Fetch Data
Table of Contents
Guardrails & Prompts
1
POST /api/fetchThreatActors
Fetch guardrail actors (malicious sources) and their threat scores.
2
POST /api/fetchThreatApis
Retrieve Agentic components targeted by guardrails or malicious traffic.
3
POST /api/fetchThreatData
Fetch comprehensive Agentic Guardrail Activity and malicious attack data.
4
POST /api/fetchThreatTopNData
Get the top N Agentic Guardrail Activity or malicious activities by frequency or impact.
5
POST /api/fetchThreatCategoryCount
Get the count of Agentic Guardrails Policy Triggered events grouped by policy category.
6
POST /api/fetchThreatComplianceInfos
Retrieve Agentic Guardrails and threat compliance information.
7
POST /api/getIpReputationScore
Get the threat score for a specific IP address.
8
POST /api/fetchGuardrailPolicies
Fetch all configured Agentic Guardrails policies.
9
POST /api/fetchGuardrailData
Retrieve comprehensive Agentic Guardrails detection and response data.
10
POST /api/fetchAggregateMaliciousRequests
Fetch aggregated malicious Agentic Request data.
11
POST /api/getActorsCountPerCounty
Get the count of threat actors or malicious sources per country.
12
POST /api/getDailyThreatActorsCount
Retrieve the daily count of active Agentic Guardrails actors or malicious sources.
13
POST /api/fetchSessionContext
Fetch session context and metadata for Agentic Guardrails or malicious events.
14
POST /api/fetchSuspectSampleData
Fetch sample payloads from suspected malicious Agentic Requests.
15
POST /api/fetchCountBySeverity
Retrieve the count of Agentic Guardrails events grouped by severity level.
16
POST /api/fetchFiltersForThreatActors
Fetch filters for threat actors.
17
POST /api/fetchFiltersThreatTable
Fetch filters for threat detection table.
18
POST /api/fetchThreatActivityWebhookIntegration
Fetch Agentic Guardrail Activity webhook integration configuration.
19
POST /api/fetchThreatConfiguration
Fetch current threat detection configuration.
20
POST /api/fetchThreatsForActor
Fetch all threats detected for a specific actor.
21
POST /api/getThreatActivityTimeline
Get Agentic Guardrail Activity timeline for visualization.
22
POST /api/fetchCloudflareWafIntegration
Fetch Cloudflare WAF integration details.
23
POST /api/fetchAwsWafIntegration
Fetch AWS WAF integration details.
24
POST /api/fetchApiStats
Fetch Agentic Component statistics and metrics.
25
POST /api/fetchAdvancedFiltersForTraffic
Fetch all advanced traffic filters.
26
POST /api/getGuardrailTypes
Fetches all available guardrail types and their configurations.
27
POST /api/fetchAllPrompts
Fetches all saved system prompts and their configurations.
application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
0Example: 050Example: 20GUARDRAILPossible values: ACTIVEPossible values: ["HIGH","CRITICAL"]17120000001712100000Paginated guardrail activity events
Sample description
150POST /api/fetchSuspectSampleData HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 198
{
"skip": 0,
"limit": 20,
"label": "GUARDRAIL",
"statusFilter": "ACTIVE",
"severity": [
"HIGH",
"CRITICAL"
],
"ips": [
"text"
],
"urls": [
"text"
],
"hosts": [
"text"
],
"startTimestamp": 1712000000,
"endTimestamp": 1712100000
}Paginated guardrail activity events
{
"maliciousEvents": [
{
"id": "507f1f77bcf86cd799439011",
"endpoint": "/api/users",
"method": "POST",
"ip": "192.168.1.1",
"country": "US",
"host": "api.example.com",
"detectedAt": 1712000000,
"status": "ACTIVE",
"severity": "HIGH",
"subCategory": "PII_DETECTED"
}
],
"total": 150
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
0Example: 0507f1f77bcf86cd79943901117120000001712100000List of threat actors
Sample description
25507f1f77bcf86cd799439013POST /api/fetchThreatActors HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 121
{
"skip": 0,
"cursor": "507f1f77bcf86cd799439011",
"startTs": 1712000000,
"endTs": 1712100000,
"country": [
"text"
],
"host": [
"text"
]
}List of threat actors
{
"actors": [
{
"id": "507f1f77bcf86cd799439011",
"objectId": "507f1f77bcf86cd799439012",
"latestApiEndpoint": "/api/users",
"latestApiIp": "203.0.113.5",
