Download OpenAPI specification: Download

The Splunk Mission Control Automation API allows your team to automate their response to Mission Control incidents using Splunk SOAR playbooks. This API documentation corresponds to the actions available in the Mission Control block in the Splunk SOAR Visual Playbook Editor (VPE). To learn more about the Mission Control block, see Use Splunk Mission Control data in Splunk SOAR (Cloud) playbooks in Investigate and Respond to Threats in Splunk Mission Control. The following APIs are not applicable for use cases outside of the Mission Control/SOAR integration. Any other use of these or other Mission Control APIs is not supported.