Cortex XSOAR 6 API

This is the public REST API to integrate with the Cortex XSOAR server. HTTP request can be sent using any HTTP-client.

For an example dedicated client take a look at:

Requests must include an API key, which can be generated in Cortex XSOAR under 'Settings & Info' -> 'Integrations' -> 'API Keys'

Optimistic Locking and Versioning:

When using the Cortex XSOAR REST API, ensure you are working on the latest version of the item (incident, entry, etc.) to avoid getting a database version error that will prevent you from overriding a newer item. To force a data override, you can pass 'version: -1'. This causes any newer data to be overridden.

Example request using 'curl'\:


curl 'https://hostname:443/incidents/search' -H 'content-type: application/json' -H 'accept: application/json' -H 'Authorization: ' --data-binary '{"filter":{"query":"-status:closed -category:job","period":{"by":"day","fromValue":7}}}' --compressed


Version: 6