---
title: "Active tropical cyclones (NOAA NHC)"
method: GET
path: "/api/v2/hazards/tropical-cyclones"
tags: ["Disasters & Hazards"]
---

# Active tropical cyclones (NOAA NHC)

`GET /api/v2/hazards/tropical-cyclones`

Currently active tropical cyclones (Atlantic + Eastern/Central Pacific) from the NOAA National Hurricane Center. Each storm carries the current center, max sustained wind, min pressure, movement, classification, and a Sugra-computed Saffir-Simpson category / severity. Filter by bounding box (on the storm center) or basin. The forecast cone/track geometry is deferred to a later version (area is null in v1). Empty off-season. Sugra retransmits; it is not an official advisory source.

## Query parameters

- `min_lat` number, nullable — Bounding-box south edge (on the storm center).
- `max_lat` number, nullable
- `min_lon` number, nullable
- `max_lon` number, nullable
- `basin` string, nullable — Filter by basin substring, case-insensitive (e.g. 'Atlantic').
- `limit` integer — Maximum storms returned (most recently updated first).

## Response `200`

Successful Response

- EnvelopeTropicalCycloneFeed
  - `data` TropicalCycloneFeed, required
    - `query` TropicalCycloneQuery, required
      - `min_lat` number, nullable
      - `max_lat` number, nullable
      - `min_lon` number, nullable
      - `max_lon` number, nullable
      - `basin` string, nullable — Filter by basin substring (case-insensitive).
      - `limit` integer, required
    - `total_matched` integer, required — Storms matching the filters BEFORE the limit.
    - `count` integer, required
    - `events` TropicalCycloneEvent[], required
      - `schema_version` string, required
      - `event_id` string, required
      - `event_type` string, required
      - `source_event_time` string, nullable
      - `updated_time` string, nullable
      - `geometry` HazardGeometry, required
        - `lat` number, nullable — Latitude, decimal degrees (WGS84). Null if the source omitted a location.
        - `lon` number, nullable — Longitude, decimal degrees (WGS84).
        - `depth_km` number, nullable — Hypocentre depth, kilometres.
      - `area` object, nullable — null in v1 - the forecast cone polygon is deferred to v1.1.
      - `place` string, nullable
      - `metrics` TropicalCycloneMetrics, required
        - `atcf_id` string, required — ATCF id (lowercase), persistent across advisories.
        - `name` string, nullable
        - `classification` string, nullable — NHC code: TD/TS/HU/STD/STS/PTC/PT/LO.
        - `basin` string, nullable — Atlantic / Eastern Pacific / Central Pacific.
        - `bin_number` string, nullable
        - `advisory_number` string, nullable
        - `max_wind_kt` number, nullable — Max sustained wind, knots.
        - `min_pressure_mb` number, nullable
        - `movement_dir_deg` number, nullable
        - `movement_speed_kt` number, nullable
        - `saffir_simpson_category` integer, nullable — 0-5, Sugra-computed from max wind (0 = sub-hurricane).
        - `public_advisory_url` string, nullable
        - `forecast_advisory_url` string, nullable
        - `track_cone_url` string, nullable — NHC forecast cone graphic (geometry deferred to v1.1).
        - `forecast_track_url` string, nullable
      - `severity` HazardSeverity, required — CAP-aligned severity block (OASIS Common Alerting Protocol vocabulary).
        - `severity` string, required — CAP severity: Extreme | Severe | Moderate | Minor | Unknown.
        - `certainty` string, required — CAP certainty. Earthquakes are Observed (the event happened).
        - `urgency` string, required — CAP urgency. Earthquakes are Past (an observed event, not a forward alert).
        - `derivation` string — 'native' (read verbatim from a CAP-native source) or 'sugra-computed' (derived by Sugra - carries no sovereign brand-shield).
      - `cap` object, nullable
      - `source` HazardEventSource, required
        - `institution` string, required
        - `tier` string, required — Sovereign (S) - named publicly.
        - `event_url` string, nullable — Upstream event page for full detail.
      - `disclaimer` string, required
    - `attribution` HazardAttributionSet, required
      - `sources` HazardSourceAttribution[] — Every sovereign source that contributed events.
        - `registry_key` string, required
        - `source_name` string, required
        - `licence` string, required
        - `citation` string, required
        - `disclaimer` string, required
      - `effective_reexport` string, required — Most-restrictive re-export verdict across the sources.
    - `disclaimer` string, required
    - `upstream` object
  - `meta` SugraMeta, required — Metadata attached to every /api/v1/* response envelope.
    - `endpoint` string, required — Requested endpoint path.
    - `data_time` string, required — ISO 8601 UTC timestamp of the source data, not of the request.
    - `response_time` string, required — ISO 8601 UTC timestamp when this response was produced.
    - `provider` string, required — API name and version.
    - `source` string, nullable — Identifier of the primary upstream source used for this response.
    - `attribution` string, nullable — Human-readable attribution mandated by an upstream source (e.g. a securities regulator or self-regulatory organization). Present only on responses whose source requires the owner and source to be clearly identified. Do not remove or alter it when using the response.
    - `fallback_used` boolean, nullable — True when the primary source failed and a fallback produced the data.
    - `fallback_chain` string[], nullable — Ordered list of sources attempted, in the order they were tried.
    - `cached` boolean, nullable — True when this response was served from the internal cache.
    - `stale` boolean, nullable — True when the cached response was returned after the upstream rate-limited or errored. Clients can use this to detect degraded data.

## Other responses

- `401` — Missing or invalid `x-api-key` header. JSON body with a stable `code` distinguishing `missing_api_key` (no header sent) from `invalid_api_key` (header sent, key not accepted); any other 401 source carries the generic `unauthorized` with its detail as `reason`. Plus `hint`. `plan` is always null on 401 - an unauthenticated request has no plan; quota exhaustion is 429, not 401.
- `422` — Validation Error
- `429` — Daily rate limit exceeded. Check `X-RateLimit-Reset` for the next window.
- `503` — Upstream source is temporarily unavailable. Retry after a short delay.

---

[API](https://skmtc.net/sugra/apis/sugra-api.md) · [All operations](https://skmtc.net/sugra/apis/sugra-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sugra/sugra-api/versions/d3e3d9c28132/schema)