Skip to content
Try the API
Try the API

Elastio Developer

Ransomware Security

Build on the platform that proves your data is clean.

Every asset, hunt, investigation, finding, and recovery point in Elastio is available through one REST API. Start hunts and investigations, send findings to your SOC, and prove which copy is clean to recover from, all from code.

Get startedExplore the API
Operations
502
Resources
64
Spec
OpenAPI 3.0
List open incidents
curl https://acme.app.elastio.com/gateway/api/v2/incidents?status=open \
  -H "Authorization: Bearer $ELASTIO_TOKEN"
Response 200 OK
{
  "total": 2,
  "data": [
    {
      "handle": "INC-000142",
      "status": "open",
      "opened_at": "2026-10-09T14:22:05Z",
      "finding": {
        "class": "threat",
        "kind": "pursuit",
        "severity": "high",
        "title": "Scheduled task runs an unsigned binary from a user-writable path",
        "asset_name": "prod-app-07",
        "platform": "aws",
        "details": { "suspicion_level": "high" }
      }
    },
    …
  ]
}
New

Elastio MCP server

Connect Claude, Copilot or any MCP-compatible agent to your tenant and ask about findings, assets and policies in plain language.

Set up MCP

Getting started

QuickstartMake your first call in five minutes.AuthenticateIssue and scope personal access tokens.API consoleSend live requests from the browser.PaginationPage through large result sets.API referenceAll 502 operations.ChangelogWhat changed and what is deprecated.

What do you want to do?

Automate

Hunt & investigate

Respond

Prove recovery

Notify & integrate

Manage access

Explore the API by area

Platform16 operations · 7 resourcesSystem · Tenant Settings · Licenses · Plan …Identity & Access42 operations · 6 resourcesUsers · User Groups · Roles · Account Groups …Inventory & Deployments116 operations · 13 resourcesDeployments · Assets · Search · Inventory …Backups & Recovery Points2 operations · 1 resourcesBackupHunts & Investigations78 operations · 9 resourcesHunts · Hunt Results · Hunt Rules · Custom Hunts …Findings & Response49 operations · 7 resourcesIncidents · Findings · Violations · Issues …Policies & Jobs70 operations · 6 resourcesPolicies · Policy Schedules · Policy Membership · System Policies …Recovery & Evidence27 operations · 5 resourcesResilience Program · Recovery Verdict · Recovery Analytics · Evidence …Reporting35 operations · 3 resourcesReports · Report Schedules · EQLAlerts & Integrations67 operations · 7 resourcesAlerts · Webhooks · Slack · Splunk …

Build with your tools

cURLCopy-paste requests for any shell.PythonA small, typed client built on requests.PowerShellInvoke-RestMethod helpers for Windows ops.PostmanImport the OpenAPI spec as a collection.Code generationGenerate SDKs for Go, TypeScript, Java.MCP serverLet AI agents query your Elastio tenant.

Need a hand?

Elastio engineers answer API questions through the support portal.

API supportFAQ