{"x402Version":2,"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","resources":[{"id":8938,"slug":"8938","resource":"https://ot-intel-api.onrender.com/ot/ioc","description":"IOC enrichment with ICS campaign context. Pass ?value=1.2.3.4&type=ip or type=domain. Queries AlienVault OTX, AbuseIPDB, and DeepSeek CTI for OT campaign association. Returns verdict on whether the IOC is linked to ICS-targeting campaigns.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"10000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"type":"ip","value":"185.220.101.45"},"type":"http"},"output":{"example":{"abuse_confidence_score":87,"country_code":"DE","data_sources":["AlienVault-OTX","AbuseIPDB","DeepSeek-CTI-Analysis"],"freshness":"2025-05-22T10:00:00.000Z","ics_association":{"associated_with_ics_campaign":true,"campaign_context":"IP observed in VOLTZITE reconnaissance activity against US electric utilities.","confidence":"high","ics_tags_found":["ics","scada","modbus"],"known_threat_actor":"VOLTZITE"},"ioc":{"type":"ip","value":"185.220.101.45"},"isp":"Tor Project","pulse_count":50,"reputation":-2,"tor_node":true,"total_abuse_reports":142},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"type":{"description":"IOC type: ip or domain","enum":["ip","domain"],"type":"string"},"value":{"description":"The IOC: IP address or domain name","type":"string"}},"required":["value","type"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-12T17:10:15.904Z","quality":{"calls30d":3,"uniquePayers30d":3,"lastCalledAt":"2026-09-12T17:10:15.638Z"},"liveness":{},"verified":false,"featured":false},{"id":8939,"slug":"8939","resource":"https://ot-intel-api.onrender.com/ot/cve","description":"OT-contextualised CVE triage for ICS/SCADA. Pass ?id=CVE-XXXX-XXXX. Returns OT-adjusted severity, cyber-physical impact, patch feasibility, CISA KEV status, and prioritised action. DeepSeek-enriched with live NVD and CISA-KEV data.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"20000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"id":"CVE-2023-38802"},"type":"http"},"output":{"example":{"actively_exploited":false,"compensating_controls":["Isolate PLC from IT network via VLAN","Disable web server interface if unused","Deploy unidirectional gateway for historian traffic"],"cve_id":"CVE-2019-13945","cvss_score":6.8,"data_sources":["NVD","CISA-KEV","DeepSeek-CTI-Analysis"],"freshness":"2025-05-22T10:00:00.000Z","kev_due_date":null,"ot_context":{"affected_layer":"field_device","ot_adjusted_severity":"high","patch_feasibility":"low — requires maintenance window","production_downtime":true,"safety_system_risk":true},"recommended_action":"HIGH: Schedule patch for next maintenance window.","summary":"A vulnerability has been identified in SIMATIC S7-1200 CPU family (All versions). The web server of the affected devices transmits data without TLS encryption."},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"id":{"description":"CVE identifier e.g. CVE-2023-38802","type":"string"}},"required":["id"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-08-30T15:45:13.756Z","quality":{"calls30d":2,"uniquePayers30d":2,"lastCalledAt":"2026-08-30T15:45:13.504Z"},"liveness":{},"verified":false,"featured":false},{"id":8940,"slug":"8940","resource":"https://ot-intel-api.onrender.com/ot/actor/sector","description":"ICS threat actors by sector. Pass ?sector=energy. Returns all groups targeting that sector from live MITRE ATT&CK ICS STIX data. Covers energy, water, manufacturing, oil-and-gas, chemical, transportation, nuclear.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"30000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"sector":"energy"},"type":"http"},"output":{"example":{"actors_targeting_sector":[{"activity_status":"ACTIVE","attribution":"Russia — GRU Unit 74455","name":"SANDWORM","physical_impact":"CONFIRMED DESTRUCTIVE"},{"activity_status":"ACTIVE","attribution":"China","name":"VOLTZITE","physical_impact":"LIKELY"}],"count":2,"data_sources":["MITRE-ATT&CK-ICS","DeepSeek-CTI-Analysis"],"freshness":"2025-05-22T10:00:00.000Z","query":{"sector":"energy"}},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"sector":{"description":"Industry sector e.g. energy, water, manufacturing, oil-and-gas, chemical, transportation, nuclear","type":"string"}},"required":["sector"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-16T18:22:14.242Z","quality":{"calls30d":2,"uniquePayers30d":1,"lastCalledAt":"2026-09-16T18:22:13.813Z"},"liveness":{},"verified":false,"featured":false},{"id":8941,"slug":"8941","resource":"https://ot-intel-api.onrender.com/ot/campaign","description":"Active ICS campaign tracker. Pass ?sector=electric&status=active. Returns campaigns currently targeting a sector with actor attribution, start date, targeted geography, TTPs in use, and CVEs being exploited. No free equivalent for live campaign status.