CTIX
Network live
CTIXPOST

Create Task in Threat Data Object

Source docs
POSThttps://cs-testv2.cyware.com/ctixapi/ingestion/tasks/

Creates a task for the specified threat data object.

Body Parameters

NameTypeRequiredDescription
textstringrequired

Pass the description of the task to be performed.

prioritystringrequired

Pass the priority of the task.

statusstringrequired

Pass the status of the task.

typestringoptional

Pass the type of threat data object. To get the list of supported object types, see Supported SDO Types in Threat Data > Miscellaneous.

object_idstringrequired

Provide a valid Threat Data Object ID. You can retrieve this ID using the List Threat Data API under the Threat Data section. If an invalid ID is provided, the task will still be created as a global task, but will not be linked to any threat data object. In such cases, the task will appear under the Global Tasks module in Intel Exchange.

deadlineintegeroptional

Pass the deadline of the task in epoch format.

assigneestringrequired

Pass the ID of a user to assign the task. You can retrieve the user ID using the Get Users API.

closure_commentstringoptional

Pass the comment to close the task. Required if the status of the task is completed.

Run it

Use the Request parameters panel to enter path IDs, query values, JSON body, and credentials. Then run any snippet below — all languages use the same values. Base URL: https://cs-testv2.cyware.com/ctixapi (change in API Settings).

Playground

Request parameters

Edit values here before running any snippet below (cURL, JavaScript, or Python). Code blocks are reference only — your inputs above are what gets sent.

CTIXConnect to Intel ExchangeRequired to change data
Credentials required for POST

Open API (HMAC signature) · Get credentials from Cyware Admin → Open API → Generate Credentials.

Signature and Expires are generated when you run a request. Access ID and Secret Key stay in memory for this tab only.

Credentials from Authentication auto-fill here for this product. If fields are empty after connecting, refresh this page or open the product docs again.

Request body (JSON)Valid JSON
cURL
curl --request POST \
  --url "https://cs-testv2.cyware.com/ctixapi/ingestion/tasks/?AccessID=%3Cyour%20access%20id%3E&Signature=%3Cyour%20signature%3E&Expires=%3Cyour%20expires%3E" \
  --data '{
  "text": "Verify this indicator",
  "priority": "high",
  "status": "not_started",
  "type": "malware",
  "object_id": "00a26ec9-1490-4cd5-a659-c25525ffc238",
  "deadline": 1712296716,
  "assignee": "09c3ea4a-d258-456c-a57b-b4208d298089",
  "closure_comment": ""
}'

View-only example — running live API calls requires a role with snippet testing access.

JavaScript
const url = "https://cs-testv2.cyware.com/ctixapi/ingestion/tasks/?AccessID=%3Cyour%20access%20id%3E&Signature=%3Cyour%20signature%3E&Expires=%3Cyour%20expires%3E";

const response = await fetch(url, {
  method: "POST",
  headers: {},
  body: JSON.stringify({
    "text": "Verify this indicator",
    "priority": "high",
    "status": "not_started",
    "type": "malware",
    "object_id": "00a26ec9-1490-4cd5-a659-c25525ffc238",
    "deadline": 1712296716,
    "assignee": "09c3ea4a-d258-456c-a57b-b4208d298089",
    "closure_comment": ""
  }),
});

const text = await response.text();
let data;
try { data = JSON.parse(text); } catch { data = text; }
console.log(response.status, data);

View-only example — running live API calls requires a role with snippet testing access.

Python
import requests

url = "https://cs-testv2.cyware.com/ctixapi/ingestion/tasks/"
params = {
    "AccessID": "<your access id>",
    "Signature": "<your signature>",
    "Expires": "<your expires>"
}
headers = {}
payload = {
  "text": "Verify this indicator",
  "priority": "high",
  "status": "not_started",
  "type": "malware",
  "object_id": "00a26ec9-1490-4cd5-a659-c25525ffc238",
  "deadline": 1712296716,
  "assignee": "09c3ea4a-d258-456c-a57b-b4208d298089",
  "closure_comment": ""
}
response = requests.request("POST", url, params=params, headers=headers, json=payload)
print(response.status_code)
print(response.text)

View-only example — running live API calls requires a role with snippet testing access.

Request Body
{
  "text": "Verify this indicator",
  "priority": "high",
  "status": "not_started",
  "type": "malware",
  "object_id": "00a26ec9-1490-4cd5-a659-c25525ffc238",
  "deadline": 1712296716,
  "assignee": "09c3ea4a-d258-456c-a57b-b4208d298089",
  "closure_comment": ""
}

View-only example — running live API calls requires a role with snippet testing access.

Example Response
{
  "assignee": {},
  "closure_comment": {},
  "completed_on": {},
  "created": 1745501594,
  "created_by": {},
  "deadline": 1633393469,
  "id": "afdc5539-7f4b-4aaa-a2b0-e83c193ce646",
  "is_removed": 0,
  "meta_data": {},
  "modified": 1745501594,
  "object_id": "92686150-58e5-4f15-be64-f3e123efd825",
  "priority": "high",
  "status": "not_started",
  "text": "Verify this indicator",
  "type": "indicator"
}

View-only example — running live API calls requires a role with snippet testing access.