Referencia rápida. Para el detalle completo con schemas, consultá el Swagger en https://platform.emate.cloud/docs.
Domains
GET /v1/domains List
POST /v1/domains Create
GET /v1/domains/{id} Detail
PATCH /v1/domains/{id} Update
DELETE /v1/domains/{id} Delete
GET /v1/domains/{id}/score-history Serie temporal del score
Reports (DMARC)
GET /v1/reports?domain={d}&from={ts}&to={ts} List
GET /v1/reports/{id} Detail
GET /v1/reports/export?format=csv|json&... Export bulk
Alerts
GET /v1/alerts?status=open List
POST /v1/alerts/{id}/ack Acknowledge
POST /v1/alerts/{id}/resolve Resolve
POST /v1/alerts/{id}/silence?duration=24h Silence
Phishing (Awareness + captured reports)
POST /v1/phishing/upload Upload .eml (multipart)
GET /v1/phishing List
GET /v1/phishing/{id} Detail (body + headers + enrichment)
PATCH /v1/phishing/{id} Change status
POST /v1/phishing/{id}/block-sender Emit block order to SIEM
POST /v1/phishing/{id}/detonate Detonate a URL via urlscan.io
POST /v1/phishing/{id}/detonate/refresh Re-poll verdict
GET /v1/phishing/{id}/attachments On-demand attachment analysis
Awareness — empleados
GET /v1/awareness/sim/employees List
POST /v1/awareness/sim/employees Create one
POST /v1/awareness/sim/employees/import-csv Bulk CSV
GET /v1/awareness/sim/employees/{id} Detail
PATCH /v1/awareness/sim/employees/{id} Update
DELETE /v1/awareness/sim/employees/{id} Soft-delete
POST /v1/awareness/sim/employees/{id}/opt-out Opt-out
GET /v1/awareness/sim/employees/{id}/signin-history On-demand M365 sign-ins
Awareness — campaigns
GET /v1/awareness/sim/campaigns List
POST /v1/awareness/sim/campaigns Create (draft)
POST /v1/awareness/sim/campaigns/{id}/send Trigger send
GET /v1/awareness/sim/campaigns/{id}/stats Real-time stats
Threat Intel
GET /v1/threats/iocs?type=domain&since=... IOCs feed
GET /v1/threats/iocs.stix2 STIX 2.1
GET /v1/threats/iocs.csv CSV
GET /v1/threats/query?value={ioc} Query específico
SSPM
GET /v1/sspm/identities/users List users
GET /v1/sspm/identities/users/{id} Detail
GET /v1/sspm/identities/groups List groups
GET /v1/sspm/apps OAuth apps
POST /v1/sspm/apps/{id}/revoke Revoke consent
GET /v1/sspm/inbox-rules Suspicious inbox rules
POST /v1/sspm/inbox-rules/{id}/disable Disable rule
GET /v1/sspm/external-shares External shares
Audit
GET /v1/audit/query?action={a}&from={ts}&to={ts} Query
GET /v1/audit/export Export bulk
GET /v1/audit/verify?from={ts}&to={ts} Verify hash chain integrity
Webhooks
GET /v1/webhooks Configured webhooks
POST /v1/webhooks Create
GET /v1/webhooks/{id}/deliveries Delivery history
POST /v1/webhooks/{id}/redeliver/{delivery_id} Re-send failed delivery
MSSP (partner_admin)
GET /v1/mssp/clients List clients
GET /v1/mssp/clients/{id} Detail
POST /v1/mssp/clients Create client tenant
GET /v1/mssp/clients/{id}/summary Aggregated summary
Query parameters comunes
?limit=<N>— límite de items. Default 50, max 500.?cursor=<c>— paginación cursor-based.?fields=id,name,score— selección de campos (algunos endpoints).?format=json|csv|stix2— formato de salida (donde aplique).
Content-Type
Todos los endpoints JSON aceptan y devuelven application/json. Excepciones:
POST /v1/phishing/upload—multipart/form-datacon fieldfile.POST /v1/awareness/sim/employees/import-csv—multipart/form-datacon fieldcsv.GET /*.csv,GET /*.stix2— devuelventext/csvoapplication/stix+json.