🔥 InfraFusion Threat Fusion API

Real-time threat scoring engine for critical infrastructure. Fuse weather, cyber, physical, and operational signals into a unified risk assessment.

📋 Subscription Tiers

Feature	BASIC (Free)	PRO	ULTRA	MEGA
Monthly Requests	100	20,000	100,000	500,000
Rate Limit	10/min	100/min	500/min	1,000/min
Data Retention	7 days	180 days	365 days	365 days
/fuse	✅	✅	✅	✅
/v2-fuse	✅	✅	✅	✅
/get-fuse-result	❌	✅	✅	✅
/asset-history	❌	✅	✅	✅
/simulate	❌	✅	✅	✅
/fuse-bulk	❌	❌	✅	✅
/forecast	❌	❌	✅	✅
/trends	❌	❌	✅	✅
/weight-profiles	❌	❌	❌	✅
/webhooks	❌	❌	❌	✅

🔑 Threat Bands

Band	Score Range	Recommended Action
LOW	0-24	Continue standard monitoring
MEDIUM	25-49	Increase monitoring frequency
HIGH	50-74	Escalate to operations team
CRITICAL	75-100	Immediate intervention required

🏥 GET /health

Tier: All (No authentication required)

Description: Check API status and version

Response

{
  "status": "healthy",
  "version": "1.0.0",
  "timestamp": "2026-02-02T03:20:00Z",
  "service": "InfraFusion Threat Fusion API"
}

🔥 POST /fuse

Tier: BASIC and above

Description: Core threat fusion - analyze an asset with multi-domain signals

Request Body

{
  "asset": {
    "assetId": "substation-alpha-001",
    "assetType": "substation",
    "geo": { "lat": 29.7604, "lng": -95.3698 },
    "criticality": 0.85,
    "region": "TX-HOU"
  },
  "timeWindow": {
    "start": "2026-02-01T00:00:00Z",
    "end": "2026-02-02T00:00:00Z"
  },
  "signals": {
    "weather": {
      "severity": 0.6,
      "type": "storm",
      "windMph": 45,
      "floodRisk": 0.3
    },
    "cyber": {
      "failedLogins": 25,
      "newDevices": 2,
      "malwareAlerts": 0,
      "networkAnomaly": 0.15
    },
    "physical": {
      "perimeterBreaches": 0,
      "cameraOutages": 1,
      "unattendedAccess": 0
    },
    "ops": {
      "sensorOutages": 2,
      "maintenanceMode": false,
      "scadaAlerts": 1
    }
  }
}

Response

{
  "requestId": "if_abc123xyz",
  "overallThreatScore": 42,
  "threatBand": "MEDIUM",
  "components": {
    "weatherScore": 51,
    "cyberScore": 28,
    "physicalScore": 8,
    "opsScore": 15,
    "geoScore": 63,
    "cascadingRiskScore": 10
  },
  "flags": ["SEVERE_WEATHER_ALERT"],
  "explanations": [
    "Weather conditions pose significant risk with storm conditions and 30% flood probability."
  ],
  "recommendedActions": [
    { "action": "Activate severe weather protocols", "priority": "high" }
  ],
  "meta": {
    "processingTimeMs": 45,
    "engineVersion": "1.0.0"
  }
}

⚡ POST /v2-fuse

Tier: BASIC and above

Description: Enhanced fusion with idempotency support and strict validation

Optional Header

Idempotency-Key: my-unique-request-key-001

Request Body

{
  "asset": {
    "assetId": "pipeline-segment-042",
    "assetType": "pipeline",
    "geo": { "lat": 30.2672, "lng": -97.7431 },
    "criticality": 0.9,
    "region": "TX-HOU"
  },
  "timeWindow": {
    "start": "2026-02-01T00:00:00Z",
    "end": "2026-02-02T00:00:00Z"
  },
  "signals": {
    "weather": {
      "severity": 0.4,
      "type": "clear",
      "windMph": 12,
      "floodRisk": 0.1
    },
    "cyber": {
      "failedLogins": 5,
      "newDevices": 0,
      "malwareAlerts": 0,
      "networkAnomaly": 0.05
    },
    "physical": {
      "perimeterBreaches": 0,
      "cameraOutages": 0,
      "unattendedAccess": 0
    },
    "ops": {
      "sensorOutages": 0,
      "maintenanceMode": false,
      "scadaAlerts": 0
    }
  }
}

Response

{
  "requestId": "if_def456uvw",
  "overallThreatScore": 28,
  "threatBand": "MEDIUM",
  "components": {
    "weatherScore": 25,
    "cyberScore": 6,
    "physicalScore": 0,
    "opsScore": 0,
    "geoScore": 66,
    "cascadingRiskScore": 6
  },
  "flags": [],
  "explanations": [
    "Threat levels within acceptable parameters. Continue standard monitoring."
  ],
  "recommendedActions": [
    { "action": "Continue standard monitoring protocols", "priority": "low" }
  ],
  "meta": {
    "processingTimeMs": 38,
    "engineVersion": "2.0.0",
    "apiVersion": "v2"
  }
}

