Method

intel.cases.create

Save an investigation as a case file.

Details

Endpoint: POST /v1/intel/cases
Credits: Free
Rate class: Light. Counts against your light requests per second.
Also called: /v1/omen/cases

Saves a graph investigation (graph state, notes, annotations and timeline) under your account and returns it with its id. Private unless visibility is link. Up to 1000 cases per account and 2 MB per case. Free; needs a login.

Parameters

Name	Type	Description
title	string	Up to 140 characters.
visibility	string	private (owner only, the default) or link (anyone with the link can read it).One of "private", "link".
graph	object	The visualizer's graph state: nodes with positions, pins, groups, hidden nodes, filters and mode.
notes	string	Markdown notes.
annotations	array of any	[{ id, target: { kind: node, id } \| { kind: edge, key }, text }]
entries	array of any	Manual timeline entries: [{ id, atMs, text }].
flows	array of any	The case's flows for the timeline: [{ key, from, to, fromName, toName, usd, count, coins, firstCheckpoint, lastCheckpoint }]. Times are filled in from the checkpoints.
nodeCount	integer	Visible nodes, shown in the case list.

Request

Send your key in the x-api-key header, or leave it out to use the keyless tier.

curl

curl -X POST "https://api.tide.ad/v1/intel/cases" \
  -H "x-api-key: YOUR_API_KEY" \
  -H "content-type: application/json" \
  -d '{
  "title": "Drained wallet, Nov 3",
  "notes": "Funds left through two hops."
}'

TypeScript

const res = await fetch("https://api.tide.ad/v1/intel/cases", {
  method: "POST",
  headers: {
    "x-api-key": process.env.TIDE_API_KEY!,
    "content-type": "application/json",
  },
  body: JSON.stringify({
    "title": "Drained wallet, Nov 3",
    "notes": "Funds left through two hops."
  }),
});
const data = await res.json();

Response

No example response is available for this method yet.