Skip to content

CyCAT.org API API

by cycat.org

No authHTTPSSecurity
Open documentation ↗

Overview

CyCAT - The Cybersecurity Resource Catalogue public API services.

CyCAT.org API is a security API from cycat.org. It needs no API key. It is served over HTTPS. Its OpenAPI description documents 14 endpoints.

At a glance

Authentication
No auth
HTTPS
Yes
CORS
Unknown
Category
Security
Version
0.9
Endpoints
14
Spec updated
2021-06-21

Endpoints

MethodPathWhat it does
GET/child/{uuid}Get child UUID(s) from a specified project or publisher UUID.
GET/generate/uuidGenerate an UUID version 4 RFC4122-compliant.
GET/infoGet information about the CyCAT backend services including status, overall statistics and version.
GET/list/project/{start}/{end}List projects registered in CyCAT by pagination (start,end).
GET/list/publisher/{start}/{end}List publishers registered in CyCAT by pagination (start,end).
GET/lookup/{uuid}Lookup UUID registered in CyCAT.
GET/namespace/finduuid/{namespace}/{namespaceid}Get all known UUID for a given namespace id.
GET/namespace/getallList all known namespaces.
GET/namespace/getid/{namespace}Get all ID from a given namespace.
GET/parent/{uuid}Get parent UUID(s) from a specified project or item UUID.
POST/proposePropose new resource to CyCAT.
GET/relationships/expanded/{uuid}Get relationship(s) UUID from a specified UUID including the relationships meta information.
GET/relationships/{uuid}Get relationship(s) UUID from a specified UUID.
GET/search/{searchquery}Full-text search in CyCAT and return matching UUID.

Questions

Does the CyCAT.org API API need an API key?

No. The CyCAT.org API API can be called without an API key or sign-up, which makes it handy for prototypes and front-end demos.

Does the CyCAT.org API API support HTTPS?

Yes, the CyCAT.org API API is served over HTTPS.

How many endpoints does the CyCAT.org API API have?

Its OpenAPI description lists 14 endpoints in version 0.9. All of them are shown on this page.

What are alternatives to the CyCAT.org API API?

Other Security APIs include Microsoft Security Response Center (MSRC), National Vulnerability Database, Cisco PSIRT openVuln API, Shodan, BitWarden.

Compare alternatives →

Microsoft Security Response Center (MSRC)

Security

Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)

No auth

National Vulnerability Database

Security

U.S. National Vulnerability Database

No auth

Cisco PSIRT openVuln API

Security

The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information). For more information about the Cisco PSIRT openVuln API visit https://developer.cisco.com/site/PSIRT/discover/overview For detail steps on how to use the API go to:https://developer.cisco.com/site/PSIRT/get-started/getting-started.gsp This is a beta release of a swagger YAML for the Cisco PSIRT openVuln API To access the API sign in with your Cisco CCO account at http://apiconsole.cisco.com and register an application to recieve a client_id and a client_secret You can then get your token using curl or any other method you prefer. 'curl -s -k -H "Content-Type: application/x-www-form-urlencoded" -X POST -d "client_id=<your_client_id>" -d "client_secret=<your_client_secret>" -d "grant_type=client_credentials" https://cloudsso.cisco.com/as/token.oauth2' You will receive an access token as demonstrated in the following example: '{"access_token":"I7omWtBDAieSiUX3shOxNJfuy4J6","token_type":"Bearer","expires_in":3599}' In Swagger, click on Change Authentication enter the text "I7omWtBDAieSiUX3shOxNJfuy4J6" (which is the token you received) then click on "Try this operation"

OAuth19 endpoints

Shodan

Security

Search engine for Internet connected devices

API key

BitWarden

Security

Best open-source password manager

OAuth

HaveIBeenPwned

Security

Passwords which have previously been exposed in data breaches

API key

Listed from APIs.guru (CC0).