Sign in

v1

latestOpenAPI 3.1.02026-07-244727109.8 KB
Custom Agents

Get a Custom Agent's rows

🚧 Alpha: Custom Agents is a new capability and still under active development. Endpoints, fields, and behavior may change without notice.

Returns the rows (one per tracked entity) and cell data for a single Custom Agent, paginated with count/continuation.

Find the id to use here from a customAgent-type item returned by GET /dashboards, and use that same item's schema.columns to interpret each row's cells.

get/custom-agents/{id}

Path parameters

idstring required

Id of the Custom Agent, from the id field of a customAgent item returned by GET /dashboards.

Query parameters

countinteger

Maximum number of rows to return in this page. Defaults to the platform's standard page size when omitted.

continuationstring

Continuation token from a previous response's continuation field. Include it to fetch the next page of rows; omit it to fetch the first page. See Understanding Continuation.

Response

A page of rows for this Custom Agent.

lastRefreshinteger required

EPOCH timestamp, in milliseconds, of the last time this agent's data was refreshed.

continuationstring

Present when more rows are available beyond this page. Pass it back as the continuation query parameter on your next request to GET /custom-agents/{id} to fetch the next page. Omitted on the last page.

Example response

{
  "items": [
    {
      "created": 1783541284792,
      "updated": 1783541284792,
      "id": "SCMBANKER",
      "cells": [
        {
          "entity": "SCMBANKER",
          "column": "Malware Category",
          "value": "Banker",
          "citations": [
            {
              "llmPredictionMatch": "[↗](https://thehackernews.com/2026/07/scmbanker-malware-uses-clickfix-lures.html#:~:text=A%20new%20banking,SCMBANKER%20.)",
              "citedText": "A new banking fraudulent operation is targeting customers of Mexican banks, fintech, payment processors, and cryptocurrency exchanges using ClickFix lures.",
              "entry": {
                "entryId": "7UmKRsN0d7peR76m42Icx5pdP/ltJWYFjUFipD0Y80Q=_19f43151a58:97baac7:fe7e62e0",
                "url": "https://thehackernews.com/2026/07/scmbanker-malware-uses-clickfix-lures.html"
              }
            }
          ]
        }
      ]
    }
  ],
  "lastRefresh": 1783539484792,
  "continuation": "WyIxOWY0MzU4M2ZiODoxZDM2NmU6MzBhZWZhMjAiLCJTQ01CQU5LRVIiXQ=="
}