developers.cloudflare.com/api/python/resources/intel/subresources/ips/methods/get) intel.ips.get(IPGetParams\*\*kwargs) -> [IPGetResponse]() GET/accounts/{account\_id}/intel/ip ##### ModelsExpand Collapse
class IP: …
belongs\_to\_ref: Optional\[BelongsToRef] Specifies a reference to the autonomous systems (AS) that the IP address belongs to. id: Optional\[str] Link to this property country: Optional\[str] Link to this property description: Optional\[str] Link to this property
type: Optional\[Literal\["hosting\_provider", "isp", "organization"]] Infrastructure type of this ASN. One of the following: "hosting\_provider" Link to this property "isp" Link to this property "organization" Link to this property
Link to this property value: Optional\[str] Link to this property
Link to this property ip: Optional\[str] formatipv4 Link to this property
risk\_types: Optional\[List\[RiskType]] id: Optional\[float] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[float] Link to this property
Link to this property
[Link to this property](<#(resource)%20intel.ips%20%3E%20(model)%20ip%20%3E%20(schema)>)
Optional\[List\[IP]]
belongs\_to\_ref: Optional\[BelongsToRef] Specifies a reference to the autonomous systems (AS) that the IP address belongs to. id: Optional\[str] Link to this property country: Optional\[str] Link to this property description: Optional\[str] Link to this property
type: Optional\[Literal\["hosting\_provider", "isp", "organization"]] Infrastructure type of this ASN. One of the following: "hosting\_provider" Link to this property "isp" Link to this property "organization" Link to this property
Link to this property value: Optional\[str] Link to this property
Link to this property ip: Optional\[str] formatipv4 Link to this property
risk\_types: Optional\[List\[RiskType]] id: Optional\[float] Link to this property name: Optional\[str] Link to this property super\_category\_id: Optional\[float] Link to this property
Link to this property
[Link to this property](<#(resource)%20intel.ips%20%3E%20(model)%20ip_get_response%20%3E%20(schema)>) #### IntelIP Lists ##### ModelsExpand Collapse
class IPList: … id: Optional\[int] Link to this property description: Optional\[str] Link to this property name: Optional\[str] Link to this property
[Link to this property](<#(resource)%20intel.ip_lists%20%3E%20(model)%20ip_list%20%3E%20(schema)>) #### IntelMiscategorizations ##### [Create Miscategorization](https://developers.cloudflare.com/api/python/resources/intel/subresources/miscategorizations/methods/create) intel.miscategorizations.create(MiscategorizationCreateParams\*\*kwargs) -> [MiscategorizationCreateResponse]() POST/accounts/{account\_id}/intel/miscategorization ##### ModelsExpand Collapse
class MiscategorizationCreateResponse: …
errors: List\[Error] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[ErrorSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property
messages: List\[Message] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[MessageSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property success: Literal\[true] Whether the API call was successful. Link to this property
[Link to this property](<#(resource)%20intel.miscategorizations%20%3E%20(model)%20miscategorization_create_response%20%3E%20(schema)>) #### IntelWhois ##### [Get WHOIS Record](https://developers.cloudflare.com/api/python/resources/intel/subresources/whois/methods/get) intel.whois.get(WhoisGetParams\*\*kwargs) -> [WhoisGetResponse]() GET/accounts/{account\_id}/intel/whois ##### ModelsExpand Collapse
class Whois: … created\_date: Optional\[date] formatdate Link to this property domain: Optional\[str] Link to this property nameservers: Optional\[List\[str]] Link to this property registrant: Optional\[str] Link to this property registrant\_country: Optional\[str] Link to this property registrant\_email: Optional\[str] Link to this property registrant\_org: Optional\[str] Link to this property registrar: Optional\[str] Link to this property updated\_date: Optional\[date] formatdate Link to this property
[Link to this property](<#(resource)%20intel.whois%20%3E%20(model)%20whois%20%3E%20(schema)>)
