What this endpoint does

Retrieves all custom intelligence sources available in your account. Sources are organizational containers used to group related threat intelligence reports published through the Autonomous Threat Operations API. This endpoint is useful for discovering existing source IDs before publishing reports via the Publish Reports endpoint, or for auditing which sources have been created. The response includes all sources without pagination or filtering — use the Get Source endpoint if you need to retrieve a specific source by its UUID.

Response data

Returns a JSON array of source objects, each containing the source's UUID identifier, name, optional description, and creation/update timestamps. The id field from any source in this list can be used directly with the Publish Reports endpoint to publish reports under that source, or with the Get Source and Update Source endpoints for individual source management.