Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Tool → Update
AI-generatedSummary
Update an existing openCTI tool by merging supplied fields into the tool record
Inputs
- toolId (required) — Unique identifier of the tool to update
- updateFields — Collection of fields to apply to the tool; each field includes a name and optional configuration such as description or type settings
Output shape
a single updated Tool object
The response returns the updated tool's attributes; may include an error field if validation fails
Examples
Example 1: Refresh the description and version of a tool named "Python SDK"
toolId: "python-sdk"\nupdateFields: {"description": "Updated Python SDK documentation", "tool_version": "2.5.0"}