class WhoisGetResponse: … dnssec: bool Link to this property domain: str Link to this property extension: str Link to this property found: bool Link to this property nameservers: List\[str] Link to this property punycode: str Link to this property registrant: str Link to this property registrar: str Link to this property id: Optional\[str] Link to this property administrative\_city: Optional\[str] Link to this property administrative\_country: Optional\[str] Link to this property administrative\_email: Optional\[str] Link to this property administrative\_fax: Optional\[str] Link to this property administrative\_fax\_ext: Optional\[str] Link to this property administrative\_id: Optional\[str] Link to this property administrative\_name: Optional\[str] Link to this property administrative\_org: Optional\[str] Link to this property administrative\_phone: Optional\[str] Link to this property administrative\_phone\_ext: Optional\[str] Link to this property administrative\_postal\_code: Optional\[str] Link to this property administrative\_province: Optional\[str] Link to this property administrative\_referral\_url: Optional\[str] Link to this property administrative\_street: Optional\[str] Link to this property billing\_city: Optional\[str] Link to this property billing\_country: Optional\[str] Link to this property billing\_email: Optional\[str] Link to this property billing\_fax: Optional\[str] Link to this property billing\_fax\_ext: Optional\[str] Link to this property billing\_id: Optional\[str] Link to this property billing\_name: Optional\[str] Link to this property billing\_org: Optional\[str] Link to this property billing\_phone: Optional\[str] Link to this property billing\_phone\_ext: Optional\[str] Link to this property billing\_postal\_code: Optional\[str] Link to this property billing\_province: Optional\[str] Link to this property billing\_referral\_url: Optional\[str] Link to this property billing\_street: Optional\[str] Link to this property created\_date: Optional\[datetime] formatdate-time Link to this property created\_date\_raw: Optional\[str] Link to this property expiration\_date: Optional\[datetime] formatdate-time Link to this property expiration\_date\_raw: Optional\[str] Link to this property registrant\_city: Optional\[str] Link to this property registrant\_country: Optional\[str] Link to this property registrant\_email: Optional\[str] Link to this property registrant\_fax: Optional\[str] Link to this property registrant\_fax\_ext: Optional\[str] Link to this property registrant\_id: Optional\[str] Link to this property registrant\_name: Optional\[str] Link to this property registrant\_org: Optional\[str] Link to this property registrant\_phone: Optional\[str] Link to this property registrant\_phone\_ext: Optional\[str] Link to this property registrant\_postal\_code: Optional\[str] Link to this property registrant\_province: Optional\[str] Link to this property registrant\_referral\_url: Optional\[str] Link to this property registrant\_street: Optional\[str] Link to this property registrar\_city: Optional\[str] Link to this property registrar\_country: Optional\[str] Link to this property registrar\_email: Optional\[str] Link to this property registrar\_fax: Optional\[str] Link to this property registrar\_fax\_ext: Optional\[str] Link to this property registrar\_id: Optional\[str] Link to this property registrar\_name: Optional\[str] Link to this property registrar\_org: Optional\[str] Link to this property registrar\_phone: Optional\[str] Link to this property registrar\_phone\_ext: Optional\[str] Link to this property registrar\_postal\_code: Optional\[str] Link to this property registrar\_province: Optional\[str] Link to this property registrar\_referral\_url: Optional\[str] Link to this property registrar\_street: Optional\[str] Link to this property status: Optional\[List\[str]] Link to this property technical\_city: Optional\[str] Link to this property technical\_country: Optional\[str] Link to this property technical\_email: Optional\[str] Link to this property technical\_fax: Optional\[str] Link to this property technical\_fax\_ext: Optional\[str] Link to this property technical\_id: Optional\[str] Link to this property technical\_name: Optional\[str] Link to this property technical\_org: Optional\[str] Link to this property technical\_phone: Optional\[str] Link to this property technical\_phone\_ext: Optional\[str] Link to this property technical\_postal\_code: Optional\[str] Link to this property technical\_province: Optional\[str] Link to this property technical\_referral\_url: Optional\[str] Link to this property technical\_street: Optional\[str] Link to this property updated\_date: Optional\[datetime] formatdate-time Link to this property updated\_date\_raw: Optional\[str] Link to this property whois\_server: Optional\[str] Link to this property
