For the complete documentation index, see llms.txt. This page is also available as Markdown.

Get started with Cortex Cloud APIs

Using the Cortex Cloud APIs, you can integrate Cortex Cloud with third-party apps or services to manage cloud security posture, investigate issues, and automate response actions programmatically. The APIs let you build integrations that extend Cortex Cloud across your cloud security workflows.

Before you can begin using Cortex Cloud APIs, you must generate the following items in Cortex Cloud:

Value
Description

API Key

The API Key is your unique identifier used as the Authorization:{key} header required for authenticating API calls. Depending on your desired security level, you can generate two types of API keys, Advanced or Standard, from Cortex.

API Key ID

The API Key ID is your unique token used to authenticate the API Key. The header used when running an API call is x-xdr-auth-id:{key_id}.

FQDN

The FQDN is a unique host and domain name associated with each tenant.

Cortex Cloud API URIs are made up of your tenant's FQDN, the API name, and endpoint path. For example, https://api-{fqdn}/xsiam/public/v1/{endpoint_path}/.

The following steps describe how to generate the necessary key values and run your first API call:

Last updated

Was this helpful?