"latestApiMethod": "POST",
"country": "US",
"latestSubcategory": "SQL_INJECTION",
"discoveredAt": 1712000000
}
],
"total": 25,
"cursor": "507f1f77bcf86cd799439013"
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
507f1f77bcf86cd799439011GUARDRAILPossible values: Event details with full payload
Sample description
POST /api/fetchAggregateMaliciousRequests HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 58
{
"eventId": "507f1f77bcf86cd799439011",
"label": "GUARDRAIL"
}Event details with full payload
{
"maliciousPayloadsResponses": [
{
"eventId": "507f1f77bcf86cd799439011",
"endpoint": "/api/users",
"method": "POST",
"requestPayload": "null",
"responsePayload": "null",
"blockedBy": "PII_DETECTION",
"detectedThreats": [
"text"
],
"timestamp": 1712000000
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
17120000001712100000Threat counts by severity
Sample description
POST /api/fetchCountBySeverity HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 41
{
"startTs": 1712000000,
"endTs": 1712100000
}Threat counts by severity
{
"categoryCounts": [
{
"displayName": "CRITICAL",
"count": 12
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
0Example: 017120000001712100000List of threatened APIs
Sample description
15POST /api/fetchThreatApis HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 50
{
"skip": 0,
"startTs": 1712000000,
"endTs": 1712100000
}List of threatened APIs
{
"apis": [
{
"endpoint": "/api/users",
"method": "POST",
"host": "api.example.com",
"actorsCount": 5,
"requestsCount": 25,
"discoveredAt": 1712000000
}
],
"total": 15
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
17120000001712100000Threat counts by category
Sample description
POST /api/fetchThreatCategoryCount HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 41
{
"startTs": 1712000000,
"endTs": 1712100000
}Threat counts by category
{
"categoryCounts": [
{
"displayName": "SQL Injection",
"subCategory": "SQL_INJECTION",
"count": 15
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
17120000001712100000Daily threat actor counts
Sample description
50758521POST /api/getDailyThreatActorsCount HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 41
{
"startTs": 1712000000,
"endTs": 1712100000
}Daily threat actor counts
{
"actorsCounts": [
{
"ts": 1712000000,
"totalActors": 10,
"criticalActors": 3
}
],
"totalAnalysed": 50,
"totalAttacks": 75,
"totalCriticalActors": 8,
"totalActiveStatus": 5,
"totalIgnoredStatus": 2,
"totalUnderReviewStatus": 1
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
17120000001712100000Threat actor counts per country
Sample description
POST /api/getActorsCountPerCounty HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 41
{
"startTs": 1712000000,
"endTs": 1712100000
}Threat actor counts per country
{
"actorsCountPerCountry": [
{
"code": "US",
"subCategoryWiseDataList": [
{
"subCategory": "SQL_INJECTION",
"activityCount": 5
}
]
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
nulldescription
Sample description
nullnullPOST /api/fetchRemediationInfo HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 18
{
"issueId": "null"
}description
{
"remediationInfo": "null",
"remediationCode": "null"
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
List of guardrail policies
Sample description
5POST /api/fetchGuardrailPolicies HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}List of guardrail policies
{
"guardrailPolicies": [
{
"_id": "507f1f77bcf86cd799439011",
"name": "PII Detection Policy",
"description": "Detect and block requests containing sensitive PII",
"severity": "HIGH",
"active": true,
"contextSource": "API",
"createdBy": "admin@example.com",
"createdTimestamp": 1712000000,
"updatedTimestamp": 1712100000,
"piiTypes": [
"text"
]
}
],
"total": 5
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
session-uuid-12345Extension Configtrueext-id-123api-key-valueCount of protected endpoints
Sample description
4210042POST /api/fetchSessionContext HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 146
{
"sessionId": "session-uuid-12345",
"name": "Extension Config",
"enabled": true,