[Link to this property](<#(resource)%20intel.whois%20%3E%20(model)%20whois_get_response%20%3E%20(schema)>) #### IntelURLs ##### [Get URL Intelligence](https://developers.cloudflare.com/api/python/resources/intel/subresources/urls/methods/get) intel.urls.get(URLGetParams\*\*kwargs) -> [URL]() GET/accounts/{account\_id}/intel/url ##### ModelsExpand Collapse
class URL: …
content\_categories: List\[ContentCategory] Content categories associated with this URL. id: Optional\[int] Link to this property name: Optional\[str] Link to this property source\_id: Optional\[int] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property full\_url: str The full URL that was looked up. Link to this property hostname: str The hostname of the URL. Link to this property
risk\_type: List\[RiskType] Security risk types associated with this URL. id: Optional\[int] Link to this property name: Optional\[str] Link to this property source\_id: Optional\[int] Link to this property super\_category\_id: Optional\[int] Link to this property
Link to this property url\_path: str The path component of the URL. Link to this property
[Link to this property](<#(resource)%20intel.urls%20%3E%20(model)%20url%20%3E%20(schema)>) #### IntelIndicator Feeds ##### [Get indicator feeds owned by this account](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/methods/list) intel.indicator\_feeds.list(IndicatorFeedListParams\*\*kwargs) -> SyncSinglePage\[[IndicatorFeedListResponse]()] GET/accounts/{account\_id}/intel/indicator-feeds ##### [Get indicator feed metadata](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/methods/get) intel.indicator\_feeds.get(intfeed\_id, IndicatorFeedGetParams\*\*kwargs) -> [IndicatorFeedGetResponse]() GET/accounts/{account\_id}/intel/indicator-feeds/{feed\_id} ##### [Create new indicator feed](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/methods/create) intel.indicator\_feeds.create(IndicatorFeedCreateParams\*\*kwargs) -> [IndicatorFeedCreateResponse]() POST/accounts/{account\_id}/intel/indicator-feeds ##### [Update indicator feed metadata](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/methods/update) intel.indicator\_feeds.update(intfeed\_id, IndicatorFeedUpdateParams\*\*kwargs) -> [IndicatorFeedUpdateResponse]() PUT/accounts/{account\_id}/intel/indicator-feeds/{feed\_id} ##### [Get indicator feed data](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/methods/data) intel.indicator\_feeds.data(intfeed\_id, IndicatorFeedDataParams\*\*kwargs) -> [IndicatorFeedDataResponse]() GET/accounts/{account\_id}/intel/indicator-feeds/{feed\_id}/data ##### ModelsExpand Collapse
class IndicatorFeedListResponse: … id: Optional\[int] The unique identifier for the indicator feed Link to this property created\_on: Optional\[datetime] The date and time when the data entry was created formatdate-time Link to this property description: Optional\[str] The description of the example test Link to this property is\_attributable: Optional\[bool] Whether the indicator feed can be attributed to a provider Link to this property is\_downloadable: Optional\[bool] Whether the indicator feed can be downloaded Link to this property is\_public: Optional\[bool] Whether the indicator feed is exposed to customers Link to this property modified\_on: Optional\[datetime] The date and time when the data entry was last modified formatdate-time Link to this property name: Optional\[str] The name of the indicator feed Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds%20%3E%20(model)%20indicator_feed_list_response%20%3E%20(schema)>)
class IndicatorFeedGetResponse: … id: Optional\[int] The unique identifier for the indicator feed Link to this property created\_on: Optional\[datetime] The date and time when the data entry was created formatdate-time Link to this property description: Optional\[str] The description of the example test Link to this property is\_attributable: Optional\[bool] Whether the indicator feed can be attributed to a provider Link to this property is\_downloadable: Optional\[bool] Whether the indicator feed can be downloaded Link to this property is\_public: Optional\[bool] Whether the indicator feed is exposed to customers Link to this property
last\_upload\_summary: Optional\[LastUploadSummary] Summary of indicator counts from the last successful upload to this feed. Populated by the custom-threat-feeds loader at the end of each successful load. Absent (omitted) when no upload has completed successfully or the upload errored before the summary write. Surfaces silent-failure paths so operators can see when their indicators were dropped (popularity allowlist, expired valid\_until, etc.) without reading loader logs.
