Endpoints principales de la API

Referencia rápida. Para el detalle completo con schemas, consultá el Swagger en https://platform.emate.cloud/docs.

Domains

GET    /v1/domains                    List
POST   /v1/domains                    Create
GET    /v1/domains/{id}               Detail
PATCH  /v1/domains/{id}               Update
DELETE /v1/domains/{id}               Delete
GET    /v1/domains/{id}/score-history  Serie temporal del score

Reports (DMARC)

GET    /v1/reports?domain={d}&from={ts}&to={ts}   List
GET    /v1/reports/{id}                            Detail
GET    /v1/reports/export?format=csv|json&...      Export bulk

Alerts

GET    /v1/alerts?status=open                    List
POST   /v1/alerts/{id}/ack                        Acknowledge
POST   /v1/alerts/{id}/resolve                    Resolve
POST   /v1/alerts/{id}/silence?duration=24h       Silence

Phishing (Human Risk Protection + captured reports)

POST   /v1/phishing/upload                        Upload .eml (multipart)
GET    /v1/phishing                               List
GET    /v1/phishing/{id}                          Detail (body + headers + enrichment)
PATCH  /v1/phishing/{id}                          Change status
POST   /v1/phishing/{id}/block-sender             Emit block order to SIEM
POST   /v1/phishing/{id}/detonate                 Detonate a URL via urlscan.io
POST   /v1/phishing/{id}/detonate/refresh         Re-poll verdict
GET    /v1/phishing/{id}/attachments              On-demand attachment analysis

Human Risk Protection — empleados

GET    /v1/awareness/sim/employees                 List
POST   /v1/awareness/sim/employees                 Create one
POST   /v1/awareness/sim/employees/import-csv      Bulk CSV
GET    /v1/awareness/sim/employees/{id}            Detail
PATCH  /v1/awareness/sim/employees/{id}            Update
DELETE /v1/awareness/sim/employees/{id}            Soft-delete
POST   /v1/awareness/sim/employees/{id}/opt-out    Opt-out
GET    /v1/awareness/sim/employees/{id}/signin-history  On-demand M365 sign-ins

Human Risk Protection — campaigns

GET    /v1/awareness/sim/campaigns                 List
POST   /v1/awareness/sim/campaigns                 Create (draft)
POST   /v1/awareness/sim/campaigns/{id}/send       Trigger send
GET    /v1/awareness/sim/campaigns/{id}/stats      Real-time stats

Threat Intel

GET    /v1/threats/iocs?type=domain&since=...      IOCs feed
GET    /v1/threats/iocs.stix2                      STIX 2.1
GET    /v1/threats/iocs.csv                        CSV
GET    /v1/threats/query?value={ioc}               Query específico

SSPM

GET    /v1/sspm/identities/users                     List users
GET    /v1/sspm/identities/users/{id}                Detail
GET    /v1/sspm/identities/groups                    List groups
GET    /v1/sspm/apps                                 OAuth apps
POST   /v1/sspm/apps/{id}/revoke                     Revoke consent
GET    /v1/sspm/inbox-rules                          Suspicious inbox rules
POST   /v1/sspm/inbox-rules/{id}/disable             Disable rule
GET    /v1/sspm/external-shares                      External shares

Audit

GET    /v1/audit/query?action={a}&from={ts}&to={ts}  Query
GET    /v1/audit/export                              Export bulk
GET    /v1/audit/verify?from={ts}&to={ts}            Verify hash chain integrity

Webhooks

GET    /v1/webhooks                                Configured webhooks
POST   /v1/webhooks                                Create
GET    /v1/webhooks/{id}/deliveries                Delivery history
POST   /v1/webhooks/{id}/redeliver/{delivery_id}   Re-send failed delivery

Acceso para partners

Los endpoints para operación delegada se habilitan únicamente en modalidades autorizadas. Su referencia técnica se entrega durante el onboarding del partner.

Query parameters comunes

• ?limit=<N> — límite de items. Default 50, max 500.
• ?cursor=<c> — paginación cursor-based.
• ?fields=id,name,score — selección de campos (algunos endpoints).
• ?format=json|csv|stix2 — formato de salida (donde aplique).

Content-Type

Todos los endpoints JSON aceptan y devuelven application/json. Excepciones:

• POST /v1/phishing/upload — multipart/form-data con field file.
• POST /v1/awareness/sim/employees/import-csv — multipart/form-data con field csv.
• GET /*.csv, GET /*.stix2 — devuelven text/csv o application/stix+json.