📦 GET /get-fuse-result/{requestId}

Tier: PRO and above

Description: Retrieve a previously stored fusion result by request ID

Request

GET /get-fuse-result/if_abc123xyz

Response

{
  "requestId": "if_abc123xyz",
  "overallThreatScore": 42,
  "threatBand": "MEDIUM",
  "components": { ... },
  "flags": [...],
  "explanations": [...],
  "recommendedActions": [...],
  "meta": { ... }
}

📊 GET /asset-history

Tier: PRO and above

Description: Retrieve historical threat data for a specific asset

Query Parameters

assetId	Required. The asset identifier
start	Optional. ISO 8601 start date
end	Optional. ISO 8601 end date
period	Optional. "hourly" or "daily" (default: daily)

Request

GET /asset-history?assetId=substation-alpha-001&start=2026-01-01T00:00:00Z&end=2026-02-01T00:00:00Z

Response

{
  "assetId": "substation-alpha-001",
  "history": [
    {
      "timestamp": "2026-01-15T12:00:00Z",
      "requestId": "if_abc123",
      "overallScore": 38,
      "band": "MEDIUM",
      "componentScores": {
        "weather": 42,
        "cyber": 28,
        "physical": 12,
        "ops": 18,
        "geo": 55,
        "cascading": 15
      }
    }
  ],
  "trend": {
    "direction": "stable",
    "averageScore": 35,
    "minScore": 18,
    "maxScore": 62,
    "dataPoints": 45,
    "periodStart": "2026-01-01T00:00:00Z",
    "periodEnd": "2026-02-01T00:00:00Z"
  },
  "meta": {
    "period": "daily",
    "retentionDays": 180,
    "planName": "pro"
  }
}

🔮 POST /simulate

Tier: PRO and above

Description: What-if scenario modeling - compare baseline vs modified conditions

Request Body

{
  "baseline": {
    "asset": {
      "assetId": "substation-alpha-001",
      "assetType": "substation",
      "geo": { "lat": 29.7604, "lng": -95.3698 },
      "criticality": 0.85,
      "region": "TX-HOU"
    },
    "signals": {
      "weather": { "severity": 0.3, "type": "clear", "windMph": 15, "floodRisk": 0.1 },
      "cyber": { "failedLogins": 10, "newDevices": 1, "malwareAlerts": 0, "networkAnomaly": 0.05 },
      "physical": { "perimeterBreaches": 0, "cameraOutages": 0, "unattendedAccess": 0 },
      "ops": { "sensorOutages": 1, "maintenanceMode": false, "scadaAlerts": 0 }
    }
  },
  "modified": {
    "signals": {
      "weather": { "severity": 0.9, "windMph": 85, "floodRisk": 0.7 },
      "cyber": { "malwareAlerts": 2 }
    }
  }
}

Response

{
  "baseline": {
    "overallThreatScore": 28,
    "threatBand": "MEDIUM",
    "components": {
      "weatherScore": 22,
      "cyberScore": 15,
      "physicalScore": 0,
      "opsScore": 4,
      "geoScore": 63,
      "cascadingRiskScore": 6
    }
  },
  "modified": {
    "overallThreatScore": 68,
    "threatBand": "HIGH",
    "components": {
      "weatherScore": 85,
      "cyberScore": 43,
      "physicalScore": 0,
      "opsScore": 4,
      "geoScore": 63,
      "cascadingRiskScore": 45
    }
  },
  "delta": {
    "overallScore": 40,
    "components": {
      "weatherScore": 63,
      "cyberScore": 28,
      "physicalScore": 0,
      "opsScore": 0,
      "geoScore": 0,
      "cascadingRiskScore": 39
    },
    "bandChange": { "from": "MEDIUM", "to": "HIGH" },
    "impact": "significant_increase"
  },
  "meta": {
    "processingTimeMs": 52,
    "engineVersion": "2.0.0",
    "apiVersion": "v2"
  }
}