persisted: Optional\[LastUploadSummaryPersisted] Net delta applied to feed indicators by this upload. Snapshot uploads emit both \*\_added and \*\_removed; delta-add emits only \*\_added; delta-remove emits only \*\_removed. domains\_added: Optional\[int] Link to this property domains\_removed: Optional\[int] Link to this property ips\_added: Optional\[int] Link to this property ips\_removed: Optional\[int] Link to this property urls\_added: Optional\[int] Link to this property urls\_removed: Optional\[int] Link to this property
Link to this property
skipped: Optional\[LastUploadSummarySkipped] Counts of indicators that were uploaded but did not reach QuickSilver, broken down by reason. allowlisted\_domains: Optional\[int] Domains filtered by the global popularity allowlist at QS provisioning time. Popular domains (bing.com, naver.com, etc.) are protected from custom-threat-feed enforcement. Link to this property expired\_indicators: Optional\[int] Indicators in the upload whose valid\_until is already in the past. These are not added to QS; the expiration cron handles cleanup. Link to this property invalid\_indicators: Optional\[int] Reserved for future use. Currently always 0 — the unifier aborts the entire upload on a single bad indicator. Link to this property
Link to this property
uploaded: Optional\[LastUploadSummaryUploaded] Indicator counts from the unified file the loader received domains: Optional\[int] Number of domain indicators in the upload Link to this property ips: Optional\[int] Number of IP indicators in the upload Link to this property urls: Optional\[int] Number of URL indicators in the upload Link to this property
Link to this property
Link to this property latest\_upload\_error: Optional\[str] Human-readable error message describing why the latest upload failed. Populated only when latest_upload_status is Error. Returns one of a small fixed set of category-level messages (invalid domain / IP / URL entries, malformed row or header, invalid valid\_until timestamp, etc.) or the generic Upload failed for unknown or infrastructure-level errors. Never echoes raw error text from the underlying loader. Intel accounts receive the verbatim loader/API error text (including specific offending values) instead of these category-level messages. Link to this property
latest\_upload\_status: Optional\[Literal\["Mirroring", "Unifying", "Loading", 3 more]] Status of the latest snapshot uploaded One of the following: "Mirroring" Link to this property "Unifying" Link to this property "Loading" Link to this property "Provisioning" Link to this property "Complete" Link to this property "Error" Link to this property
Link to this property modified\_on: Optional\[datetime] The date and time when the data entry was last modified formatdate-time Link to this property name: Optional\[str] The name of the indicator feed Link to this property provider\_id: Optional\[int] The unique identifier for the provider Link to this property provider\_name: Optional\[str] The provider of the indicator feed Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds%20%3E%20(model)%20indicator_feed_get_response%20%3E%20(schema)>)
class IndicatorFeedCreateResponse: … id: Optional\[int] The unique identifier for the indicator feed Link to this property created\_on: Optional\[datetime] The date and time when the data entry was created formatdate-time Link to this property description: Optional\[str] The description of the example test Link to this property is\_attributable: Optional\[bool] Whether the indicator feed can be attributed to a provider Link to this property is\_downloadable: Optional\[bool] Whether the indicator feed can be downloaded Link to this property is\_public: Optional\[bool] Whether the indicator feed is exposed to customers Link to this property modified\_on: Optional\[datetime] The date and time when the data entry was last modified formatdate-time Link to this property name: Optional\[str] The name of the indicator feed Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds%20%3E%20(model)%20indicator_feed_create_response%20%3E%20(schema)>)
class IndicatorFeedUpdateResponse: … id: Optional\[int] The unique identifier for the indicator feed Link to this property created\_on: Optional\[datetime] The date and time when the data entry was created formatdate-time Link to this property description: Optional\[str] The description of the example test Link to this property is\_attributable: Optional\[bool] Whether the indicator feed can be attributed to a provider Link to this property is\_downloadable: Optional\[bool] Whether the indicator feed can be downloaded Link to this property is\_public: Optional\[bool] Whether the indicator feed is exposed to customers Link to this property modified\_on: Optional\[datetime] The date and time when the data entry was last modified formatdate-time Link to this property name: Optional\[str] The name of the indicator feed Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds%20%3E%20(model)%20indicator_feed_update_response%20%3E%20(schema)>) str [Link to this property](<#(resource)%20intel.indicator_feeds%20%3E%20(model)%20indicator_feed_data_response%20%3E%20(schema)>) #### IntelIndicator FeedsSnapshots ##### [Update indicator feed data](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/subresources/snapshots/methods/update) intel.indicator\_feeds.snapshots.update(intfeed\_id, SnapshotUpdateParams\*\*kwargs) -> [SnapshotUpdateResponse]() PUT/accounts/{account\_id}/intel/indicator-feeds/{feed\_id}/snapshot ##### ModelsExpand Collapse
