What this endpoint does

Returns the reference list of entity types that can appear in the Recorded Future Links graph. Use this before calling Links: Search to discover valid values for the entityTypes filter parameter. Each ID uses the format type:TypeName (e.g., type:IpAddress, type:Hash, type:MalwareSignature) — pass the full string including the type: prefix when filtering. The 14 supported types span indicators (IpAddress, Hash, InternetDomainName, URL, FileContent, MalwareSignature), threat context (Organization, Malware, MalwareCategory, AttackVector, MitreAttackIdentifier, Person, Username), and targets (Company, CyberVulnerability). No parameters required.

Response data

Returns the complete set of supported entity types in a single, non-paginated response. Use the id field (not name) as the filter value in Links Search.