aid: deep-instinct
name: Deep Instinct
description: >-
  Deep Instinct is a preemptive data security company that applies a purpose-built deep learning framework
  (the DSX Brain) to prevent and explain unknown malware, ransomware and zero-day threats in real time,
  without signatures, heuristics, cloud lookups or external threat feeds. Its DSX platform protects data
  across cloud storage, network-attached storage (Dell CAVA, NetApp Vscan), applications and endpoints,
  and pairs the prevention engine with DSX Companion (DIANNA), a GenAI analysis assistant that produces
  human-readable explanations of novel attacks for SOC triage. The DSX management console (D-Appliance)
  exposes a versioned REST API at /api/v1 for device, group, policy, event, hash allow/block-list, remote
  remediation and audit-log automation, and Deep Instinct's customer portal now also fronts an
  OAuth-protected MCP server for agent access to portal content.
image: https://www.deepinstinct.com/image/bltefff210f63a383a8/68937a472607b85c9942030a/Meta_Home_1200_x_627.png
url: https://raw.githubusercontent.com/api-evangelist/deep-instinct/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
x-harvest-source-url: https://forgeglobal.com/deep-instinct_stock/
specificationVersion: '0.21'
created: '2026-08-01'
modified: '2026-08-01'
tags:
- cybersecurity
- endpoint-security
- malware-prevention
- ransomware
- deep-learning
- threat-prevention
- data-security
- edr
- soc-automation
- mcp
apis:
- name: Deep Instinct DSX Management REST API
  description: >-
    Versioned REST API exposed by the Deep Instinct DSX management console (D-Appliance) at
    https://<your-tenant-fqdn>/api/v1. Covers devices, device groups, policies, events (including the
    JSON event-search method /api/v1/events/search), hash allow/block lists, remote file deletion and
    process termination, exclusions, licensing and audit logs. Authentication is an API key issued in the
    console and sent on the request. The API and its interactive documentation are served from each
    customer's own tenant host, so neither the docs nor a machine-readable specification are reachable
    anonymously on the public internet.
  humanURL: https://portal.deepinstinct.com/
  baseURL: https://your-tenant.customers.deepinstinctweb.com/api/v1
  tags:
  - cybersecurity
  - endpoint-security
  - threat-prevention
  - soc-automation
  - edr
  properties:
  - type: Authentication
    url: authentication/deep-instinct-authentication.yml
  - type: Conventions
    url: conventions/deep-instinct-conventions.yml
  - type: Lifecycle
    url: lifecycle/deep-instinct-lifecycle.yml
- name: Deep Instinct Portal MCP Server
  description: >-
    Model Context Protocol server hosted on Deep Instinct's customer portal at
    https://portal.deepinstinct.com/mcp, advertised through RFC 9728 protected-resource metadata and an
    RFC 8414 authorization-server document on the same host. Access is OAuth 2.1 (authorization code +
    PKCE S256, refresh tokens, dynamic client registration) scoped by mcp:read and mcp:write. An
    anonymous tools/list call is refused with "MCP is not available for guest users", so the live tool
    schemas require an authenticated portal session.
  humanURL: https://portal.deepinstinct.com/mcp
  baseURL: https://portal.deepinstinct.com/mcp
  tags:
  - mcp
  - agent-native
  - cybersecurity
  properties:
  - type: MCPServer
    url: mcp/deep-instinct-mcp.yml
  - type: MCP
    url: https://portal.deepinstinct.com/mcp
  - type: OAuthScopes
    url: scopes/deep-instinct-scopes.yml
  - type: Authentication
    url: authentication/deep-instinct-authentication.yml
  - type: WellKnown
    url: well-known/deep-instinct-well-known.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.deepinstinct.com/
- type: DeveloperPortal
  url: https://portal.deepinstinct.com/
- type: Support
  url: https://www.deepinstinct.com/contact-us
- type: Blog
  url: https://www.deepinstinct.com/blog
- type: BlogRSS
  url: https://www.deepinstinct.com/blog/feed
- type: GitHubOrganization
  url: https://github.com/deepinstinct
- type: SignUp
  url: https://www.deepinstinct.com/request-a-demo
- type: Login
  url: https://portal.deepinstinct.com/
- type: TermsOfService
  url: https://www.deepinstinct.com/terms-of-use
- type: PrivacyPolicy
  url: https://www.deepinstinct.com/privacy-policy
- type: Compliance
  url: https://www.deepinstinct.com/compliance-certification-evaluation
- type: MCPServer
  url: mcp/deep-instinct-mcp.yml
- type: OAuthScopes
  url: scopes/deep-instinct-scopes.yml
- type: Authentication
  url: authentication/deep-instinct-authentication.yml
- type: WellKnown
  url: well-known/deep-instinct-well-known.yml
- type: Conventions
  url: conventions/deep-instinct-conventions.yml
- type: Conformance
  url: conformance/deep-instinct-conformance.yml
- type: Lifecycle
  url: lifecycle/deep-instinct-lifecycle.yml
- type: TrustCenter
  url: security/deep-instinct-trust-center.yml
- type: DomainSecurity
  url: security/deep-instinct-domain-security.yml
- type: Packages
  url: packages/deep-instinct-packages.yml
- type: ErrorCatalog
  url: errors/deep-instinct-problem-types.yml
- type: LLMsTxt
  url: llms/deep-instinct-llms.txt
x-enrichment:
  date: '2026-08-01'
  status: enriched
  artifacts_added: 14
  pass: local-v1