Core REST API

Use Core REST APIs.

Utilities · Cortex REST API

Configuration parameters

  • url — Core Server URL (required)
  • creds_apikey — API Key ID
  • auth_method — Authentication method
  • marketplace_url — Base marketplace url
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • use_tenant — Use tenant

Commands (20)

  • core-api-delete

    send HTTP DELETE request.

  • core-api-download

    Download files from Core server.

  • core-api-file-attachment-delete

    Delete a file attachment from an incident — specifically from the incident’s file attachments.

  • core-api-file-check

    Check if the file exists in Cortex XSOAR (Context) by entry_id.

  • core-api-file-delete

    Delete a war room (investigation) file entry.

  • core-api-file-upload

    Upload to the incident a file that the user provided according to the entry_id or the content of the file.

  • core-api-get

    send HTTP GET requests.

  • core-api-install-packs

    Upload packs to the core server from the URL or marketplace.

  • core-api-multipart

    Send HTTP Multipart request to upload files to Core server.

  • core-api-post

    send HTTP POST request.

  • core-api-put

    send HTTP PUT request.

  • core-delete-incidents

    Delete Core incidents.

  • demisto-api-delete Deprecated

    Deprecated. Use core-api-delete instead.

  • demisto-api-download Deprecated

    Deprecated. Use core-api-download instead.

  • demisto-api-get Deprecated

    Deprecated. Use core-api-get instead.

  • demisto-api-install-packs Deprecated

    Deprecated. Use core-api-install-packs instead.

  • demisto-api-multipart Deprecated

    Deprecated. Use core-api-multipart instead.

  • demisto-api-post Deprecated

    Deprecated. Use core-api-post instead.

  • demisto-api-put Deprecated

    Deprecated. Use core-api-put instead.

  • demisto-delete-incidents Deprecated

    Deprecated. Use core-delete-incidents instead.