Alerts & webhooks

Get pushed new intel and threshold alerts instead of polling. pro

Webhooks

Register an HTTPS endpoint to receive events (e.g. a new Tier-1 mule account).

List the event types you can subscribe to.

List your org's subscriptions.

Create a subscription. Body: { event_type, url }.

curl -X POST -H "Authorization: Bearer $BBO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"event_type":"tier1.mule_account_extracted",
       "url":"https://yourapp.example.com/blackbeard-hook"}' \
  "https://dashboard.martha-honeypot.com/api/webhooks/subscriptions"

Remove a subscription.

Recent delivery attempts (for debugging). Query: limit.

Alerts

Fire when a metric crosses a threshold within a window.

Allowed metrics and delivery channels for alert rules.

List your org's alert rules.

Create a rule. Body: { name, metric, threshold, window_min, channel, target }.

curl -X POST -H "Authorization: Bearer $BBO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"Tier-1 spike","metric":"tier1_calls","threshold":10,
       "window_min":60,"channel":"webhook","target":"https://yourapp.example.com/alert"}' \
  "https://dashboard.martha-honeypot.com/api/alerts/rules"

Delete a rule.

Recent rule firings. Query: limit.

Saved searches

Persist a set of transcript filters for reuse.

Upsert. Body: { id?, name, filters }.