curl --request GET \
--url https://api.wirespeed.co/v1/team \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.wirespeed.co/v1/team"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.wirespeed.co/v1/team', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.wirespeed.co/v1/team",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.wirespeed.co/v1/team"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.wirespeed.co/v1/team")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.wirespeed.co/v1/team")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "<string>",
"name": "<string>",
"enabled": true,
"demo": true,
"refreshable": true,
"testMode": true,
"chatOpsEscalationDelayMinutes": 123,
"monitorHours": 123,
"identityAutoContainment": true,
"endpointAutoContainment": true,
"fileAutoContainment": true,
"escalationEmails": [
"<string>"
],
"escalationSubscriptionEmails": [
"<string>"
],
"logoUrl": "<string>",
"chatOpsSecondFactor": true,
"chatOpsAutoExclusion": true,
"chatOpsAccountLockedMessage": "<string>",
"createdAt": "<string>",
"richCaseNotifications": true,
"emailSignature": "<string>",
"chatOpsSubjectLine": "<string>",
"autoSubscribeServiceProviderUsers": true,
"sku": "identity",
"addOns": [
"data"
],
"isTrial": true,
"skipThirdPartyManagedSourceUpdates": true,
"onboardingChecklistCompleted": true,
"onboardingChecklistDismissed": true,
"askForG2Review": true,
"remediationManualUiEnabled": true,
"chatOpsWelcomeMessage": "<string>",
"platformName": "<string>",
"maxChatOpsPerDay": 123,
"maxAutoContainmentsPerDay": 123,
"escalationSubjectLine": "<string>",
"chatOpsWelcomeMessageInherited": true,
"emailSignatureInherited": true,
"chatOpsSubjectLineInherited": true,
"chatOpsAccountLockedMessageInherited": true,
"domain": "<string>",
"serviceProvider": true,
"parentTeamName": "<string>",
"parentTeamId": "<string>",
"parentServiceProvider": true,
"operatingTeam": true,
"useChatOpsOnboardingGroup": true,
"chatOpsAllowBulkSmsInvite": true,
"billableUsers": 123,
"billableEndpoints": 123,
"dataStorageGb": 123,
"teamMembers": 123,
"supportEmail": "<string>",
"address": "<string>",
"skuStartDate": "<string>",
"skuEndDate": "<string>"
}{
"message": "<string>",
"statusCode": 123
}Get current team information
curl --request GET \
--url https://api.wirespeed.co/v1/team \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.wirespeed.co/v1/team"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.wirespeed.co/v1/team', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.wirespeed.co/v1/team",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.wirespeed.co/v1/team"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.wirespeed.co/v1/team")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.wirespeed.co/v1/team")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "<string>",
"name": "<string>",
"enabled": true,
"demo": true,
"refreshable": true,
"testMode": true,
"chatOpsEscalationDelayMinutes": 123,
"monitorHours": 123,
"identityAutoContainment": true,
"endpointAutoContainment": true,
"fileAutoContainment": true,
"escalationEmails": [
"<string>"
],
"escalationSubscriptionEmails": [
"<string>"
],
"logoUrl": "<string>",
"chatOpsSecondFactor": true,
"chatOpsAutoExclusion": true,
"chatOpsAccountLockedMessage": "<string>",
"createdAt": "<string>",
"richCaseNotifications": true,
"emailSignature": "<string>",
"chatOpsSubjectLine": "<string>",
"autoSubscribeServiceProviderUsers": true,
"sku": "identity",
"addOns": [
"data"
],
"isTrial": true,
"skipThirdPartyManagedSourceUpdates": true,
"onboardingChecklistCompleted": true,
"onboardingChecklistDismissed": true,
"askForG2Review": true,
"remediationManualUiEnabled": true,
"chatOpsWelcomeMessage": "<string>",
"platformName": "<string>",
"maxChatOpsPerDay": 123,
"maxAutoContainmentsPerDay": 123,
"escalationSubjectLine": "<string>",
"chatOpsWelcomeMessageInherited": true,
"emailSignatureInherited": true,
"chatOpsSubjectLineInherited": true,
"chatOpsAccountLockedMessageInherited": true,
"domain": "<string>",
"serviceProvider": true,
"parentTeamName": "<string>",
"parentTeamId": "<string>",
"parentServiceProvider": true,
"operatingTeam": true,
"useChatOpsOnboardingGroup": true,
"chatOpsAllowBulkSmsInvite": true,
"billableUsers": 123,
"billableEndpoints": 123,
"dataStorageGb": 123,
"teamMembers": 123,
"supportEmail": "<string>",
"address": "<string>",
"skuStartDate": "<string>",
"skuEndDate": "<string>"
}{
"message": "<string>",
"statusCode": 123
}Authorizations
Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.
Response
Unique identifier for the team
Name of the team
Whether the team is operational
Whether this is a demo team
Whether this demo team is automatically deleted and recreated weekly
Whether the team is in test mode
Delay in minutes before escalating ChatOps failures
How long monitors run for this team, in hours
Whether automatic identity containment is enabled
Whether automatic endpoint containment is enabled
Whether automatic file containment is enabled
Deprecated — escalation emails are now stored in notification_subscription. Use GET /notification/subscription/team-channel?type=NEW_CASE_ESCALATION instead. Removal scheduled for 2026-09-20.
Lists new case escalation subscription emails for this team: the team's own emails plus any emails inherited from the parent Service Provider.
URL of the team logo
Whether ChatOps requires second factor authentication
Whether benign ChatOps confirmations automatically create exclusions
Message to display when ChatOps account is locked
Timestamp when the team was created
Deprecated — escalation rich-formatting is now stored per recipient in notification_subscription. Removal scheduled for 2026-09-20.
Signature for ChatOps communications
Subject line for ChatOps communications
Whether to auto-subscribe service provider users to notifications for this team
Subscription SKU tier for the team
identity, adr Active add-on SKUs for the team
data Whether this team is a proof-of-value trial
Whether to skip source system updates for detections managed by a third party (e.g. Falcon Complete)
Whether the team has completed the onboarding checklist
Whether the team has dismissed the onboarding checklist from the homepage
Whether to prompt for a G2 review after a happy case close. Cleared when anyone on the team writes or dismisses the prompt.
Whether manual remediation preview/create UI is enabled for this environment
Welcome message for ChatOps workflows
Platform name to use for service provider clients
Maximum ChatOps operations allowed per day
Maximum automatic containments allowed per day
Deprecated — the escalation subject is now stored per recipient in notification_subscription (null → scope-aware per-type default). Removal scheduled for 2026-09-20.
Canonical customer DNS domain used for branding and team identification
Whether this team is a service provider
Name of the parent team if this is a sub-team
ID of the parent team if this is a sub-team
Whether the parent team is a service provider (null when no parent)
Whether this is an operating team for service providers
Whether to use the ChatOps onboarding group
Whether to allow bulk SMS invites without limit checks
The number of billable users for the team
The number of billable endpoints for the team
Current stored data usage in decimal gigabytes
The number of team members where the team is their parent team (excluding external members)
Support email for service provider customers to use
Address for the team, typically used in email footers
Contract/subscription start date
Contract/subscription end date

