ThreatMap documentation

ThreatMap aggregates configured cyber-intelligence providers through REST and MCP. The portal provides lookup, graphs, projects, monitors, and account settings.

New accounts see a dashboard checklist linking to their first lookup, API key, and monitor. Each step updates after the account saves that item.

Guides

• Quickstart: account, API key, and both MCP transports
• API reference
• Execution, providers, and scoring
• Credits and plan limits
• Security controls and workflow status
• Integration options and enterprise scope

Before calling the API

Verify your email, create a key, and submit one IOC per lookup. Successful IOC/CVE searches cost one base credit. BYOK removes source surcharges, not the base search charge. Providers need applicable configured credentials.

These guides describe implemented behavior. Integration availability and deployment health depend on configuration; planned capabilities are labeled separately.