class SnapshotUpdateResponse: … file\_id: Optional\[int] Feed id Link to this property filename: Optional\[str] Name of the file unified in our system Link to this property poll\_url: Optional\[str] Account-relative polling path. Prepend /accounts/{account_id} using the same account identifier and API host as the upload request. The path omits the account segment because the service does not have your account identifier in this context. Link to this property status: Optional\[str] Current status of the upload at the moment the request returned. This is NOT a terminal state: the file is unified inline, but the durable loader has only accepted it, so the upload is still Unifying. Poll poll_url until the status reaches a terminal value (Unified or Error). Link to this property upload\_id: Optional\[int] Identifier of the upload row, for polling this upload to a terminal state via poll_url. formatint64 Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds.snapshots%20%3E%20(model)%20snapshot_update_response%20%3E%20(schema)>) #### IntelIndicator FeedsPermissions ##### [List indicator feed permissions](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/subresources/permissions/methods/list) intel.indicator\_feeds.permissions.list(PermissionListParams\*\*kwargs) -> [PermissionListResponse]() GET/accounts/{account\_id}/intel/indicator-feeds/permissions/view ##### [Grant permission to indicator feed](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/subresources/permissions/methods/create) intel.indicator\_feeds.permissions.create(PermissionCreateParams\*\*kwargs) -> [PermissionCreateResponse]() PUT/accounts/{account\_id}/intel/indicator-feeds/permissions/add ##### [Revoke permission to indicator feed](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds/subresources/permissions/methods/delete) intel.indicator\_feeds.permissions.delete(PermissionDeleteParams\*\*kwargs) -> [PermissionDeleteResponse]() PUT/accounts/{account\_id}/intel/indicator-feeds/permissions/remove ##### ModelsExpand Collapse
List\[PermissionListResponseItem] id: Optional\[int] The unique identifier for the indicator feed Link to this property description: Optional\[str] The description of the example test Link to this property is\_attributable: Optional\[bool] Whether the indicator feed can be attributed to a provider Link to this property is\_downloadable: Optional\[bool] Whether the indicator feed can be downloaded Link to this property is\_public: Optional\[bool] Whether the indicator feed is exposed to customers Link to this property name: Optional\[str] The name of the indicator feed Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds.permissions%20%3E%20(model)%20permission_list_response%20%3E%20(schema)>)
class PermissionCreateResponse: … success: Optional\[bool] Whether the update succeeded or not Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds.permissions%20%3E%20(model)%20permission_create_response%20%3E%20(schema)>)
class PermissionDeleteResponse: … success: Optional\[bool] Whether the update succeeded or not Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds.permissions%20%3E%20(model)%20permission_delete_response%20%3E%20(schema)>) #### IntelIndicator FeedsDownloads #### IntelSinkholes ##### [List sinkholes owned by this account](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/methods/list) intel.sinkholes.list(SinkholeListParams\*\*kwargs) -> SyncSinglePage\[[Sinkhole]()] GET/accounts/{account\_id}/intel/sinkholes ##### [Get a sinkhole](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/methods/get) intel.sinkholes.get(strsinkhole\_id, SinkholeGetParams\*\*kwargs) -> [Sinkhole]() GET/accounts/{account\_id}/intel/sinkholes/{sinkhole\_id} ##### [Create a new sinkhole for your account](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/methods/create) intel.sinkholes.create(SinkholeCreateParams\*\*kwargs) -> [Sinkhole]() POST/accounts/{account\_id}/intel/sinkholes ##### [Update a sinkhole](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/methods/update) intel.sinkholes.update(strsinkhole\_id, SinkholeUpdateParams\*\*kwargs) -> object PUT/accounts/{account\_id}/intel/sinkholes/{sinkhole\_id} ##### [Delete a sinkhole](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/methods/delete) intel.sinkholes.delete(strsinkhole\_id, SinkholeDeleteParams\*\*kwargs) -> object DELETE/accounts/{account\_id}/intel/sinkholes/{sinkhole\_id} ##### ModelsExpand Collapse