"extensionId": "ext-id-123",
"apiKey": "api-key-value",
"configuration": {}
}Count of protected endpoints
{
"protectedApisCount": 42,
"totalApisCount": 100,
"percentageProtected": 42
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
17120000001712100000Consolidated threat metrics
Sample description
POST /api/fetchThreatData HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 55
{
"startTimestamp": 1712000000,
"endTimestamp": 1712100000
}Consolidated threat metrics
{
"response": {
"threatsBySeverity": {
"critical": 5,
"high": 12,
"medium": 8,
"low": 3,
"total": 28
},
"topThreatsByCategory": [
{}
],
"topAttackHosts": [
{}
],
"topBadActors": [
{}
]
}
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
17120000001712100000Consolidated guardrail metrics
Sample description
POST /api/fetchGuardrailData HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 55
{
"startTimestamp": 1712000000,
"endTimestamp": 1712100000
}Consolidated guardrail metrics
{
"response": {
"topGuardrailPolicies": [
{}
],
"dataProtectionTrends": [
{}
],
"avgThreatScore": 6.5,
"sensitiveCount": 45,
"successfulExploits": 3,
"complianceAtRisks": [
{}
],
"attackFlows": [
{}
]
}
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
17120000001712100000Top N threatened resources
Sample description
POST /api/fetchThreatTopNData HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 41
{
"startTs": 1712000000,
"endTs": 1712100000
}Top N threatened resources
{
"topApis": [
{
"endpoint": "/api/users",
"method": "POST",
"attacks": 25,
"severity": "HIGH"
}
],
"topHosts": [
{
"host": "api.example.com",
"attacks": 45
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
17120000001712100000Compliance-related threat data
Sample description
Compliance threat mapping data
POST /api/fetchThreatComplianceInfos HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 41
{
"startTs": 1712000000,
"endTs": 1712100000
}Compliance-related threat data
{
"threatComplianceInfos": [
{}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsSample description
203.0.113.5IP reputation information
Sample description
203.0.113.57.5HIGHPossible values: falseUSExample ISPPOST /api/getIpReputationScore HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 20
{
"ip": "203.0.113.5"
}IP reputation information
{
"ip": "203.0.113.5",
"reputationScore": 7.5,
"threatLevel": "HIGH",
"isBlacklisted": false,
"country": "US",
"isp": "Example ISP",
"threatTypes": [
"text"
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsThreat actor filters retrieved successfully
POST /api/fetchFiltersForThreatActors HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}Threat actor filters retrieved successfully
{
"actorFilters": [
{
"ip": "192.0.2.48",
"country": "IN",
"status": "active"
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsThreat table filters retrieved successfully
POST /api/fetchFiltersThreatTable HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}Threat table filters retrieved successfully
{
"filters": [
{
"id": "High4XXAlertFilter",
"name": "High 4XX Alert",
"category": "RL"
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsThreat activity webhook integration retrieved successfully
https://[YOUR_SYSTEM_DOMAIN]/webhooks/threat-activitytrue["ANOMALY_DETECTED","RATE_LIMIT_EXCEEDED","BOLA_DETECTED"]1672531200POST /api/fetchThreatActivityWebhookIntegration HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}Threat activity webhook integration retrieved successfully
{
"webhookUrl": "https://[YOUR_SYSTEM_DOMAIN]/webhooks/threat-activity",
"enabled": true,
"eventTypes": [
"ANOMALY_DETECTED",
"RATE_LIMIT_EXCEEDED",
"BOLA_DETECTED"
],
"createdAt": 1672531200
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsThreat configuration retrieved successfully
POST /api/fetchThreatConfiguration HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}Threat configuration retrieved successfully
{
"ratelimitConfig": {
"rules": [
{
"name": "Global Rate Limit Rule",
"period": 5,
"maxRequests": 100,
"mitigationPeriod": 5,
"action": "BLOCK",
"type": "DEFAULT",
"behaviour": "DYNAMIC"
}
]
}
