For the complete documentation index, see llms.txt. This page is also available as Markdown.
XSOAR 8 SaaSXSOAR 8x On-prem

Cortex XSOAR 8 API Changes

Review API changes for Cortex XSOAR 8 SaaS and Cortex XSOAR 8x On-prem.

The following table describes some of the API changes for Cortex XSOAR 8.

Feature
Comments

API Key

Standard and Advanced keys: You can create Standard or Advanced Keys (default is Advanced).

Standard keys can be used via CURL, and still require the key in the authorization header, but also require an additional header (x-xdr-auth-id) with the value of the key ID, if using a Standard key.

Advanced keys require a nonce to prevent replay attacks which is sent in headers.

API Structure

The API is now like Cortex XDR, where the API is not the server URL, but rather: api-{tenant}/public_api/v1/{name of api}/{name of call}.

Example of an old API Call with server URL: curl 'https://hostname:443/incidents/search'

Example of a new API Call with API URL: curl -X POST https://api-{fqdn}/xsoar/{name of api}/{name of call}/

Last updated

Was this helpful?