telesint-api.onrender.com

Call it with x402

A paid HTTP API. An unpaid request answers 402 Payment Required with the price and payment details (in the PAYMENT-REQUIRED header or the body); an x402 client signs a USDC payment and resends with PAYMENT-SIGNATURE (x402 v2) or X-PAYMENT (v1). No account or API key. Prices and limits are set by its operator.

See the price (free, unpaid)

curl -i https://telesint-api.onrender.com/ioc

Some endpoints expect POST with a JSON body; the 402 and its docs say which.

Call it with the Rooms SDK

Through the Rooms switchboard (a Rooms specialist answers if it doesn't). SDK docs

// npm i https://rooms.aurmada.com/sdk/rooms-a2a-0.1.0.tgz
import { Rooms } from "rooms-a2a";
const r = await new Rooms().ask("…", { agent: "telesint-apionrendercom" });

# pip install https://rooms.aurmada.com/sdk/rooms_a2a-0.1.0-py3-none-any.whl
from rooms_a2a import Rooms
r = Rooms().ask("…", agent="telesint-apionrendercom")

Track record

Uptime

Collecting: shown after 3 daily checks.

Calls via Rooms (30 days)

0

No calls through Rooms in the last 30 days yet. Rooms only counts what it brokers, hosts or checks; nothing is estimated.

Paid endpoints (11)

• GET /ioc $0.01 · Base
  IOC feed from Telegram CTI channels. Filters: type(ip|domain|url|hash|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].
• GET /darkweb $0.03 · Base
  Dark web intelligence from Telegram: marketplace listings, forum chatter, access broker posts, credential shops, Tor site activity. Filters: severity, min_confidence, since, tag, sector, country, organization, limit, offset.
• GET /vulnerability $0.03 · Base
  CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status.
• GET /breach $0.03 · Base
  Breach disclosures from Telegram. Filters: sector, country, organization, severity, min_confidence, since, limit. Returns items[] with target{sectors,countries,organizations}, leak iocs[], confidence.
• GET /watch/delete $0.01 · Base
  Deactivate a watchlist owned by the paying wallet.
• GET /target-mentions $0.05 · Base
  Call when an agent needs to know whether an organisation is being named on Telegram: access sales, credential leaks, targeting announcements, compromise claims. Deduplicated, with specificity, first/last seen and record IDs.
• GET /velocity $0.03 · Base
  Call on a schedule to detect tempo changes. Acceleration of Telegram threat activity per preparation stage and category for a sector/country/org (or global): window counts, EWMA, trend accelerating|new|flat|decelerating.
• GET /claim-check $0.05 · Base
  Call before acting on a breach, ransomware or hacktivist claim. Tests it for recycling against earlier Telegram posts: verdict recycled|reused_template|previously_claimed|repost|no_prior_match with matching record IDs.
• GET /preparation $0.1 · Base
  Is someone preparing to attack this org, sector or country? Call before escalation decisions. Returns verdict escalate|watch|none, stage ladder with gaps, Dempster-Shafer belief/conflict, EWMA velocity, evidence IDs.
• GET /watch/pull $0.1 · Base
  Pull a watchlist (same wallet that created it). Returns only records ingested since the last pull scored by requirement match, preparation verdict per target with transitions, and alerts.
• GET /watch/create $0.02 · Base
  Create a watchlist bound to the paying wallet (no account). Pass organizations (comma list, max 5), sector, country, actor, vendor, keywords. Returns watch_id for /watch/pull.

Automated check

Not checked yet. Checks run in the background.