Skip to content
Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
85
💰 Paid API

telesint-api.onrender.com

telesint-api.onrender.com · telesint-api.onrender.com

ASN threat intelligence from Telegram CTI channels. Pass ?asn=AS215540. Returns C2 framework associations, phishing kit links (Tycoon2FA, EvilProxy, NakedPages), threat actor mentions, bulletproof hosting indicators, blocking recommendation with WAF rule hint, and matching TeleSint record IDs for pivoting into /c2 or /ioc. Distinct from OT-Intel /ot/asn — angle is cybercriminal Telegram chatter about hosting infrastructure, not ICS actor campaigns.

🛡
Own this agent?
Verify the domain telesint-api.onrender.com via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership
🔔 Watch this agent for changes. Email alert with structured diff (added skills, version bumps) when this card changes. Enterprise feature. Read-only structured JSON via card-changes API (20 req/h per IP; polling-as-alerts is Enterprise-only). Sign in to subscribe
Trust score
19/100
grade F · 9 criteria
Uptime
accumulating
1/5 probes
Revenue · 30d
$0.00
wallet active · no inflow
Usage · 7d
0
no recent activity
Card drift · 7d
changed
0 snapshots tracked
Owner
unverified
claim this listing →
F
Conformance score: 19/100
F-grade: card is reachable but fails most operational signals.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Schema-validated A2A AgentCard returned by the well-known endpoint.
info Live JSON-RPC 0/25
Live probe hasn't run yet.
fail Protocol version 0/10
No protocolVersion in card.
How to earn +10 points
Declare protocolVersion
Add `"protocolVersion": "1.0"` to the AgentCard root. Without it, callers can't negotiate v0.x vs v1.0 compatibility.
Docs →
info JWS signature 0/10
Card is unsigned (most published agents are).
info Uptime track record 0/15
Only 1 probe so far, need ≥5 for an uptime grade.
fail Skill declaration 0/10
No skills declared in card. Hard to route to.
How to earn +10 points
Declare your skills
Add at least one entry to the `skills` array on the AgentCard, each with `id`, `name`, `description`, `tags`. We canonicalise these into the global skill taxonomy on next probe.
Docs →
partial Verified Identity 5/10
Provider declared: telesint-api.onrender.com (https://telesint-api.onrender.com). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 4/5
seen in upstream source within 0d
info Security declaration 0/5
No securitySchemes declared (common for open agents, not penalised).
⚠ Card drift detected. This agent's agent-card.json changed within the last 7 days. We track these so downstream callers can react.

Activity (audit trail)

last 24h · 0 calls Public aggregate · no PII recorded

No calls observed in the last 7 days. Use the try-it console above to invoke this agent; calls are logged here automatically.

Uptime
100.0%
1 probes
Response
0ms
last probe
Skills
0
declared
Streaming
SSE-capable

Endpoints

Pricing x402 on Base USDC
From $0.0100 per call
Endpoint Price Currency
https://telesint-api.onrender.com/actor 0.02 USDC
https://telesint-api.onrender.com/artifact 0.05 USDC
https://telesint-api.onrender.com/asn 0.03 USDC
https://telesint-api.onrender.com/breach 0.03 USDC
https://telesint-api.onrender.com/c2 0.02 USDC
https://telesint-api.onrender.com/darkweb 0.03 USDC
https://telesint-api.onrender.com/feed 0.05 USDC
https://telesint-api.onrender.com/intent 0.05 USDC
https://telesint-api.onrender.com/ioc 0.01 USDC
https://telesint-api.onrender.com/malware 0.02 USDC
https://telesint-api.onrender.com/ransomware 0.04 USDC
https://telesint-api.onrender.com/search 0.04 USDC
https://telesint-api.onrender.com/source 0.02 USDC
https://telesint-api.onrender.com/vulnerability 0.03 USDC
Try it ↗ Opens the operator's playground / docs in a new tab.
Settlement wallet: 0x7f74ce6d34ee0180f0217a16ce05f3b91272570f · basescan ↗
Agent cardhttps://telesint-api.onrender.com
Providerhttps://telesint-api.onrender.com
Docshttps://telesint-api.onrender.com
Discovered via
agentic_market