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"50000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"sector":"electric","status":"active"},"type":"http"},"output":{"example":{"campaign_count":2,"campaigns":[{"actor":"VOLTZITE","confidence":"high","exploited_cves":["CVE-2023-38380"],"name":"VOLTZITE Pre-Positioning Campaign","start_date":"2023-Q1","status":"active","targeted_geography":["United States","Pacific Islands"],"ttps_in_use":["T0859","T0812","T0885"]}],"data_sources":["MITRE-ATT&CK-ICS","CISA-ICS-CERT","OT-Intel-DB","DeepSeek-CTI-Analysis"],"freshness":"2026-06-13T10:00:00Z","sector":"electric","status":"active"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"sector":{"description":"Industrial sector e.g. energy, water, electric, manufacturing, oil-and-gas, nuclear, chemical","type":"string"},"status":{"description":"active (default) | all","type":"string"}},"required":["sector"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-16T17:32:17.778Z","quality":{"calls30d":2,"uniquePayers30d":1,"lastCalledAt":"2026-09-16T17:32:17.348Z"},"liveness":{},"verified":false,"featured":false},{"id":8942,"slug":"8942","resource":"https://ot-intel-api.onrender.com/ot/gcc-bulletin","description":"Recurring public \"State of OT Threat Intel — GCC\" sitrep, human-reviewed before publish, sourced from the same intel.db pipeline as /ot/sitrep. Pass optional issue_date (YYYY-MM-DD) for a past edition; omit for the latest reviewed edition.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"10000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{},"type":"http"},"output":{"example":{"full_text":"...","issue_date":"2026-07-20","region":"GCC","summary":"Elevated OT threat activity across UAE energy sector this period.","tlp":"TLP:CLEAR"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"issue_date":{"description":"Optional YYYY-MM-DD of a past edition; defaults to latest reviewed edition","type":"string"}},"required":[],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-11T23:53:48.793Z","quality":{"calls30d":1,"uniquePayers30d":1,"lastCalledAt":"2026-09-11T23:53:48.382Z"},"liveness":{},"verified":false,"featured":false},{"id":8943,"slug":"8943","resource":"https://ot-intel-api.onrender.com/ot/delta","description":"ICS sector change feed — only what is NEW in the last N days. Pass ?sector=water&days=7. Returns new CVEs, new CISA advisories, and new actor activity since the last call. Designed for cron-based monitoring agents. Eliminates redundant reprocessing.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"30000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"days":"7","sector":"water"},"type":"http"},"output":{"example":{"data_sources":["NVD","CISA-ICS-CERT","MITRE-ATT&CK-ICS"],"freshness":"2026-06-13T10:00:00Z","net_change":"1 new critical CVE, 1 new advisory","new_actor_activity":[],"new_advisories":[{"cvss_max":9.1,"id":"ICSA-26-164-01","title":"Schneider Electric Modicon"}],"new_cves":[{"affected_vendors":["Schneider Electric"],"cvss":9.1,"id":"CVE-2026-1234","ot_severity":"critical"}],"sector":"water","since":"2026-06-06T00:00:00Z"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"days":{"description":"Lookback window in days, default 7, max 30","type":"string"},"sector":{"description":"Industrial sector e.g. energy, water, manufacturing, oil-and-gas, electric","type":"string"}},"required":["sector"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-11T23:53:45.643Z","quality":{"calls30d":1,"uniquePayers30d":1,"lastCalledAt":"2026-09-11T23:53:45.264Z"},"liveness":{},"verified":false,"featured":false},{"id":8944,"slug":"8944","resource":"https://ot-intel-api.onrender.com/ot/patch","description":"OT/ICS patch feasibility for a CVE. Pass ?id=CVE-XXXX-XXXX. Returns patch availability, OT-safe workarounds, patch complexity per ICS layer, estimated downtime, safe-to-patch-live flag, deployment strategy, and risk-vs-disruption score 1-10.