class Sinkhole: … id: Optional\[str] The unique identifier for the sinkhole. Link to this property account\_tag: Optional\[str] The account tag that owns this sinkhole. Link to this property created\_on: Optional\[datetime] The date and time when the sinkhole was created. formatdate-time Link to this property modified\_on: Optional\[datetime] The date and time when the sinkhole was last modified. formatdate-time Link to this property name: Optional\[str] The name of the sinkhole. Link to this property r2\_bucket: Optional\[str] The name of the R2 bucket to store results. Link to this property r2\_id: Optional\[str] The id of the R2 instance. Link to this property
[Link to this property](<#(resource)%20intel.sinkholes%20%3E%20(model)%20sinkhole%20%3E%20(schema)>) #### IntelSinkholesIngresses ##### [Create an ingress rule](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/subresources/ingresses/methods/create) intel.sinkholes.ingresses.create(strsinkhole\_id, IngressCreateParams\*\*kwargs) -> [IngressCreateResponse]() POST/zones/{zone\_id}/intel/sinkholes/{sinkhole\_id}/ingresses ##### [Get an ingress rule](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/subresources/ingresses/methods/get) intel.sinkholes.ingresses.get(stringress\_id, IngressGetParams\*\*kwargs) -> [IngressGetResponse]() GET/zones/{zone\_id}/intel/sinkholes/{sinkhole\_id}/ingresses/{ingress\_id} ##### [Update an ingress rule](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/subresources/ingresses/methods/update) intel.sinkholes.ingresses.update(stringress\_id, IngressUpdateParams\*\*kwargs) -> object PUT/zones/{zone\_id}/intel/sinkholes/{sinkhole\_id}/ingresses/{ingress\_id} ##### [Delete an ingress rule](https://developers.cloudflare.com/api/python/resources/intel/subresources/sinkholes/subresources/ingresses/methods/delete) intel.sinkholes.ingresses.delete(stringress\_id, IngressDeleteParams\*\*kwargs) -> object DELETE/zones/{zone\_id}/intel/sinkholes/{sinkhole\_id}/ingresses/{ingress\_id} ##### ModelsExpand Collapse
class IngressCreateResponse: … id: Optional\[str] The unique identifier for the ingress rule. Link to this property cidr: Optional\[str] The CIDR block for the ingress rule. Link to this property created\_on: Optional\[datetime] The date and time when the ingress rule was created. formatdate-time Link to this property modified\_on: Optional\[datetime] The date and time when the ingress rule was last modified. formatdate-time Link to this property sinkhole\_id: Optional\[str] The sinkhole this ingress rule belongs to. Link to this property zone\_tag: Optional\[str] The zone tag associated with this ingress rule. Link to this property
[Link to this property](<#(resource)%20intel.sinkholes.ingresses%20%3E%20(model)%20ingress_create_response%20%3E%20(schema)>)
class IngressGetResponse: … id: Optional\[str] The unique identifier for the ingress rule. Link to this property cidr: Optional\[str] The CIDR block for the ingress rule. Link to this property created\_on: Optional\[datetime] The date and time when the ingress rule was created. formatdate-time Link to this property modified\_on: Optional\[datetime] The date and time when the ingress rule was last modified. formatdate-time Link to this property sinkhole\_id: Optional\[str] The sinkhole this ingress rule belongs to. Link to this property zone\_tag: Optional\[str] The zone tag associated with this ingress rule. Link to this property
[Link to this property](<#(resource)%20intel.sinkholes.ingresses%20%3E%20(model)%20ingress_get_response%20%3E%20(schema)>) #### IntelAttack Surface Report #### IntelAttack Surface ReportIssue Types ##### [Retrieves Security Center Issues Types](https://developers.cloudflare.com/api/python/resources/intel/subresources/attack_surface_report/subresources/issue_types/methods/get) intel.attack\_surface\_report.issue\_types.get(IssueTypeGetParams\*\*kwargs) -> SyncSinglePage\[[IssueTypeGetResponse]()] GET/accounts/{account\_id}/intel/attack-surface-report/issue-types ##### ModelsExpand Collapse str [Link to this property](<#(resource)%20intel.attack_surface_report.issue_types%20%3E%20(model)%20issue_type_get_response%20%3E%20(schema)>) #### IntelAttack Surface ReportIssues ##### [Retrieves Security Center Issues](https://developers.cloudflare.com/api/python/resources/intel/subresources/attack_surface_report/subresources/issues/methods/list) Deprecated intel.attack\_surface\_report.issues.list(IssueListParams\*\*kwargs) -> SyncV4PagePagination\[Optional\[IssueListResponse]] GET/accounts/{account\_id}/intel/attack-surface-report/issues ##### [Retrieves Security Center Issue Counts by Class](https://developers.cloudflare.com/api/python/resources/intel/subresources/attack_surface_report/subresources/issues/methods/class) Deprecated intel.attack\_surface\_report.issues.class\_(IssueClassParams\*\*kwargs) -> [IssueClassResponse]() GET/accounts/{account\_id}/intel/attack-surface-report/issues/class ##### [Retrieves Security Center Issue Counts by Severity](https://developers.cloudflare.com/api/python/resources/intel/subresources/attack_surface_report/subresources/issues/methods/severity) Deprecated intel.attack\_surface\_report.issues.severity(IssueSeverityParams\*\*kwargs) -> [IssueSeverityResponse]() GET/accounts/{account\_id}/intel/attack-surface-report/issues/severity ##### [Retrieves Security Center Issue Counts by Type](https://developers.cloudflare.com/api/python/resources/intel/subresources/attack_surface_report/subresources/issues/methods/type) Deprecated intel.attack\_surface\_report.issues.type(IssueTypeParams\*\*kwargs) -> [IssueTypeResponse]() GET/accounts/{account\_id}/intel/attack-surface-report/issues/type ##### ModelsExpand Collapse
Literal\["compliance\_violation", "email\_security", "exposed\_infrastructure", 3 more] One of the following: "compliance\_violation" Link to this property "email\_security" Link to this property "exposed\_infrastructure" Link to this property "insecure\_configuration" Link to this property "weak\_authentication" Link to this property "configuration\_suggestion" Link to this property
[Link to this property](<#(resource)%20intel.attack_surface_report.issues%20%3E%20(model)%20issue_type%20%3E%20(schema)>)
Literal\["low", "moderate", "critical"] One of the following: "low" Link to this property "moderate" Link to this property "critical" Link to this property
[Link to this property](<#(resource)%20intel.attack_surface_report.issues%20%3E%20(model)%20severity_query_param%20%3E%20(schema)>)
class IssueListResponse: … count: Optional\[int] Indicates the total number of results. Link to this property
issues: Optional\[List\[Issue]] id: Optional\[str] Link to this property dismissed: Optional\[bool] Link to this property has\_extended\_context: Optional\[bool] Indicates whether the insight has a large payload that requires fetching via the context endpoint. Link to this property issue\_class: Optional\[str] Link to this property issue\_type: Optional\[IssueType] Link to this property
payload: Optional\[IssuePayload] detection\_method: Optional\[str] Describes the method used to detect insight. Link to this property zone\_tag: Optional\[str] Link to this property
Link to this property resolve\_link: Optional\[str] Link to this property resolve\_text: Optional\[str] Link to this property
severity: Optional\[Literal\["Low", "Moderate", "Critical"]] One of the following: "Low" Link to this property "Moderate" Link to this property "Critical" Link to this property
Link to this property since: Optional\[datetime] formatdate-time Link to this property
status: Optional\[Literal\["active", "resolved"]] The current status of the insight. One of the following: "active" Link to this property "resolved" Link to this property
Link to this property subject: Optional\[str] Link to this property timestamp: Optional\[datetime] formatdate-time Link to this property
user\_classification: Optional\[Literal\["false\_positive", "accept\_risk", "other"]] User-defined classification for the insight. Can be ‘false\_positive’, ‘accept\_risk’, ‘other’, or null. One of the following: "false\_positive" Link to this property "accept\_risk" Link to this property "other" Link to this property
Link to this property
Link to this property page: Optional\[int] Specifies the current page within paginated list of results. Link to this property per\_page: Optional\[int] Sets the number of results per page of results. maximum1000 minimum1 Link to this property
[Link to this property](<#(resource)%20intel.attack_surface_report.issues%20%3E%20(model)%20issue_list_response%20%3E%20(schema)>)
List\[IssueClassResponseItem] count: Optional\[int] Link to this property value: Optional\[str] Link to this property
[Link to this property](<#(resource)%20intel.attack_surface_report.issues%20%3E%20(model)%20issue_class_response%20%3E%20(schema)>)
List\[IssueSeverityResponseItem] count: Optional\[int] Link to this property value: Optional\[str] Link to this property
[Link to this property](<#(resource)%20intel.attack_surface_report.issues%20%3E%20(model)%20issue_severity_response%20%3E%20(schema)>)
List\[IssueTypeResponseItem] count: Optional\[int] Link to this property value: Optional\[str] Link to this property
[Link to this property](<#(resource)%20intel.attack_surface_report.issues%20%3E%20(model)%20issue_type_response%20%3E%20(schema)>)