setupOrgAtpIntegration
Configure the Sky ATP integration by linking or creating the Sky ATP realm with the supplied cloud, realm, username, and password. The integration enables Security Intelligence and Advanced Anti-Malware features, with SecIntel configuration for command-and-control, DNS feeds, infected hosts, blocklists, and allowlists.
Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.
Format:
Authorization: Token {apitoken}
Notes:
- An API token generated for a specific admin has the same privileges as that admin
- An API token is automatically removed if it is not used for more than 90 days
- SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.
In: header
Path Parameters
uuidRequest Body
application/json
Sky ATP account credentials and realm settings used for integration
Sky ATP cloud endpoint used for the integration. enum: www.amerskyatp.com, www.apacskyatp.com, www.euroskyatp.com, www.canadaskyatp.com.
Value in
- "www.amerskyatp.com"
- "www.apacskyatp.com"
- "www.euroskyatp.com"
- "www.canadaskyatp.com"
Credential password for the Sky ATP realm user
passwordSky ATP realm to create or link with this Mist organization
Sky ATP username used to create or access the realm
Response Body
curl -X POST "https://example.com/api/v1/orgs/000000ab-00ab-00ab-00ab-0000000000ab/setting/skyatp/setup" \ -H "Content-Type: application/json" \ -d '{ "cloud_name": "www.amerskyatp.com", "password": "foryoureyesonly", "realm": "mist-team", "username": "john@abc.com" }'{ "Example": { "value": { "secintel": { "third_party_threat_feeds": [ "block_list" ] }, "secintel_allowlist_url": "https://papi.s3.amazonaws.com/secintel_allowlist/xxx...", "secintel_blocklist_url": "https://papi.s3.amazonaws.com/secintel_blocklist/xxx..." } }}