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"50000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"id":"CVE-2021-34527"},"type":"http"},"output":{"example":{"actively_exploited":true,"cve_id":"CVE-2021-34527","cvss_score":8.8,"data_sources":["NVD","CISA-KEV","DeepSeek-CTI-Analysis"],"freshness":"2025-05-22T10:00:00.000Z","ot_feasibility":{"deployment_strategy":"Apply during planned outage. Test on non-production SCADA node first.","estimated_downtime_minutes":30,"patch_complexity":"Medium","recommended_window":"Scheduled maintenance window","requires_reboot":true,"safe_to_patch_live":false},"patch_available":true,"risk_vs_disruption":{"rationale":"In CISA KEV — actively exploited. Patch urgently despite downtime required.","score":9},"severity":"HIGH","vendor_advisories":[{"advisory_url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527","tags":["Patch","Vendor Advisory"]}],"workarounds":["Disable the Print Spooler service on OT systems where printing is not required","Block inbound SMB (port 445) at the IT/OT DMZ firewall"]},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"id":{"description":"CVE identifier e.g. CVE-2021-34527","type":"string"}},"required":["id"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-11T23:53:42.315Z","quality":{"calls30d":1,"uniquePayers30d":1,"lastCalledAt":"2026-09-11T23:53:42.064Z"},"liveness":{},"verified":false,"featured":false},{"id":8945,"slug":"8945","resource":"https://ot-intel-api.onrender.com/ot/malware","description":"ICS malware encyclopedia. Pass ?name=PIPEDREAM. Returns capabilities, targeted OT protocols, attributed actor, affected vendors, detection signatures, and MITRE ATT&CK ICS techniques. Covers PIPEDREAM, TRITON, INDUSTROYER2, CRASHOVERRIDE, FROSTYLOOP, BLACKENERGY.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"20000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"name":"PIPEDREAM"},"type":"http"},"output":{"example":{"affected_vendors":["Schneider Electric","OMRON"],"aliases":["INCONTROLLER"],"attributed_actor":"CHERNOVITE","capabilities":["discovery","lateral_movement","disruption","destruction"],"confidence":"high","data_sources":["Dragos-Threat-Intelligence","OT-Intel-DB","MITRE-ATT&CK-ICS","DeepSeek-CTI-Analysis"],"detection_signatures":["YARA rule: PIPEDREAM_loader","Anomalous CODESYS write commands"],"first_seen":"2022","mitre_techniques":["T0843","T0821","T0855"],"name":"PIPEDREAM","targeted_protocols":["Modbus","OPC UA","CODESYS","IEC 61850"]},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"name":{"description":"Malware name e.g. PIPEDREAM, TRITON, INDUSTROYER2, CRASHOVERRIDE, FROSTYLOOP, BLACKENERGY","type":"string"}},"required":["name"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-11T23:53:33.687Z","quality":{"calls30d":1,"uniquePayers30d":1,"lastCalledAt":"2026-09-11T23:53:33.285Z"},"liveness":{},"verified":false,"featured":false},{"id":8946,"slug":"8946","resource":"https://ot-intel-api.onrender.com/ot/exposure","description":"OT asset risk verdict. Pass ?vendor=siemens&model=s7-1500&sector=energy&network=internet-facing. Returns risk_score (0-100), risk_level, escalate (boolean), recommended_action, active CVEs, and threat actors. Optional firmware param enables firmware-specific CVE matching. Cached 1 hour.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"50000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"model":"s7-1500","network":"internet-facing","sector":"energy","vendor":"siemens"},"type":"http"},"output":{"example":{"active_campaigns":2,"active_cves":3,"confidence":"high","data_sources":["NVD","CISA-KEV","MITRE-ATT&CK-ICS","DeepSeek-CTI-Analysis"],"escalate":true,"freshness":"2026-06-13T10:00:00Z","model":"s7-1500","network":"internet-facing","recommended_action":"isolate","risk_level":"critical","risk_score":87,"sector":"energy","threat_actors":["VOLTZITE","SANDWORM"],"top_threat":"VOLTZITE pre-positioning via CVE-2023-38380","ttl_seconds":3600,"vendor":"siemens"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"firmware":{"description":"Firmware version e.g. 2.9.2 (optional — enables firmware-specific CVE matching)","type":"string"},"model":{"description":"Device model e.g. s7-1500, modicon-m340, controllogix","type":"string"},"network":{"description":"Network exposure: internet-facing | dmz | lan-only | air-gapped","type":"string"},"sector":{"description":"Industrial sector e.g. energy, water, manufacturing, oil-and-gas","type":"string"},"vendor":{"description":"Vendor name e.g. siemens, schneider, rockwell, ge, honeywell","type":"string"}},"required":["vendor","model","sector","network"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-11T23:53:25.557Z","quality":{"calls30d":1,"uniquePayers30d":1,"lastCalledAt":"2026-09-11T23:53:25.131Z"},"liveness":{},"verified":false,"featured":false},{"id":8947,"slug":"8947","resource":"https://ot-intel-api.onrender.com/ot/ai-exposure","description":"AI/agentic