{"uid":"cap_xqY5eCVboupozFyW20YSw","slug":"telesint-threat-velocity-monitor-4f939da8","name":"TeleSint Threat Velocity Monitor","description":"Call on a schedule to detect tempo changes. Acceleration of Telegram threat activity per preparation stage and category for a sector/country/org (or global): window counts, EWMA, trend accelerating|new|flat|decelerating.","url":"https://telesint-api.onrender.com/velocity?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"actor":{"type":"string","description":"Optional actor scope"},"sector":{"type":"string","description":"Optional sector scope"},"vendor":{"type":"string","description":"Optional vendor scope"},"window":{"type":"string","description":"Window days 7-90, default 30"},"country":{"type":"string","description":"Optional country/region scope"},"organization":{"type":"string","description":"Optional organisation scope"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"scope":{"sector":"healthcare"},"source":"TeleSint","by_stage":{"access":{"ratio":3,"trend":"accelerating","current_window_count":6,"previous_window_count":2}},"endpoint":"velocity","window_days":30,"accelerating":["stage:access","category:darkweb"],"decelerating":["category:c2"],"new_activity":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_QxwqEnFskl-4sCB9jBkzX","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns acceleration metrics for Telegram-sourced threat activity — window counts, EWMA, and trend direction — scoped by sector, country, organization, or actor.","exampleAgentPrompt":"Check if Telegram threat activity is accelerating against the healthcare sector over the last 30 days — I want to see whether the trend is accelerating, flat, or decelerating with EWMA metrics.","exampleUseCases":[{"title":"Ransomware campaign tempo detection","prompt":"Is ransomware-related threat activity on Telegram speeding up against US financial organizations right now? Give me the trend and EWMA numbers over the past 30 days."},{"title":"Nation-state actor acceleration alert","prompt":"Check the velocity of Telegram threat signals for the energy sector in Germany over the last 14 days — I want to know if activity is accelerating or still flat."},{"title":"Scheduled sector threat tempo monitoring","prompt":"Run a weekly check on the pace of Telegram threat activity targeting the healthcare sector globally — flag me if the trend shifts to accelerating or a new threat category appears."}],"resultDescription":"Returns per-category and per-preparation-stage window counts, exponentially weighted moving averages (EWMA), and a trend classification (accelerating, new, flat, or decelerating) for Telegram threat activity scoped to the requested sector, country, organization, actor, or vendor over the chosen time window.","failureModes":["Invalid or unsupported window value (outside 7–90 days) returns an error","No data found for an obscure or misspelled scope parameter returns empty or null results","Payment failure or expired x402 token results in 402 Payment Required","Rate limiting may occur if called too frequently in rapid succession","Render cold-start latency may cause occasional slow or timed-out responses"],"whenToPreferThis":"Choose this endpoint when you need to detect whether threat activity tempo is changing — not just whether threats exist, but whether they are ramping up, stable, or cooling off. Ideal for scheduled monitoring jobs, SOC escalation triggers, and proactive alerting workflows where rate-of-change in Telegram threat signals is more actionable than a static snapshot.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T06:42:51.072Z","isFirstParty":false,"canonicalSlug":"telesint-threat-velocity-monitor-4f939da8"}