{"command":{"effect":"read","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Lists articles from the account's Threat Signals feeds.","properties":{"path":{"type":"object","properties":{"account_id":{"type":"string"}},"required":["account_id"],"additionalProperties":false},"query":{"type":"object","properties":{"cursor":{"description":"Opaque cursor from a previous response's `next_cursor`. When provided, pagination, ordering, totals, and article filters come from the cursor. Sending `per_page`, `sort`, `include_total`, or any article filter alongside it returns a 400 `CursorFilterConflictError`.","type":"string","minLength":1},"per_page":{"description":"Number of articles per cursor page, from 1 to 100. Defaults to 20.","type":"integer","default":20,"maximum":100,"minimum":1},"feed_id":{"description":"Feed UUID filter. Omit to include articles from every account feed.","type":"string","format":"uuid"},"article_id":{"description":"Repeatable article UUID filter. Returns the union of matching account-owned articles; use this to list every Threat Signals article referenced by an indicator's sources.","type":"array","items":{"format":"uuid","type":"string"},"maxItems":90,"minItems":1,"examples":[["550e8400-e29b-41d4-a716-446655440000","660e8400-e29b-41d4-a716-446655440000"]]},"read":{"description":"Filter by read state. Accepts true, false, 1, or 0; omit to include read and unread articles.","type":"boolean"},"tag_id":{"description":"Repeatable tag UUID filter. An article matches any selected tag.","type":"array","items":{"format":"uuid","type":"string"},"examples":[["550e8400-e29b-41d4-a716-446655440000"]]},"tag_category_id":{"description":"Repeatable tag-category UUID filter. An article matches any selected category; when tag_id is also present, the tag and category groups are ANDed.","type":"array","items":{"format":"uuid","type":"string"},"maxItems":90,"minItems":1,"examples":[["660e8400-e29b-41d4-a716-446655440000"]]},"tag":{"description":"Legacy human-readable tag-value filter. Ignored when tag_id is supplied; prefer tag_id.","type":"string"},"tag_category":{"description":"Legacy category-name disambiguator for tag. It has no effect without tag; prefer tag_category_id.","type":"string"},"include_total":{"description":"When true on the first page, count matching articles and return an exact total. Defaults to false; cursor pages do not recalculate totals.","type":"boolean","default":false},"search":{"description":"NFC-normalized, trimmed literal substring filter on article titles; ASCII case-insensitive, from 1 to 500 characters.","type":"string","maxLength":500,"minLength":1},"published_after":{"description":"Include articles published at or after this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC.","type":"string","format":"date-time"},"published_before":{"description":"Include articles published at or before this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC.","type":"string","format":"date-time"},"fetched_after":{"description":"Include articles fetched at or after this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC.","type":"string","format":"date-time"},"fetched_before":{"description":"Include articles fetched at or before this ISO 8601 date-time with Z or a numeric UTC offset; normalized to UTC.","type":"string","format":"date-time"},"feed_category":{"description":"Exact feed-category filter after trimming. Omit to include every category.","type":"string"},"source_type":{"description":"Filter by curated or custom feed source. Omit to include both source types.","type":"string","enum":["curated","custom"]},"tag_applied_by":{"description":"Assignment provenance filter. When combined with tag_id or tag_category_id, the matching assignment must have this provenance.","type":"string","enum":["ai","analyst","system"]},"pir_id":{"description":"Beta. Active Priority Intelligence Requirement to report, filter, and sort relevance by. Omit to use each article's most relevant active PIR. Returns a 400 error unless the PIR is active.","type":"string","format":"uuid"},"min_relevance":{"description":"Beta. Return only articles at or above this relevance band for pir_id, or for any active PIR when pir_id is omitted. Excludes articles that have not been scored.","type":"string","enum":["low","medium","high"]},"severity":{"description":"Beta. Repeatable intrinsic severity band filter. An article matches any selected band, the band reported as its severity. Excludes articles without a severity. Like the severity field, severity is reported only while the account has an active Priority Intelligence Requirement; otherwise no articles match.","type":"array","items":{"enum":["informational","low","medium","high","critical"],"type":"string"},"maxItems":5,"minItems":1,"examples":[["high","critical"]]},"sort":{"description":"Sort by fetched_at, published_at, title, or relevance (beta). Prefix the field with - for descending order; defaults to -fetched_at. -relevance lists the most relevant articles first, by pir_id or by each article's most relevant active PIR, with unscored articles last.","type":"string","default":"-fetched_at","pattern":"^-?(fetched_at|published_at|title|relevance)$"}},"required":[],"additionalProperties":false}},"required":["path"],"additionalProperties":false},"name":"List Threat Signals articles","id":"cloudflare.rssarticlelist","example":{"path":{"account_id":"example"}},"maxRequests":1,"summary":false}}