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIs192.0.2.48Threats for actor retrieved successfully
POST /api/fetchThreatsForActor HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 22
{
"actor": "192.0.2.48"
}Threats for actor retrieved successfully
{
"threats": [
{
"_id": "4a3502a0-ab5f-4255-9628-aae3b0ef33bd",
"actor": "192.0.2.48",
"category": "RL",
"subCategory": "Rate Limiting",
"severity": "HIGH",
"detectedAt": 1672531200,
"type": "Anomaly"
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIs16725312001672531200Threat activity timeline retrieved successfully
994POST /api/getThreatActivityTimeline HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 45
{
"startTime": 1672531200,
"endTime": 1672531200
}Threat activity timeline retrieved successfully
{
"timeline": [
{
"timestamp": 1672531200,
"severity": "HIGH",
"threatCount": 5,
"category": "RL"
}
],
"totalThreatsDetected": 994
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsCloudflare WAF integration details retrieved successfully
POST /api/fetchCloudflareWafIntegration HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}Cloudflare WAF integration details retrieved successfully
{
"integrations": [
{
"integrationId": "cf_integration_123",
"zoneId": "[ZONE_ID_REDACTED]",
"status": "active",
"createdAt": 1672531200
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsAWS WAF integration details retrieved successfully
POST /api/fetchAwsWafIntegration HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}AWS WAF integration details retrieved successfully
{
"integrations": [
{
"integrationId": "aws_integration_456",
"region": "us-east-1",
"status": "active",
"lastSync": 1672531200
}
]
}application/jsonYOUR_API_KEY from Settings > Integrations > Akto APIsAdvanced filters retrieved successfully
54POST /api/fetchAdvancedFiltersForTraffic HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}Advanced filters retrieved successfully
{
"filters": [
{
"_id": "LocalFileInclusionLFIRFI",
"author": "AKTO",
"source": "AKTO_TEMPLATES",
"createdAt": 1672531200,
"inactive": false
}
],
"totalCount": 54
}Guardrail types retrieved successfully
Forbidden — caller lacks INTEGRATIONS / READ permission
POST /api/getGuardrailTypes HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}{
"guardrailTypes": [
{
"type": "cursor-hooks",
"displayName": "Cursor IDE Hooks",
"description": "Install Akto guardrails hooks for Cursor IDE"
},
{
"type": "openclaw-guardrails",
"displayName": "OpenClaw Guardrails",
"description": "Install MCP Endpoint Shield guardrails for OpenClaw (Clawdbot)",
"envVars": [
{
"name": "OPENAI_API_KEY",
"label": "OpenAI API Key",
"placeholder": "sk-xxxxx",
"required": "true"
},
{
"name": "ORIGINAL_PROVIDER",
"label": "Original Provider",
"placeholder": "openai/gpt-4o-mini",
"required": "true"
},
{
"name": "MODEL_ID",
"label": "Model ID",
"placeholder": "gpt-4o-mini",
"required": "true"
}
]
},
{
"type": "claude-cli-hooks",
"displayName": "Claude CLI Hooks",
"description": "Monitor and secure Claude AI CLI assistant"
}
]
}Prompt templates retrieved successfully
Forbidden — caller lacks SENSITIVE_DATA / READ permission or AI_AGENTS feature
POST /api/fetchAllPrompts HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2
{}{
"promptsObj": {
"customPrompts": {
"ANY_ADDITIONAL_PROPERTY": [
{
"label": "Block Prompt Injection",
"value": "custom-prompt-injection-v1",
"category": "Injection Attacks",
"inactive": false
}
]
},
"aktoPrompts": {
"ANY_ADDITIONAL_PROPERTY": [
{
"label": "Detect Jailbreak Attempts",
"value": "akto-jailbreak-detection-v2",
"category": "Jailbreak",
"inactive": false
}
]
},
"mapPromptToData": {
"ANY_ADDITIONAL_PROPERTY": {
"content": "id: detect-jailbreak\ninfo:\n name: Detect Jailbreak\n severity: HIGH\n...",
"category": "Jailbreak",
"name": "Detect Jailbreak Attempts",
"description": "Detects attempts to bypass AI safety guidelines",
"severity": "HIGH"
}
},
"mapIdtoPrompt": {
"akto-jailbreak-detection-v2": "Detect Jailbreak Attempts",
"custom-prompt-injection-v1": "Block Prompt Injection"
},
"totalCustomPrompts": 3,
"totalAktoPrompts": 12
}
}Last updated