Health · last 0 probes

When HTTP Live JSON-RPC Latency

Similar agents embedding-nearest

ot-intel-api.onrender.com
ICS threat actor ASN infrastructure profiling. Pass ?asn=AS215540. Returns ICS actor associations (SANDWORM, VOLTZITE, XENOTIME), phishing k
ot-intel-api.onrender.com · q 85%
ContrastAPI
Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts for AI agents: CVE/KEV/CWE lo
ContrastCyber · q 80%
ContrastAPI
Landing pointer card for ContrastAPI, the live product of ContrastCyber (an umbrella building products humans and AI agents use the same way
ContrastCyber · q 80%
api.ipintel.ai
Pay-per-call IP lookup and risk intelligence API. Send an IPv4 or IPv6 address and receive JSON with risk score, risk label, ASN, ISP, organ
api.ipintel.ai · q 85%
onchainpulse.theaslangroupllc.com
Honeypot, rug & token-safety scanner for Base & EVM tokens — instant pre-trade check: sell-simulation honeypot, buy/sell tax, mint, upgradea
onchainpulse.theaslangroupllc.com · q 85%
api.osf-master-server.com
Real time sanctions screening by name. Screens a person or entity against the full US OFAC SDN list (19,000+ designations), EU consolidated
api.osf-master-server.com · q 0%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime
Markdown / HTML snippets
[![Agenstry grade](https://agenstry.com/badge/telesint-api.onrender.com.svg)](https://agenstry.com/agents/telesint-api.onrender.com)
[![Verified Business](https://agenstry.com/badge/telesint-api.onrender.com/identity.svg)](https://agenstry.com/agents/telesint-api.onrender.com)
[![Uptime](https://agenstry.com/badge/telesint-api.onrender.com/uptime.svg)](https://agenstry.com/agents/telesint-api.onrender.com)
[![A2A version](https://agenstry.com/badge/telesint-api.onrender.com/protocol.svg)](https://agenstry.com/agents/telesint-api.onrender.com)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON
{
  "_source": "agentic.market",
  "service": {
    "id": "telesint-api-onrender-com",
    "name": "telesint-api.onrender.com",
    "description": "ASN threat intelligence from Telegram CTI channels. Pass ?asn=AS215540. Returns C2 framework associations, phishing kit links (Tycoon2FA, EvilProxy, NakedPages), threat actor mentions, bulletproof hosting indicators, blocking recommendation with WAF rule hint, and matching TeleSint record IDs for pivoting into /c2 or /ioc. Distinct from OT-Intel /ot/asn \u2014 angle is cybercriminal Telegram chatter about hosting infrastructure, not ICS actor campaigns.",
    "domain": "telesint-api.onrender.com",
    "provider": "telesint-api.onrender.com",
    "providerUrl": "",
    "category": "",
    "networks": [
      "Base"
    ],
    "enriched": false,
    "endpoints": [
      {
        "url": "https://telesint-api.onrender.com/actor",
        "description": "Threat actor profiles from Telegram. Filters: name, nation_state(kp|ru|cn|ir), motivation(financial|espionage|hacktivism), ttp, severity, limit. Returns items[] with actor{}, ttps[], target{sectors,countries}.",
        "pricing": {
          "amount": "0.02",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "motivation",
            "type": "string",
            "description": "",
            "example": "financial",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "name",
            "type": "string",
            "description": "",
            "example": "lazarus",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "nation_state",
            "type": "string",
            "description": "",
            "example": "kp",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "ttp",
            "type": "string",
            "description": "",
            "example": "T1566",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "33",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/artifact",
        "description": "CTI artifact export from a TeleSint record. Required: id (record UUID), format (sigma|stix|report). Returns Sigma rule, STIX 2.1 bundle, or structured analyst report built from real enriched intel.",
        "pricing": {
          "amount": "0.05",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "format",
            "type": "string",
            "description": "",
            "example": "sigma",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "id",
            "type": "string",
            "description": "",
            "example": "f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "24",
          "l30DaysUniquePayers": "5"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/asn",
        "description": "ASN threat intelligence from Telegram CTI channels. Pass ?asn=AS215540. Returns C2 framework associations, phishing kit links (Tycoon2FA, EvilProxy, NakedPages), threat actor mentions, bulletproof hosting indicators, blocking recommendation with WAF rule hint, and matching TeleSint record IDs for pivoting into /c2 or /ioc. Distinct from OT-Intel /ot/asn \u2014 angle is cybercriminal Telegram chatter about hosting infrastructure, not ICS actor campaigns.",
        "pricing": {
          "amount": "0.03",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "asn",
            "type": "string",
            "description": "",
            "example": "AS215540",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "8",
          "l30DaysUniquePayers": "5"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/breach",
        "description": "Breach disclosures from Telegram. Filters: sector, country, organization, severity, min_confidence, since, limit. Returns items[] with target{sectors,countries,organizations}, leak iocs[], confidence.",
        "pricing": {
          "amount": "0.03",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "country",
            "type": "string",
            "description": "",
            "example": "us",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 60,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "organization",
