---
title: "# CreateAction"
method: POST
path: "/v1/threat-library/actions"
tags: ["Threats"]
---

# # CreateAction

`POST /v1/threat-library/actions`

Creates custom actions with given arguments

## Request body

- object
  - `action_result` string
  - `affected_os` string[]
  - `affected_platform_ids` integer[]
  - `attack_module` string
  - `category` string
  - `description` string
  - `is_privileged` boolean
  - `is_sensitive_content` boolean
  - `keyword` string
  - `name` string
  - `play_processes` ProcessActionParams[] — in: body
    - `cond_name` integer — example 1, for P1
    - `is_blocked` string — example "true"
    - `process_id` integer — example 1000123
    - `rank` integer — example 1
  - `process_result` string
  - `remote_file_ids` integer[] — Remote file ids (from the file upload endpoint) to attach to the action
  - `rewind_processes` ProcessActionParams[] — in: body
    - `cond_name` integer — example 1, for P1
    - `is_blocked` string — example "true"
    - `process_id` integer — example 1000123
    - `rank` integer — example 1
  - `sources` string[]
  - `tactic_id` integer
  - `tags` string[]
  - `technique_id` integer
  - `title` string — in: body
  - `ukc_phase_id` integer
  - `url` string — in: body
  - `url_category` string
  - `use_case` string

## Response `200`

ActionCreateReturnResponse

- object
  - `action` CapiActionDTO
    - `created_at` string, date-time
    - `description` string
    - `display_id` integer
    - `id` integer
    - `name` string
    - `tags` string[]

## Other responses

- `422` — validationErrorSwagger is represents the erroneous cases
- `default` — genericErrorSwagger is represents the erroneous cases

---

[API](https://skmtc.net/picussecurity/apis/picus-rest-api.md) · [All operations](https://skmtc.net/picussecurity/apis/picus-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/picussecurity/picus-rest-api/versions/cb0d02ee28f8/schema)