> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pulsedive.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Feed by ID

> Retrieve detailed threat intelligence information for a specific feed by looking up the feed's unique identifier.




## OpenAPI

````yaml /api/feed/feed-by-id.yaml get /api/feed.php
openapi: 3.0.3
info:
  title: Pulsedive API Reference
  version: 1.0.0
  description: >
    The Pulsedive API lets you programmatically manage resources within
    Pulsedive.

    Users can look up known indicators and threats, enrich and investigate
    indicators, query Pulsedive data, and automate workflows.


    Please report any discrepancies in API behavior to <a
    href="mailto:support@pulsedive.com">Pulsedive Support</a>.
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0.html
  contact:
    email: support@pulsedive.com
servers:
  - url: https://pulsedive.com
security: []
tags:
  - name: Feeds
    description: Look up feeds.
externalDocs:
  url: https://docs.pulsedive.com
paths:
  /api/feed.php:
    get:
      tags:
        - Feeds
      summary: Get Feed by ID
      description: >
        Retrieve detailed threat intelligence information for a specific feed by
        looking up the feed's unique identifier.
      operationId: getFeedbyID
      parameters:
        - $ref: '#/components/parameters/APIKey'
        - $ref: '#/components/parameters/FeedID'
        - $ref: '#/components/parameters/Pretty'
      responses:
        '200':
          description: Successful request. Returns feed information in JSON format.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FeedResponse'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
        '429':
          $ref: '#/components/responses/TooManyRequests'
        '500':
          $ref: '#/components/responses/InternalServerError'
      x-codeSamples:
        - lang: curl
          label: Get by ID
          source: |
            curl "https://pulsedive.com/api/feed.php?fid=1"
components:
  parameters:
    APIKey:
      name: key
      in: query
      required: false
      description: >
        Your Pulsedive API key.


        API key authentication is optional. However, requests without a key have
        stricter rate limits. We recommend including an API key for better
        performance and reliability.
      schema:
        type: string
    FeedID:
      name: fid
      in: query
      required: true
      description: |
        Unique identifier of the feed to retrieve.
      schema:
        type: string
      example: '1'
    Pretty:
      name: pretty
      in: query
      required: false
      description: |
        Indicates whether to format returned JSON results.

        For pretty-printed output, set to `1`.
        For compact output, set to `0`.
      schema:
        type: integer
        enum:
          - 0
          - 1
        default: 0
      examples:
        compact:
          summary: Compact output
          value: 0
        pretty:
          summary: Pretty-printed output
          value: 1
  schemas:
    FeedResponse:
      type: object
      properties:
        fid:
          type: integer
          description: Unique identifier of the feed.
          nullable: false
        feed:
          type: string
          description: Name of the feed being retrieved.
        organization:
          type: string
          description: Organization associated with the feed being retrieved.
        category:
          type: string
          description: Category assigned to the feed.
          example: malware
        pricing:
          type: string
          description: Pricing tier of the feed.
          example: free
        contact:
          type: object
          description: Contact information for the feed.
          properties:
            name:
              type: string
              description: Name of the contact.
              example: abuse.ch team
            email:
              type: string
              description: Email address for the contact.
              example: contact@abuse.ch
            phone:
              type: string
              description: Phone number for the contact.
              example: 212-555-0123
        website:
          type: string
          description: URL of the feed.
          example: https://abuse.ch
        schedule:
          type: string
          description: Update schedule for the feed.
          example: daily
        stamp_added:
          type: string
          format: sql-date-time
          pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$
          description: >
            Timestamp when the feed was first added to Pulsedive. 24-hour
            format, UTC time zone.
          nullable: true
          example: '2025-05-19 14:23:45'
        stamp_updated:
          type: string
          format: sql-date-time
          pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$
          description: >
            Timestamp when the feed record was last updated in Pulsedive.
            24-hour format, UTC time zone.
          nullable: true
          example: '2025-05-19 14:23:45'
        stamp_pulled:
          type: string
          format: sql-date-time
          pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$
          description: >
            Timestamp when the feed record was last pulled in Pulsedive. 24-hour
            format, UTC time zone.
          nullable: true
          example: '2025-05-19 14:23:45'
        stamp_modified:
          type: string
          format: sql-date-time
          pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$
          description: >
            Timestamp when the feed record was last modified in Pulsedive.
            24-hour format, UTC time zone.
          nullable: true
          example: '2025-05-19 14:23:45'
        description:
          type: string
          description: Description of the feed.
          example: List of domains used by Zeus.
        accesslink:
          type: string
          description: Link to access the feed.
          example: https://abuse.ch
        indicators:
          type: object
          description: >