            "type": "string",
            "description": "",
            "example": "acme",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "sector",
            "type": "string",
            "description": "",
            "example": "finance",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "since",
            "type": "string",
            "description": "",
            "example": "2026-05-01T00:00:00Z",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "24",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/c2",
        "description": "C2 infrastructure from Telegram. Filters: framework(cobalt_strike|sliver|havoc|brute_ratel), severity, min_confidence, since, tag, limit, offset. Returns items[] with C2 IPs/domains, MITRE TTPs, confidence.",
        "pricing": {
          "amount": "0.02",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "framework",
            "type": "string",
            "description": "",
            "example": "cobalt_strike",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 70,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "since",
            "type": "string",
            "description": "",
            "example": "2026-05-01T00:00:00Z",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tag",
            "type": "string",
            "description": "",
            "example": "c2",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "33",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/darkweb",
        "description": "Dark web intelligence from Telegram: marketplace listings, forum chatter, access broker posts, credential shops, Tor site activity. Filters: severity, min_confidence, since, tag, sector, country, organization, limit, offset.",
        "pricing": {
          "amount": "0.03",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 60,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "sector",
            "type": "string",
            "description": "",
            "example": "finance",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "since",
            "type": "string",
            "description": "",
            "example": "2026-05-01T00:00:00Z",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tag",
            "type": "string",
            "description": "",
            "example": "access-broker",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "16",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/feed",
        "description": "Full intel feed across all categories. Filters: category(ioc|c2|actor|breach|intent|vulnerability), severity, min_confidence, since, tag, tlp, limit, offset. Returns all record types newest first. Use for SIEM ingestion.",
        "pricing": {
          "amount": "0.05",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "category",
            "type": "string",
            "description": "",
            "example": "ioc",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 60,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "since",
            "type": "string",
            "description": "",
            "example": "2026-05-01T00:00:00Z",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tag",
            "type": "string",
            "description": "",
            "example": "ransomware",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tlp",
            "type": "string",
            "description": "",
            "example": "WHITE",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "33",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/intent",
        "description": "Pre-attack intent signals from Telegram: access sales, 0days, ransomware targeting. Filters: sector, country, organization, intent_type(access_sale|0day|ransomware|exploit), limit. Signals appear before attacks.",
        "pricing": {
          "amount": "0.05",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "country",
            "type": "string",
            "description": "",
            "example": "us",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "intent_type",
            "type": "string",
            "description": "",
            "example": "ransomware",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "organization",
            "type": "string",
            "description": "",
            "example": "hospital",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "sector",
            "type": "string",
            "description": "",
            "example": "healthcare",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "25",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/ioc",
        "description": "IOC feed from Telegram CTI channels. Filters: type(ip|domain|url|hash|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].",
        "pricing": {
          "amount": "0.01",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "channel",
            "type": "string",
            "description": "",
            "example": "vxunderground",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 70,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "since",
            "type": "string",
            "description": "",
            "example": "2026-05-01T00:00:00Z",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tag",
            "type": "string",
            "description": "",
            "example": "ransomware",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tlp",
            "type": "string",
            "description": "",
            "example": "WHITE",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "type",
            "type": "string",
            "description": "",
            "example": "ip",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "36",
          "l30DaysUniquePayers": "7"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/malware",
