Device and data intelligence

Device risk, transaction trends, linked accounts, device history, and data summaries. Required resource or feature: Device Intelligence, Data Intelligence, or Application Traffic Insights.

Metric families and dimensions

Transaction trends by traffic type, action, application, endpoint, attack intent, geography, user agent, and autonomous system number (ASN). Device queries add risk score, confidence, linked account distribution, signals, and high-risk transactions. Versioned routes can change classification and filter support. |

Use Query concepts for shared request guidance and table conventions.

Statistics and analytics queries

Method and exact path	Information returned	Scope and principal filters	Specification reference
POST /api/data-intelligence/namespaces/{namespace}/di/summary	Load Executive Summary; returns eventsReasons, lineChartData, summary	Selected namespace; anomalousScorePercentile, flowLabels, granularity, platform, timeRange, timestamp	Operation · Request schema · Response schema
POST /api/device-intelligence/namespaces/{namespace}/analytics/devices/multi-account	Multi-Account Devices; returns multi_account_devices	Selected namespace; end_time, filters, start_time	Operation · Request schema · Response schema
POST /api/device-intelligence/namespaces/{namespace}/analytics/devices/risk-score-distribution	Risk Score Distribution; returns risk_score_distribution	Selected namespace; end_time, filters, start_time	Operation · Request schema · Response schema
POST /api/device-intelligence/namespaces/{namespace}/analytics/summary	summary statistics for devices; returns high_risk_device_count, high_risk_device_rate, high_risk_txn_count, high_risk_txn_rate, multi_acc_high_risk_device_count	Selected namespace; end_time, filters, start_time	Operation · Request schema · Response schema
POST /api/device-intelligence/namespaces/{namespace}/analytics/transactions/high-risk	High-Risk Transactions; returns time_series_results	Selected namespace; end_time, filters, start_time	Operation · Request schema · Response schema
POST /api/device-intelligence/namespaces/{namespace}/devices	Devices; returns devices, pagination	Selected namespace; end_time, filters, pagination, sort, start_time	Operation · Request schema · Response schema
POST /api/device-intelligence/namespaces/{namespace}/devices/{device_id}/history	Device History; returns pagination, records	Selected namespace; device_id, end_time, filters, pagination, sort, start_time	Operation · Request schema · Response schema
POST /api/device-intelligence/namespaces/{namespace}/devices/{device_id}/summary	Device Summary; returns action_taken, channel, confidence, detected_signals, device_risk_score	Selected namespace; device_id, end_time, filters, start_time	Operation · Request schema · Response schema
GET /api/shape/dip/namespaces/system/applications	GetApplications; returns body	Tenant; system only; No additional selector	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/bot/asn	Bot Assessment by Top Asn; returns body	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/bot/transactions	Bot Assessment for Transactions; returns body	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/bot/urls	Bot Assessment by Top URLs; returns body	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/dashboard/age	Devices By Age; returns body, status	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/dashboard/applications	Information By Applications; returns body, status	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/dashboard/asn	Devices By Asn; returns body, status	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/dashboard/country	Devices By Country; returns body, status	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/dashboard/session	Devices By Session; returns body, status	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/dashboard/ua	Devices By User-Agent; returns body, status	Tenant; system only; body	Operation · Request schema · Response schema
POST /api/shape/dip/namespaces/system/dashboard/unique	Devices by Unique Access; returns body, status	Tenant; system only; body	Operation · Request schema · Response schema
GET /api/shape/dip/namespaces/system/status	Application Traffic Insights Status; returns body, status	Tenant; system only; No additional selector	Operation · Request schema · Response schema

Related discovery and status

Method and exact path	Information returned	Scope and principal filters	Specification reference
GET /api/data-intelligence/namespaces/system/dataSets	Data Sets; returns dataSets	Tenant; system only; No additional selector	Operation · Request schema · Response schema
GET /api/data-intelligence/namespaces/system/datadictionary/{dataset}	Data Dictionary; returns feature_list	Tenant; system only; dataset	Operation · Request schema · Response schema
GET /api/data-intelligence/namespaces/{namespace}/data-dictionary/datasets	DataSets; returns dataset_list	Selected namespace; No additional selector	Operation · Request schema · Response schema
GET /api/data-intelligence/namespaces/{namespace}/di/flowlabels	FlowLabels; returns flowLabels	Selected namespace; No additional selector	Operation · Request schema · Response schema
GET /api/shape/dip/namespaces/system/provision/regions	available Regions for Application Traffic Insights; returns body, status	Tenant; system only; No additional selector	Operation · Request schema · Response schema