📦 POST /fuse-bulk

Tier: ULTRA and above

Description: Batch process up to 50 assets in a single request

Request Body

{
  "requests": [
    {
      "asset": {
        "assetId": "substation-001",
        "assetType": "substation",
        "geo": { "lat": 29.76, "lng": -95.37 },
        "criticality": 0.8,
        "region": "TX-HOU"
      },
      "timeWindow": {
        "start": "2026-02-01T00:00:00Z",
        "end": "2026-02-02T00:00:00Z"
      },
      "signals": {
        "weather": { "severity": 0.3, "type": "clear", "windMph": 10, "floodRisk": 0.1 },
        "cyber": { "failedLogins": 5, "newDevices": 0, "malwareAlerts": 0, "networkAnomaly": 0.02 },
        "physical": { "perimeterBreaches": 0, "cameraOutages": 0, "unattendedAccess": 0 },
        "ops": { "sensorOutages": 0, "maintenanceMode": false, "scadaAlerts": 0 }
      }
    },
    {
      "asset": {
        "assetId": "substation-002",
        "assetType": "substation",
        "geo": { "lat": 30.27, "lng": -97.74 },
        "criticality": 0.9,
        "region": "TX-HOU"
      },
      "timeWindow": {
        "start": "2026-02-01T00:00:00Z",
        "end": "2026-02-02T00:00:00Z"
      },
      "signals": {
        "weather": { "severity": 0.7, "type": "storm", "windMph": 55, "floodRisk": 0.4 },
        "cyber": { "failedLogins": 50, "newDevices": 3, "malwareAlerts": 1, "networkAnomaly": 0.3 },
        "physical": { "perimeterBreaches": 1, "cameraOutages": 2, "unattendedAccess": 0 },
        "ops": { "sensorOutages": 3, "maintenanceMode": false, "scadaAlerts": 2 }
      }
    }
  ]
}

Response

{
  "results": [
    {
      "requestId": "if_bulk001",
      "assetId": "substation-001",
      "overallScore": 22,
      "threatBand": "LOW",
      "components": { ... }
    },
    {
      "requestId": "if_bulk002",
      "assetId": "substation-002",
      "overallScore": 71,
      "threatBand": "HIGH",
      "components": { ... }
    }
  ],
  "summary": {
    "totalProcessed": 2,
    "averageScore": 47,
    "bandDistribution": { "LOW": 1, "MEDIUM": 0, "HIGH": 1, "CRITICAL": 0 }
  },
  "meta": {
    "processingTimeMs": 125,
    "engineVersion": "1.0.0"
  }
}

📈 GET /forecast

Tier: ULTRA and above

Description: Predictive threat forecasting based on historical patterns

Query Parameters

assetId	Required. The asset identifier
horizon	Optional. "24h", "48h", or "72h" (default: 24h)

Request

GET /forecast?assetId=substation-alpha-001&horizon=24h

Response

{
  "assetId": "substation-alpha-001",
  "horizon": "24h",
  "predictions": [
    {
      "timestamp": "2026-02-02T04:00:00Z",
      "predictedScore": 42,
      "confidence": { "low": 35, "high": 49 },
      "predictedBand": "MEDIUM",
      "riskFactors": ["Normal conditions expected"]
    },
    {
      "timestamp": "2026-02-02T07:00:00Z",
      "predictedScore": 45,
      "confidence": { "low": 37, "high": 53 },
      "predictedBand": "MEDIUM",
      "riskFactors": ["Upward trend detected in recent data"]
    }
  ],
  "trend": {
    "direction": "stable",
    "recentAverage": 38,
    "historicalAverage": 40
  },
  "meta": {
    "modelVersion": "1.0.0",
    "dataPointsUsed": 127,
    "accuracy": 85,
    "generatedAt": "2026-02-02T03:00:00Z",
    "planName": "business"
  }
}

📊 GET /trends

Tier: ULTRA and above

Description: Aggregate analytics with anomaly detection

Query Parameters

days	Optional. Number of days to analyze (default: 30)
groupBy	Optional. "day" or "week" (default: day)

Request

GET /trends?days=30&groupBy=day

Response

{
  "trends": [
    {
      "date": "2026-01-15",
      "averageScore": 38,
      "requestCount": 145,
      "bandDistribution": { "LOW": 82, "MEDIUM": 45, "HIGH": 15, "CRITICAL": 3 }
    }
  ],
  "componentTrends": [
    { "component": "weather", "averageScore": 32, "trend": "up", "changePercent": 12 },
    { "component": "cyber", "averageScore": 28, "trend": "stable", "changePercent": 2 },
    { "component": "physical", "averageScore": 15, "trend": "down", "changePercent": -8 },
    { "component": "ops", "averageScore": 22, "trend": "stable", "changePercent": 0 }
  ],
  "anomalies": [
    {
      "timestamp": "2026-01-20T14:30:00Z",
      "assetId": "substation-003",
      "score": 92,
      "deviation": 3.2,
      "type": "high_score"
    }
  ],
  "regionClusters": [
    { "region": "TX-HOU", "requestCount": 1250, "averageScore": 42 },
    { "region": "LA-NOLA", "requestCount": 890, "averageScore": 55 }
  ],
  "meta": {
    "days": 30,
    "totalRequests": 4280,
    "meanScore": 38,
    "stdDeviation": 18,
    "planName": "business"
  }
}

⚖️ /weight-profiles

Tier: MEGA only

Description: Custom scoring weight profiles for organization-specific risk models

