Sublime Security — API

Sublime Platform APIvgenerated Read the vendor's spec ↗

96 endpoints
2 deprecated
17 versions archived since Aug 1, 2026
Last checked Nov 4, 2026

first call

$ curl "https://platform.sublime.security/v0/rules" \
  -H "Authorization: Bearer $TOKEN"

Set $TOKEN first, then paste.

Base URL: https://platform.sublime.security
Authenticate: Bearer token in the Authorization header
Shape: GET47
POST38
PUT4
PATCH2
DELETE5

What it covers

Messages 19 create, read
Message Groups 18 create, read
Scim 12 create, read, update, delete
Lists 10 create, read, update, delete
Rules 10 create, read, update, delete
Export 5 create, read, delete
Dlp Release Requests 4 create, read
Email Bombs 4 create, read
Events In The Audit Log 3 read
Hunt Jobs 3 create, read
Binexplode 2 create, read
Enrichment 1 create

5 more areas

Live Flow 1 create
Mailboxes 1 read
Roles 1 update
Tasks 1 read
User Reports 1 read

Open an endpoint for a runnable command, its inputs and what it returns.

Messages 19

GET /v0/messages/groups/{id}/action-state Retrieve details about the state of manual actions for a canonical group

Loading…
GET /v0/messages/{id} Retrieve message

Loading…
GET /v0/messages/{id}/asa_report Retrieve ASA report for a message

Loading…
GET /v0/messages/{id}/asa_verdict Retrieve ASA verdict for a message

Loading…
GET /v0/messages/{id}/attachment/{hash}/image Retrieve image of PDF attachment by md5 hash

Loading…
GET /v0/messages/{id}/attack_score Evaluate attack score against an existing message

Loading…
GET /v0/messages/{id}/eml Retrieve raw EML

Loading…
GET /v0/messages/{id}/image Retrieve image of message

Loading…
GET /v0/messages/{id}/image_link Retrieve a temporary link to the image of message

Loading…
GET /v0/messages/{id}/message_data_model Retrieve the message's Message Data Model

Loading…
POST /v0/messages/analyze Analyze a raw message

Loading…
POST /v0/messages/attachment/image Render image for attachment from the raw base64 encoded bytes

Loading…
POST /v0/messages/attack_score Evaluate attack score for a raw message

Loading…
POST /v0/messages/create Create message

Loading…
POST /v0/messages/{id}/actions Perform actions on an individual message

Loading…
POST /v0/messages/{id}/analyze Analyze a message by ID

Loading…
POST /v0/messages/{id}/justification Set access justification

Loading…
POST /v0/messages/{id}/restore Restore a previously-trashed message

Loading…
POST /v0/messages/{id}/trash Trash message

Loading…

Message Groups 18

GET /v0/message-groups List message groups

Loading…
GET /v0/message-groups/hunt/{id} Get results of a hunt deprecated

Loading…
GET /v0/message-groups/search Search message groups

Loading…
GET /v0/message-groups/siem-summary Get SIEM-oriented summary of flagged message groups

Loading…
GET /v0/message-groups/{id} Get a single message group

Loading…
POST /v0/message-groups/dismiss Dismiss multiple message groups

Loading…
POST /v0/message-groups/hunt Hunt message groups deprecated

Loading…
POST /v0/message-groups/move-to-graymail Graymail multiple message groups

Loading…
POST /v0/message-groups/move-to-spam Move multiple message groups to spam

Loading…
POST /v0/message-groups/quarantine Quarantine multiple message groups

Loading…
POST /v0/message-groups/restore Restore multiple message groups

Loading…
POST /v0/message-groups/review Review message groups

Loading…
POST /v0/message-groups/trash Trash multiple message groups

Loading…
POST /v0/message-groups/{id}/dismiss Dismiss message group

Loading…
POST /v0/message-groups/{id}/quarantine Quarantine message group

Loading…
POST /v0/message-groups/{id}/restore Restore message group

Loading…
POST /v0/message-groups/{id}/share-with-sublime Share a message with Sublime

Loading…
POST /v0/message-groups/{id}/trash Trash message group

Loading…

Scim 12

DELETE /v0/scim/Users/{id} Delete SCIM user

Loading…
GET /v0/scim/ResourceTypes List SCIM resource types

Loading…
GET /v0/scim/ResourceTypes/{id} Get SCIM resource type

Loading…
GET /v0/scim/Schemas List SCIM schemas

Loading…
GET /v0/scim/Schemas/{id} Get SCIM schema

Loading…
GET /v0/scim/ServiceProviderConfig Get SCIM service provider configuration

