--- title: Get indicator feed metadata --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [Intel](https://developers.cloudflare.com/api/python/resources/intel) [Indicator Feeds](https://developers.cloudflare.com/api/python/resources/intel/subresources/indicator_feeds) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Get indicator feed metadata intel.indicator\_feeds.get(intfeed\_id, IndicatorFeedGetParams\*\*kwargs) -> [IndicatorFeedGetResponse]() GET/accounts/{account\_id}/intel/indicator-feeds/{feed\_id} Retrieves details for a specific custom threat indicator feed. ##### Security API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**`X-Auth-Email: user@example.com` The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**`X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194` ##### Accepted Permissions (at least one required) `Intel Write``Intel Read` ##### ParametersExpand Collapse account\_id: str Identifier maxLength32 [Link to this property](<#(resource)%20intel.indicator_feeds%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>) feed\_id: int Indicator feed ID [Link to this property](<#(resource)%20intel.indicator_feeds%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20feed_id%20%3E%20(schema)>) ##### ReturnsExpand Collapse
class IndicatorFeedGetResponse: … id: Optional\[int] The unique identifier for the indicator feed Link to this property created\_on: Optional\[datetime] The date and time when the data entry was created formatdate-time Link to this property description: Optional\[str] The description of the example test Link to this property is\_attributable: Optional\[bool] Whether the indicator feed can be attributed to a provider Link to this property is\_downloadable: Optional\[bool] Whether the indicator feed can be downloaded Link to this property is\_public: Optional\[bool] Whether the indicator feed is exposed to customers Link to this property
last\_upload\_summary: Optional\[LastUploadSummary] Summary of indicator counts from the last successful upload to this feed. Populated by the custom-threat-feeds loader at the end of each successful load. Absent (omitted) when no upload has completed successfully or the upload errored before the summary write. Surfaces silent-failure paths so operators can see when their indicators were dropped (popularity allowlist, expired valid\_until, etc.) without reading loader logs.
persisted: Optional\[LastUploadSummaryPersisted] Net delta applied to feed indicators by this upload. Snapshot uploads emit both \*\_added and \*\_removed; delta-add emits only \*\_added; delta-remove emits only \*\_removed. domains\_added: Optional\[int] Link to this property domains\_removed: Optional\[int] Link to this property ips\_added: Optional\[int] Link to this property ips\_removed: Optional\[int] Link to this property urls\_added: Optional\[int] Link to this property urls\_removed: Optional\[int] Link to this property
Link to this property
skipped: Optional\[LastUploadSummarySkipped] Counts of indicators that were uploaded but did not reach QuickSilver, broken down by reason. allowlisted\_domains: Optional\[int] Domains filtered by the global popularity allowlist at QS provisioning time. Popular domains (bing.com, naver.com, etc.) are protected from custom-threat-feed enforcement. Link to this property expired\_indicators: Optional\[int] Indicators in the upload whose valid\_until is already in the past. These are not added to QS; the expiration cron handles cleanup. Link to this property invalid\_indicators: Optional\[int] Reserved for future use. Currently always 0 — the unifier aborts the entire upload on a single bad indicator. Link to this property
Link to this property
uploaded: Optional\[LastUploadSummaryUploaded] Indicator counts from the unified file the loader received domains: Optional\[int] Number of domain indicators in the upload Link to this property ips: Optional\[int] Number of IP indicators in the upload Link to this property urls: Optional\[int] Number of URL indicators in the upload Link to this property
Link to this property
Link to this property latest\_upload\_error: Optional\[str] Human-readable error message describing why the latest upload failed. Populated only when latest_upload_status is Error. Returns one of a small fixed set of category-level messages (invalid domain / IP / URL entries, malformed row or header, invalid valid\_until timestamp, etc.) or the generic Upload failed for unknown or infrastructure-level errors. Never echoes raw error text from the underlying loader. Intel accounts receive the verbatim loader/API error text (including specific offending values) instead of these category-level messages. Link to this property
latest\_upload\_status: Optional\[Literal\["Mirroring", "Unifying", "Loading", 3 more]] Status of the latest snapshot uploaded One of the following: "Mirroring" Link to this property "Unifying" Link to this property "Loading" Link to this property "Provisioning" Link to this property "Complete" Link to this property "Error" Link to this property
Link to this property modified\_on: Optional\[datetime] The date and time when the data entry was last modified formatdate-time Link to this property name: Optional\[str] The name of the indicator feed Link to this property provider\_id: Optional\[int] The unique identifier for the provider Link to this property provider\_name: Optional\[str] The provider of the indicator feed Link to this property
[Link to this property](<#(resource)%20intel.indicator_feeds%20%3E%20(model)%20indicator_feed_get_response%20%3E%20(schema)>) ### Get indicator feed metadata Python HTTPTypeScriptPythonGoTerraform ``` import os from cloudflare import Cloudflare client = Cloudflare( api_email=os.environ.get("CLOUDFLARE_EMAIL"), # This is the default and can be omitted api_key=os.environ.get("CLOUDFLARE_API_KEY"), # This is the default and can be omitted ) indicator_feed = client.intel.indicator_feeds.get( feed_id=12, account_id="023e105f4ecef8ad9ca31a8372d0c353", ) print(indicator_feed.id) ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": 1, "created_on": "2023-05-12T12:21:56.777653Z", "description": "example feed description", "is_attributable": false, "is_downloadable": false, "is_public": false, "last_upload_summary": { "persisted": { "domains_added": 2, "domains_removed": 1, "ips_added": 0, "ips_removed": 0, "urls_added": 0, "urls_removed": 0 }, "skipped": { "allowlisted_domains": 1, "expired_indicators": 0, "invalid_indicators": 0 }, "uploaded": { "domains": 3, "ips": 0, "urls": 0 } }, "latest_upload_error": "Feed contains one or more invalid domain entries. Check your feed for wildcards or other values that are not valid DNS names.", "latest_upload_status": "Complete", "modified_on": "2023-06-18T03:13:34.123321Z", "name": "example_feed_1", "provider_id": 1, "provider_name": "provider_name" } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": 1, "created_on": "2023-05-12T12:21:56.777653Z", "description": "example feed description", "is_attributable": false, "is_downloadable": false, "is_public": false, "last_upload_summary": { "persisted": { "domains_added": 2, "domains_removed": 1, "ips_added": 0, "ips_removed": 0, "urls_added": 0, "urls_removed": 0 }, "skipped": { "allowlisted_domains": 1, "expired_indicators": 0, "invalid_indicators": 0 }, "uploaded": { "domains": 3, "ips": 0, "urls": 0 } }, "latest_upload_error": "Feed contains one or more invalid domain entries. Check your feed for wildcards or other values that are not valid DNS names.", "latest_upload_status": "Complete", "modified_on": "2023-06-18T03:13:34.123321Z", "name": "example_feed_1", "provider_id": 1, "provider_name": "provider_name" } } ```