CTIX
Network live
CTIXPOST

Bulk Note

Source docs
POSThttps://cs-testv2.cyware.com/ctixapi/ingestion/ingestion-api/bulk-notes/

Creates notes in bulk for multiple threat data objects.

Body Parameters

NameTypeRequiredDescription
typestringrequired

Pass the object type.

textstringrequired

Pass the note content to be added to the specified threat data objects.

object_idsarrayoptional

Pass the list of object UUIDs to which the note should be attached. To get the object_id, use the List Threat Data endpoint.

Run it

Use the Request parameters panel to enter path IDs, query values, JSON body, and credentials. Then run any snippet below — all languages use the same values. Base URL: https://cs-testv2.cyware.com/ctixapi (change in API Settings).

Playground

Request parameters

Edit values here before running any snippet below (cURL, JavaScript, or Python). Code blocks are reference only — your inputs above are what gets sent.

CTIXConnect to Intel ExchangeRequired to change data
Credentials required for POST

Open API (HMAC signature) · Get credentials from Cyware Admin → Open API → Generate Credentials.

Signature and Expires are generated when you run a request. Access ID and Secret Key stay in memory for this tab only.

Credentials from Authentication auto-fill here for this product. If fields are empty after connecting, refresh this page or open the product docs again.

Request body (JSON)Valid JSON
cURL
curl --request POST \
  --url "https://cs-testv2.cyware.com/ctixapi/ingestion/ingestion-api/bulk-notes/?AccessID=%3Cyour%20access%20id%3E&Signature=%3Cyour%20signature%3E&Expires=%3Cyour%20expires%3E" \
  --data '{
  "type": "threatdata",
  "text": "this is report description - demo",
  "object_ids": [
    "a4b77a74-4ed0-4def-8163-04dd27fd4229"
  ]
}'

View-only example — running live API calls requires a role with snippet testing access.

JavaScript
const url = "https://cs-testv2.cyware.com/ctixapi/ingestion/ingestion-api/bulk-notes/?AccessID=%3Cyour%20access%20id%3E&Signature=%3Cyour%20signature%3E&Expires=%3Cyour%20expires%3E";

const response = await fetch(url, {
  method: "POST",
  headers: {},
  body: JSON.stringify({
    "type": "threatdata",
    "text": "this is report description - demo",
    "object_ids": [
      "a4b77a74-4ed0-4def-8163-04dd27fd4229"
    ]
  }),
});

const text = await response.text();
let data;
try { data = JSON.parse(text); } catch { data = text; }
console.log(response.status, data);

View-only example — running live API calls requires a role with snippet testing access.

Python
import requests

url = "https://cs-testv2.cyware.com/ctixapi/ingestion/ingestion-api/bulk-notes/"
params = {
    "AccessID": "<your access id>",
    "Signature": "<your signature>",
    "Expires": "<your expires>"
}
headers = {}
payload = {
  "type": "threatdata",
  "text": "this is report description - demo",
  "object_ids": [
    "a4b77a74-4ed0-4def-8163-04dd27fd4229"
  ]
}
response = requests.request("POST", url, params=params, headers=headers, json=payload)
print(response.status_code)
print(response.text)

View-only example — running live API calls requires a role with snippet testing access.

Request Body
{
  "type": "threatdata",
  "text": "this is report description - demo",
  "object_ids": [
    "a4b77a74-4ed0-4def-8163-04dd27fd4229"
  ]
}

View-only example — running live API calls requires a role with snippet testing access.

Example Response
{
  "status": "SUCCESS",
  "message": "The provided note text has been applied to all valid objects."
}

View-only example — running live API calls requires a role with snippet testing access.