API Documentation Moving
API documentation is now available at docs.recordedfuture.com. Bookmark the new site to access the latest documentation.
The Recorded Future Risk History API enables users to access the full Risk Score and Risk Rule history for all Risk Scored entities.
The API can be viewed at https://api.recordedfuture.com/risk.
To retrieve history, you must use the Recorded Future entity ID. You can look up the ID for entities using the Connect API. The Recorded Future entity ID and the desired date range are the only two inputs for API calls.
The response provides a date added and date removed line for both Risk Scores and Risk Rules:
Results are returned in chronological sequence by removal of either Risk Score or Risk Rule. The date removed constitutes when a previous score or Risk Rule was updated either due to a newly calculated Risk Score or due to the Risk Rule aging out based on the parameters associated with the Risk Rule. These parameters vary based on entity type and Risk Rule.
You can query for multiple entities simultaneously; however, due to the large amount of data, Recorded Future recommends making requests in batches of 1,000 entities or fewer.