Get Screenshot / Image

Endpoint

GET https://api.falconfeeds.io/merlin/threat/image

Authentication

Authorization: Bearer <your-api-token>

Query Parameters

Parameter	Type	Required	Description
`uuid`	`string`	Yes	The UUID of the image to retrieve. Image UUIDs are returned in the `images` field of threat feed posts.
`type`	`string`	No	Response format. `base64` (default) returns the image as a base64-encoded string. `blob` returns the raw binary in the response body.

Allowed Values - `type`

base64, blob

Request

curl --location 'https://api.falconfeeds.io/merlin/threat/image?uuid={string}' \
  --header 'Authorization: Bearer <your-api-token>'

As blob:

curl --location 'https://api.falconfeeds.io/merlin/threat/image?uuid={string}&type=blob' \
  --header 'Authorization: Bearer <your-api-token>'

Response

{
  "message": "string",
  "data": {
    "image": "string"
  },
  "next": ""
}

The data.image field contains a base64-encoded string when using the default base64 type. For type=blob, the image binary is returned directly in the response body.

string

Status message from the API.

object

Object containing the image data.

string

Base64-encoded image string. Only present when type=base64.

string

Pagination cursor. Returns an empty string "" for this endpoint.

​Endpoint

​Authentication

​Query Parameters

​Allowed Values - type

​Request

​Response

Endpoint

Authentication

Query Parameters

Allowed Values - `type`

Request

Response