API Documentation

Integrate Wiestell threat intelligence into your workflows

Getting Started

The Wiestell API provides programmatic access to our threat intelligence platform. Query IOCs, retrieve enrichment data, and integrate threat feeds into your security operations.

Base URL: https://api.wiestell.com/v1

Authentication

API requests require authentication using an API key. Include your key in the request headers:

Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

API keys can be generated from your dashboard after logging in.

API Endpoints

Available endpoints for IOC analysis and threat intelligence queries

GET/api/ioc/search

Search for an IOC across all threat intelligence feeds

GET /api/ioc/search?query=8.8.8.8&type=ip

Response:
{
  "ioc": "8.8.8.8",
  "type": "ip",
  "score": 15,
  "classification": "benign",
  "enrichments": {...}
}
GET/api/feeds

Retrieve list of available threat intelligence feeds

GET /api/feeds

Response:
{
  "feeds": [
    {
      "name": "AlienVault OTX",
      "status": "active",
      "last_updated": "2026-03-15T12:00:00Z"
    }
  ]
}
POST/api/enrichment

Request detailed enrichment data for an IOC

POST /api/enrichment
{
  "ioc": "example.com",
  "type": "domain"
}

Response:
{
  "whois": {...},
  "dns": {...},
  "geolocation": {...}
}

Rate Limits

Free tier: 1,000 requests per day

Registered users: 10,000 requests per day

Need higher limits? Contact us for enterprise access.

Complete Documentation

For complete API documentation, code examples, and SDKs, visit our developer portal or explore our interactive API playground.