Retrieves the source object information for the specified threat data object.
Path Parameters
| Name | Type | Required | Description |
|---|---|---|---|
| id | string | required | Enter the ID of the source record. You can retrieve this ID using the List Source Details API. |
Query Parameters
| Name | Type | Required | Description |
|---|---|---|---|
| object_type | string | required | Pass the type of threat data object. To get the list of supported object types, see Supported SDO Types in Threat Data > Miscellaneous. Example, indicator. |
| page | string | optional | Pass the page number to retrieve records. |
| page_size | string | optional | Pass the number of records to retrieve on each page. |
Run it
Use the Request parameters panel to enter path IDs, query values, JSON body, and credentials. Then run any snippet below — all languages use the same values. Base URL: https://cs-testv2.cyware.com/ctixapi (change in API Settings).
Playground
Request parameters
Edit values here before running any snippet below (cURL, JavaScript, or Python). Code blocks are reference only — your inputs above are what gets sent.
Open API (HMAC signature) · Get credentials from Cyware Admin → Open API → Generate Credentials.
Signature and Expires are generated when you run a request. Access ID and Secret Key stay in memory for this tab only.
Credentials from Authentication auto-fill here for this product. If fields are empty after connecting, refresh this page or open the product docs again.
curl --request GET \
--url "https://cs-testv2.cyware.com/ctixapi/ingestion/threat-data/source-reference/97251976-10a0-42d4-ba58-41365204225f/?AccessID=%3Cyour%20access%20id%3E&Signature=%3Cyour%20signature%3E&Expires=%3Cyour%20expires%3E"View-only example — running live API calls requires a role with snippet testing access.
const url = "https://cs-testv2.cyware.com/ctixapi/ingestion/threat-data/source-reference/97251976-10a0-42d4-ba58-41365204225f/?AccessID=%3Cyour%20access%20id%3E&Signature=%3Cyour%20signature%3E&Expires=%3Cyour%20expires%3E";
const response = await fetch(url, {
method: "GET",
});
const text = await response.text();
let data;
try { data = JSON.parse(text); } catch { data = text; }
console.log(response.status, data);View-only example — running live API calls requires a role with snippet testing access.
import requests
url = "https://cs-testv2.cyware.com/ctixapi/ingestion/threat-data/source-reference/97251976-10a0-42d4-ba58-41365204225f/"
params = {
"AccessID": "<your access id>",
"Signature": "<your signature>",
"Expires": "<your expires>"
}
headers = {}
response = requests.request("GET", url, params=params, headers=headers)
print(response.status_code)
print(response.text)View-only example — running live API calls requires a role with snippet testing access.
{
"collection": {},
"confidence": "HIGH",
"created": 1641982441,
"ctix_created": 1641982444,
"ctix_modified": 1641982444,
"custom_attributes": [],
"description": "None",
"granular_markings": [],
"id": "ed19a2b7-b1b1-4c10-adf6-25b2e4790e06",
"kill_chain_phases": [
{}
],
"modified": 1641982441,
"pattern": [
"[email-addr:value = 'kiara59@mayer.net'] OR ([ipv6-addr:value = '3cdd:1115:aec:67b7:b23a:b311:330e:9bb6'])"
],
"pattern_type": "stix",
"pattern_version": [
"2.1"
],
"received_id": "indicator--b2c5372f-8d7b-40a0-a70b-689daa94b99c",
"sco_object_id": "382c30a8-f8cf-44f9-97c7-a4d43786fd5c",
"source": {},
"spec_version": "2.1",
"tags": [
{}
],
"types": {},
"unique_hash": "8388ee5a57bacf07ec3d889867b4612a",
"valid_from": 1608189525,
"valid_until": 1610399657
}View-only example — running live API calls requires a role with snippet testing access.