Runbooks API

Manage runbooks and their versions, reviews and tags.

Base path: /api/v1/runbooks · Permission resource: runbooks. All requests require authentication.

Important

Most deployments are now Wiki-backed. When Wiki-backed runbooks are enabled (the default), the template-shaped endpoints below return 410 Gone and point you to the Wiki API: list runbooks with GET /api/v1/wiki/pages?entity_type=runbook, and create/edit them by writing Wiki sections. The tag endpoints remain available either way. Use this page to recognise the endpoints; prefer the Wiki API for new integrations.

Tag endpoints (always available)

MethodPathPurposePermission
POST/runbooks/tagsCreate a tagrunbooks:create
GET/runbooks/tagsList tagsrunbooks:read

A tag has { name, description, color }.

Template endpoints (legacy / non-Wiki deployments)

These are the original template endpoints. On Wiki-backed deployments they return 410.

MethodPathPurposePermission
POST/runbooks/Create a templaterunbooks:create
GET/runbooks/List templatesrunbooks:read
GET/runbooks/{id}Get a templaterunbooks:read
PUT/runbooks/{id}Update a templaterunbooks:update
DELETE/runbooks/{id}Delete a templaterunbooks:delete
POST/runbooks/{id}/rollbackRoll backrunbooks:update
POST/runbooks/{id}/versionsCreate a versionrunbooks:update
GET/runbooks/{id}/versionsList versionsrunbooks:read
GET/runbooks/{id}/versions/compareCompare two versionsrunbooks:read
GET/runbooks/{id}/versions/{vid}Get a versionrunbooks:read
POST/runbooks/{id}/versions/{vid}/publishPublish a versionrunbooks:update
POST/runbooks/{id}/versions/{vid}/reviewsAdd a reviewrunbooks:create
GET/runbooks/{id}/versions/{vid}/reviewsList reviewsrunbooks:read
GET/runbooks/{id}/versions/{vid}/reviews/summaryReview summaryrunbooks:read
GET/runbooks/{id}/executionsExecution historyrunbooks:read

Request shapes

  • Create template: { type, name, description, visibility, content, execution_schema?, tag_names[] }. type is one of runbook, playbook, persona, analytic_rule.
  • Create version: { content, change_summary, execution_schema? }.
  • Add review: { rating, review }.

For Wiki-backed deployments, treat a runbook as a Wiki page of type runbook (or playbook, persona, analytic_rule):

# List runbooks
curl -s "http://localhost:8000/api/v1/wiki/pages?entity_type=runbook" \
  -H "Authorization: Bearer $CLOUDPEEK_TOKEN"

# Create/update a runbook by writing a section
curl -s -X PUT "http://localhost:8000/api/v1/wiki/pages/runbook/phishing-response/sections/Steps" \
  -H "Authorization: Bearer $CLOUDPEEK_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "body": "1. Confirm the sender…", "summary": "Initial phishing runbook" }'

See the Wiki API for the full set of page/section operations.

© 2026 CloudPeek. Agentic AI for high-consequence security operations.