What this endpoint does

Enumerates all threat maps accessible to the current API token — call this first to discover which organizations and map types are available. Each result's organization.id (uhash format) is the orgId path parameter required by Malware Threat Map (Org) and Threat Actor Threat Map (Org). The url field is a complete relative API path ready to append to the base URL. The type field (actors or malware) indicates which endpoint family the map belongs to. For single-organization accounts, you can use the simpler Malware Threat Map or Threat Actor Threat Map endpoints instead.

Response data

Returns the full catalog of threat maps your token can access — one entry per organization-type combination. Each entry tells you the organization scope, the map type (actors vs. malware), and a ready-to-use relative path for fetching the actual threat map data. No pagination — all maps are returned in a single response.