Loading…
GET /v0/scim/Users List SCIM users

Loading…
GET /v0/scim/Users/{id} Get SCIM user

Loading…
GET /v0/scim/validate_auth Validate SCIM specific auth

Loading…
PATCH /v0/scim/Users/{id} Patch SCIM user

Loading…
POST /v0/scim/Users Create SCIM user

Loading…
PUT /v0/scim/Users/{id} Update SCIM user

Loading…

Lists 10

DELETE /v0/lists/{id} Delete list

Loading…
DELETE /v0/lists/{id}/entries/entry Delete list entry

Loading…
GET /v0/lists Retrieve lists

Loading…
GET /v0/lists/{id} Get list

Loading…
GET /v0/lists/{id}/entries Get list entries

Loading…
GET /v0/lists/{id}/entries/entry Get list entry

Loading…
PATCH /v0/lists/{id} Patch list

Loading…
POST /v0/lists Create list

Loading…
POST /v0/lists/{id}/entries/entry Add list entry

Loading…
PUT /v0/lists/{id}/entries Set list entries

Loading…

Rules 10

DELETE /v0/rules/{id} Delete rule

Loading…
GET /v0/rules List rules

Loading…
GET /v0/rules/rule-history List history for rules

Loading…
GET /v0/rules/{id} Retrieve rule

Loading…
GET /v0/rules/{id}/rule-history Retrieve history of a rule

Loading…
POST /v0/rules Create rule

Loading…
POST /v0/rules/validate Validate rule

Loading…
POST /v0/rules/{id}/activate Activate rule

Loading…
POST /v0/rules/{id}/deactivate Deactivate rule

Loading…
PUT /v0/rules/{id} Update rule

Loading…

Export 5

DELETE /v0/messages/export/{id} Delete message export job

Loading…
GET /v0/messages/export List message export jobs

Loading…
GET /v0/messages/export/dashboard/{dashboard_type}/estimate Estimate export size of dashboard report

Loading…
GET /v0/messages/export/{id} Get message export job

Loading…
POST /v0/messages/export/dashboard/{dashboard_type} Export dashboard report

Loading…

Dlp Release Requests 4

GET /v0/dlp/release-requests List DLP release requests

Loading…
GET /v0/dlp/release-requests/{id} Get a DLP release request

Loading…
POST /v0/dlp/release-requests/{id}/approve Approve a DLP release request

Loading…
POST /v0/dlp/release-requests/{id}/deny Deny a DLP release request

Loading…

Email Bombs 4

GET /v0/messages/bombs List email bombs

Loading…
GET /v0/messages/bombs/{id} Get email bomb

Loading…
POST /v0/messages/bombs Create email bomb

Loading…
POST /v0/messages/bombs/{id}/dismiss Dismiss email bomb

Loading…

Events In The Audit Log 3

GET /v0/audit-log/events List events in audit log

Loading…
GET /v0/audit-log/events/types List event types for audit log

Loading…
GET /v0/audit-log/events/{id} Retrieve event from audit log

Loading…

Hunt Jobs 3

GET /v0/hunt-jobs/{id} Get hunt job

Loading…
GET /v0/hunt-jobs/{id}/results Get hunt job results

Loading…
POST /v0/hunt-jobs Start hunt job

Loading…

Binexplode 2

GET /v0/binexplode/scan/{id} Get results of a binexplode scan

Loading…
POST /v0/binexplode/scan Upload a binary to be binexploded

Loading…

Enrichment 1

POST /v0/enrichment/link_analysis/evaluate Analyze a provided link using ml.link_analysis functionality

Loading…

Live Flow 1

POST /v0/live-flow/raw-messages/analyze Process raw message

Loading…

Mailboxes 1

GET /v0/mailboxes List mailboxes

Loading…

Roles 1

PUT /v0/roles/assign Assign role to user

Loading…

Tasks 1

GET /v0/tasks/{id} Retrieve task

Loading…

User Reports 1

GET /v0/user-reports List user reports

Loading…

Change log

2026-10-11
- +GET /v0/dlp/release-requests
- +GET /v0/dlp/release-requests/{id}
- +POST /v0/dlp/release-requests/{id}/approve
- +POST /v0/dlp/release-requests/{id}/deny
2026-08-28
- +DELETE /v0/messages/export/{id}
- +GET /v0/messages/export
- +GET /v0/messages/export/dashboard/{dashboard_type}/estimate
- +GET /v0/messages/export/{id}
- +POST /v0/messages/export/dashboard/{dashboard_type}
2026-08-14
- +POST /v0/message-groups/move-to-spam
2026-08-05
- ⚠GET /v0/message-groups/hunt/{id}
- ⚠POST /v0/message-groups/hunt

Get started

What it covers

Endpoints

Messages 19

Message Groups 18

Scim 12

Lists 10

Rules 10

Export 5

Dlp Release Requests 4

Email Bombs 4

Events In The Audit Log 3

Hunt Jobs 3

Binexplode 2

Enrichment 1

Live Flow 1

Mailboxes 1

Roles 1

Tasks 1

User Reports 1

Change log