copilot exposure lookup for OT/ICS vendors. Pass vendor (Siemens, Schneider Electric, Rockwell Automation, ABB, Emerson, Honeywell, Yokogawa, GE Vernova, Omron, Mitsubishi Electric). Returns the vendor's documented AI/agentic copilot, autonomy level (advisory vs agentic — the key risk differentiator), access, and applicable MITRE ATLAS techniques. Hand-verified mapping, ATLAS IDs confirmed against the live atlas.mitre.org matrix. Deterministic, no LLM in the lookup path.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"200000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"vendor":"Siemens"},"type":"http"},"output":{"example":{"access":"Honeywell Experion Process Knowledge System (DCS); continuous operational data across the facility. Explicitly makes 'recommendations and automated decisions' to resolve anomalies.","atlas_mappings":[{"shared_risk":true,"technique_id":"AML.T0051","technique_name":"LLM Prompt Injection"},{"rationale":"Agents hold automated decision-making authority in the control loop.","shared_risk":false,"technique_id":"AML.T0053","technique_name":"AI Agent Tool Invocation"},{"rationale":"Ongoing autonomous operation makes persistence via poisoned tool definitions materially higher-consequence.","shared_risk":false,"technique_id":"AML.T0110","technique_name":"AI Agent Tool Poisoning"}],"confidence":"moderate — proof-of-concept, not yet generally available","data_sources":["MITRE ATLAS (atlas.mitre.org)","Vendor public disclosures"],"deployment_status":"Live proof-of-concept at Borouge International's Ruwais facility (Abu Dhabi); commercial availability not yet general.","exposure_level":"agentic","product":"Experion Cognition (AI-enabled control system platform)","source":"Honeywell press release; corroborated by ARC Advisory Group, Control Engineering, and 6+ other independent trade outlets","vendor":"Honeywell"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"vendor":{"description":"OT/ICS vendor name e.g. Siemens, Schneider Electric, Rockwell Automation, ABB, Emerson, Honeywell, Yokogawa, GE Vernova, Omron, Mitsubishi Electric","type":"string"}},"required":["vendor"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-09-04T18:54:30.821Z","quality":{"calls30d":1,"uniquePayers30d":1,"lastCalledAt":"2026-09-04T18:54:30.354Z"},"liveness":{},"verified":false,"featured":false},{"id":8948,"slug":"8948","resource":"https://ot-intel-api.onrender.com/ot/detection","description":"ICS detection artifact retrieval. Pass ?target=PIPEDREAM or ?target=SANDWORM&format=sigma. Returns YARA/Sigma rules for the target malware or actor, sourced from public corpus (Florian Roth signature-base, CISA advisories) with validated:true, or DeepSeek-synthesised with validated:false. Designed for automated threat hunting pipelines that commit rules to SIEMs and EDRs — validated:true rules are safe to deploy; validated:false require lab testing first.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"50000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"target":"PIPEDREAM"},"type":"http"},"output":{"example":{"artifact_type":"malware","data_sources":["OT-Intel-DB","DeepSeek-CTI-Analysis"],"freshness":"2026-06-19T10:00:00Z","ot_safe_validation":"0 of 1 rules sourced from public corpus. Rules with validated:false require lab testing before production deployment.","signatures":[{"ot_safe_note":"Synthesised from CISA advisory AA22-103A. Test against OT baseline before SIEM deployment.","raw_rule":"rule PIPEDREAM_INCONTROLLER_Loader { meta: ... strings: ... condition: ... }","rule_name":"PIPEDREAM_INCONTROLLER_Loader","source":"manual","target_layer":"engineering_workstation","type":"YARA","validated":false}],"synthesised_count":1,"target":"PIPEDREAM","validated_count":0},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"format":{"description":"Rule format: yara | sigma | snort | all (default: all)","type":"string"},"target":{"description":"Malware or actor name e.g. PIPEDREAM, INDUSTROYER2, TRITON, SANDWORM, CHERNOVITE","type":"string"}},"required":["target"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"ot-intel-api.onrender.com","lastUpdated":"2026-08-25T12:50:40.912Z","quality":{"calls30d":1,"uniquePayers30d":1,"lastCalledAt":"2026-08-25T12:50:40.489Z"},"liveness":{},"verified":false,"featured":false}]}