            Keyed object representing the count of each type of indicator in the
            feed.


            Each {key} matches an indicator risk level and its value contains
            the corresponding count.
          example:
            unknown: 0
            low: 2
            medium: 2
            high: 2
            critical: 1
            retired: 100
            total: 108
            none: 1
        summary:
          type: object
          description: Summary information about the feed.
          properties:
            properties:
              type: object
              description: Additional properties.
            attributes:
              type: object
              description: Summary attributes for the feed.
              properties:
                technology:
                  type: object
                  description: Technologies identified.
                  additionalProperties:
                    type: object
                    description: >
                      Dynamic keyed object representing a single technology and
                      its properties.


                      Each {key} represents the name of the technology.
                    properties:
                      aid:
                        type: integer
                        description: Attribute identifier.
                        example: 65110
                      indicators:
                        type: integer
                        description: Number of indicators.
                        example: 4
                protocol:
                  type: object
                  description: Protocols identified.
                  additionalProperties:
                    type: object
                    description: >
                      Dynamic keyed object representing a single protocol and
                      its properties.


                      Each {key} represents the name of the protocol.
                    properties:
                      indicators:
                        type: integer
                        description: Number of indicators.
                        example: 8
                      aid:
                        type: integer
                        description: Attribute identifier.
                        example: 5
                port:
                  type: object
                  description: Ports identified.
                  additionalProperties:
                    type: object
                    description: >
                      Dynamic keyed object representing a single port and its
                      properties.


                      Each {key} represents the number of the port.
                    properties:
                      indicators:
                        type: integer
                        description: Number of indicators.
                        example: 7
                      aid:
                        type: integer
                        description: Attribute identifier.
                        example: 6
            threats:
              type: array
              description: Known threats associated with this indicator.
              items:
                type: object
                properties:
                  indicators:
                    type: integer
                    description: Count of indicators associated with the threat.
                  tid:
                    type: integer
                    description: Unique identifier of the threat.
                  category:
                    type: string
                    description: Category assigned to the threat.
                    example: malware
                  stamp_updated:
                    type: string
                    format: sql-date-time
                    pattern: ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$
                    description: >
                      Timestamp when the threat record was last updated in
                      Pulsedive. 24-hour format, UTC time zone.
                    nullable: true
                    example: '2025-05-19 14:23:45'
                  risk:
                    type: string
                    description: Risk level associated with the threat.
                    enum:
                      - unknown
                      - very low
                      - low
                      - medium
                      - high
                      - critical
                      - retired
                      - none
                  name:
                    type: string
                    description: Name of the threat.
                    example: Zeus
            risk:
              type: object
              description: >
                Count of indicators at each risk level in the feed.


                Consists of key-value pairs, where each key matches an indicator
                risk level and its value contains the corresponding count.
              example:
                unknown: 0
                low: 2
                medium: 2
                high: 2
                critical: 1
                retired: 100
                total: 108
                none: 1
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
          description: Message describing the error that occurred, if available.
  responses:
    BadRequest:
      description: |
        Bad request. The request was malformed or missing required parameters.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    Unauthorized:
      description: |
        Unauthorized. Your API key is missing or invalid.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    NotFound:
      description: |
        Not found. The requested indicator could not be located.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    TooManyRequests:
      description: >
        Rate limit exceeded. Too many requests have been made in a short period
        of time.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    InternalServerError:
      description: |
        Server error. An unexpected problem occurred on our end.
        These errors are automatically reported to our team.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'

````