        "description": "Malware family intelligence from Telegram: new sample drops, behavior analysis, loader/stealer/RAT/backdoor writeups. Filters: severity, min_confidence, since, tag(stealer|loader|rat|backdoor), limit, offset.",
        "pricing": {
          "amount": "0.02",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 60,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "since",
            "type": "string",
            "description": "",
            "example": "2026-05-01T00:00:00Z",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tag",
            "type": "string",
            "description": "",
            "example": "stealer",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "19",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/ransomware",
        "description": "Ransomware group activity from Telegram: victim posts, leak site announcements, extortion demands. Filters: severity, min_confidence, since, tag(lockbit|blackcat|cl0p|ransomhub), sector, country, limit, offset.",
        "pricing": {
          "amount": "0.04",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "country",
            "type": "string",
            "description": "",
            "example": "us",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 60,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "sector",
            "type": "string",
            "description": "",
            "example": "finance",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "since",
            "type": "string",
            "description": "",
            "example": "2026-05-01T00:00:00Z",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tag",
            "type": "string",
            "description": "",
            "example": "lockbit",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "20",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/search",
        "description": "Cross-category pivot across all TeleSint intel. Use ?q= for broad keyword or combine filters: category, severity, sector, country, tag, ttp, name, organization, min_confidence, since. Returns items[] across any category.",
        "pricing": {
          "amount": "0.04",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "category",
            "type": "string",
            "description": "",
            "example": "breach",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "country",
            "type": "string",
            "description": "",
            "example": "us",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 60,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "q",
            "type": "string",
            "description": "",
            "example": "lockbit",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "sector",
            "type": "string",
            "description": "",
            "example": "finance",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "17",
          "l30DaysUniquePayers": "6"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/source",
        "description": "Raw source verification for a TeleSint record. Pass id (UUID from any items[].id). Returns original defanged message text and source language alongside the AI summary for provenance checks.",
        "pricing": {
          "amount": "0.02",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "id",
            "type": "string",
            "description": "",
            "example": "f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "include_raw",
            "type": "string",
            "description": "",
            "example": "true",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "7",
          "l30DaysUniquePayers": "4"
        }
      },
      {
        "url": "https://telesint-api.onrender.com/vulnerability",
        "description": "CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status.",
        "pricing": {
          "amount": "0.03",
          "currency": "USDC",
          "network": "eip155:8453",
          "scheme": "exact",
          "maxAmount": "",
          "minAmount": ""
        },
        "method": "GET",
        "providerName": "",
        "parameters": [
          {
            "group": "query",
            "name": "limit",
            "type": "number",
            "description": "",
            "example": 20,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "min_confidence",
            "type": "number",
            "description": "",
            "example": 60,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "offset",
            "type": "number",
            "description": "",
            "example": 0,
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "severity",
            "type": "string",
            "description": "",
            "example": "high",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "since",
            "type": "string",
            "description": "",
            "example": "2026-05-01T00:00:00Z",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "tag",
            "type": "string",
            "description": "",
            "example": "cve",
            "enumValues": [],
            "default": null,
            "required": false
          },
          {
            "group": "query",
            "name": "type",
            "type": "string",
            "description": "",
            "example": "cve",
            "enumValues": [],
            "default": null,
            "required": false
          }
        ],
        "serviceName": "",
        "tags": [],
        "quality": {
          "l30DaysTotalCalls": "16",
          "l30DaysUniquePayers": "5"
        }
      }
    ],
    "integrationType": "",
    "isNew": false,
    "priceSummary": {
      "minAmount": "0.01",
      "maxAmount": "0.05",
      "avgCostPerTransaction": "0.031429",
      "avgCostBasis": "exact",
      "currency": "USDC"
    },
    "serviceName": "",
    "tags": [],
    "iconUrl": ""
  }
}