GET - List Profiles

GET /weight-profiles

Response

{
  "profiles": [
    {
      "id": "uuid-123",
      "name": "Hurricane Season",
      "description": "Elevated weather weighting for Gulf Coast operations",
      "weights_json": {
        "weather": 0.35,
        "cyber": 0.20,
        "physical": 0.10,
        "ops": 0.10,
        "geo": 0.10,
        "cascading": 0.15
      },
      "is_default": true,
      "created_at": "2026-01-01T00:00:00Z"
    }
  ],
  "defaultWeights": {
    "weather": 0.20,
    "cyber": 0.25,
    "physical": 0.15,
    "ops": 0.15,
    "geo": 0.10,
    "cascading": 0.15
  }
}

POST - Create Profile

POST /weight-profiles

{
  "name": "Hurricane Season",
  "description": "Elevated weather and ops weights for storm season",
  "weights": {
    "weather": 0.35,
    "cyber": 0.15,
    "physical": 0.10,
    "ops": 0.25,
    "geo": 0.05,
    "cascading": 0.10
  }
}

PUT - Update Profile

PUT /weight-profiles?id={profileId}

{
  "name": "Updated Name",
  "weights": { ... },
  "is_default": true
}

DELETE - Delete Profile

DELETE /weight-profiles?id={profileId}

🔔 /webhooks

Tier: MEGA only

Description: Real-time event notifications to your endpoints

Available Events

fuse.completed	Triggered after every fusion request
fuse.critical	Triggered when threat band is CRITICAL
quota.warning	Triggered at 80% quota usage
quota.exceeded	Triggered when quota is exhausted

GET - List Webhooks

GET /webhooks

Response

{
  "webhooks": [
    {
      "id": "uuid-456",
      "name": "Critical Alerts",
      "url": "https://your-endpoint.com/webhook",
      "events": ["fuse.critical"],
      "secret": "whsec_abcd...xyz",
      "is_active": true,
      "webhook_logs": [
        {
          "id": "log-001",
          "event_type": "fuse.critical",
          "status_code": 200,
          "delivered_at": "2026-02-01T15:30:00Z"
        }
      ]
    }
  ],
  "availableEvents": ["fuse.completed", "fuse.critical", "quota.warning", "quota.exceeded"]
}

POST - Create Webhook

POST /webhooks

{
  "name": "All Events",
  "url": "https://your-endpoint.com/infrafusion-webhook",
  "events": ["fuse.completed", "fuse.critical"],
  "headers_json": {
    "X-Custom-Header": "my-value"
  }
}

PUT - Update Webhook

PUT /webhooks?id={webhookId}

{
  "name": "Updated Name",
  "events": ["fuse.critical"],
  "is_active": false,
  "rotate_secret": true
}

DELETE - Delete Webhook

DELETE /webhooks?id={webhookId}

❌ Error Codes

HTTP Status	Code	Description
400	INVALID_REQUEST	Malformed request body or missing fields
400	VALIDATION_ERROR	Field validation failed (check details array)
400	LIMIT_EXCEEDED	Bulk request exceeds 50 item limit
401	UNAUTHORIZED	Invalid or missing authentication
403	PLAN_REQUIRED	Feature not available on current tier
403	FORBIDDEN	Access denied to requested resource
404	NOT_FOUND	Requested resource does not exist
405	METHOD_NOT_ALLOWED	HTTP method not supported for endpoint
410	RESULT_EXPIRED	Result exceeded retention period
429	QUOTA_EXCEEDED	Monthly request quota exhausted
500	INTERNAL_ERROR	Server error - contact support

📡 Signal Schema Reference

Weather Signals

severity	number	0-1 scale (0=clear, 1=severe)
type	string	"clear", "storm", "hurricane", "tornado", etc.
windMph	number	Wind speed in miles per hour
floodRisk	number	0-1 probability of flooding

Cyber Signals

failedLogins	number	Count of failed login attempts
newDevices	number	New devices detected on network
malwareAlerts	number	Active malware detections
networkAnomaly	number	0-1 anomaly confidence score

Physical Signals

perimeterBreaches	number	Count of perimeter violations
cameraOutages	number	Non-functional security cameras
unattendedAccess	number	Unauthorized access events

Ops Signals

sensorOutages	number	Non-reporting sensors
maintenanceMode	boolean	Asset in maintenance window
scadaAlerts	number	SCADA system alerts

🌎 Supported Regions

TX-HOU	Houston, Texas	Base risk: 0.6
LA-NOLA	New Orleans, Louisiana	Base risk: 0.8
VA-DC	Washington D.C. Area	Base risk: 0.4
CA-LA	Los Angeles, California	Base risk: 0.5
FL-MIA	Miami, Florida	Base risk: 0.7

Other regions default to base risk of 0.3