What this endpoint does

Retrieves lightweight identity metadata (name, type, aliases) for any Recorded Future entity given its internal RF entity ID. Use this to translate an opaque RF ID encountered in another API response back to a human-readable label. The id parameter must be an RF entity ID (e.g., kvXvR5) — it does not accept CVE strings, IP addresses, or domain names directly. To resolve a human-readable name to an RF entity ID, use Entity: Match first. For full enrichment data (risk scores, evidence, analyst notes), use the type-specific lookup endpoints (e.g., IP: Lookup, Vulnerability: Lookup) instead.

Response data

Returns the entity's identity — display name, known aliases, type classification, and whether it is flagged as a threat actor. This is a lightweight metadata lookup, not a full enrichment response. Always returns a single entity; no pagination.

200OK

401Unauthorized

404Entity not found