v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1492497398.3 KB

Creates a new threat under a threat model job.

post/CreateThreat

Request body

agentSpaceIdstring required

The unique identifier of the agent space.

threatJobIdstring required

The unique identifier of the threat model job the threat belongs to.

titlestring

A short title summarizing the threat.

statementstring

The natural-language threat statement.

severity'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO'

Severity level for a threat.

commentsstring

Optional customer comment on the threat.

strideStrideCategory[]

List of STRIDE categories.

threatSourcestring

The actor or origin of the threat.

prerequisitesstring

The conditions required for the threat to be exploitable.

threatActionstring

What the threat source can do.

threatImpactstring

The direct consequence of the threat action.

impactedGoalString[]

The security goals affected by the threat.

impactedAssetsString[]

The specific assets affected by the threat.

recommendationstring

The recommended mitigation guidance for this threat.

Response

Success

threatIdstring required

The unique identifier of the created threat.

threatJobIdstring required

The unique identifier of the threat model job the threat belongs to.

titlestring

A short title summarizing the threat.

statementstring

The natural-language threat statement.

severity'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO'

The severity level of the threat.

status'OPEN' | 'RESOLVED' | 'DISMISSED'

The current status of the threat.

commentsstring

Optional customer comment on the threat.

strideStrideCategory[]

The STRIDE categories applicable to this threat.

threatSourcestring

The actor or origin of the threat.

prerequisitesstring

The conditions required for the threat to be exploitable.

threatActionstring

What the threat source can do.

threatImpactstring

The direct consequence of the threat action.

impactedGoalString[]

The security goals affected by the threat.

impactedAssetsString[]

The specific assets affected by the threat.

recommendationstring

The recommended mitigation guidance for this threat.

createdBy'CUSTOMER' | 'AGENT'

Who created this threat.

updatedBy'CUSTOMER' | 'AGENT'

Who last updated this threat.

createdAtstring date-time

The date and time the threat was created, in UTC format.

updatedAtstring date-time

The date and time the threat was last updated, in UTC format.