# OT Intel API – Sector Situation Report (sitrep)

> OT Intel API – Sector Situation Report (sitrep) is a paid API for AI agents from ot-intel-api.onrender.com, paid per call via x402, $0.35/call, status unknown (last checked 2026-09-14).

Generates a comprehensive AI-enriched OT/ICS threat situation report for a specified industrial sector covering active campaigns, advisories, actor activity, compliance gaps, and sector deltas over a configurable lookback period.

## Facts

- Endpoint: GET https://ot-intel-api.onrender.com/ot/sitrep
- Price: $0.35/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ot-intel-api-sector-situation-report-sitrep-d3664373
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HXFXdsQBc7gl0_uKoAFZx

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ot-intel-api-sector-situation-report-sitrep-d3664373
```

Example prompt: Can you pull a 30-day OT/ICS threat situation report for the energy sector — I need to know what threat actors, active campaigns, and CISA advisories are relevant right now for our industrial SOC?

## When to prefer this

Use this endpoint when an AI agent or industrial SOC analyst needs a unified, cross-domain OT/ICS threat briefing for a specific critical infrastructure sector without having to call multiple individual endpoints (actor, advisory, campaign, delta, compliance) separately. Prefer it over individual sub-endpoints when you want a synthesized narrative Markdown report ready for consumption by a human analyst or automated workflow. Best suited for scheduled threat briefings, SOC morning reads, or compliance reporting workflows.

## Known failure modes

- Missing required 'sector' query parameter returns 400 Bad Request
- Invalid sector value (not in allowed enum) returns 400 or empty results
- Payment not provided or insufficient USDC on Base mainnet returns 402 Payment Required
- Service unavailable on Render free tier cold start may cause timeout or 503
- Upstream data source outage (NVD, CISA, OTX) may result in partial or stale report
- No activity found for sector in the requested period returns sparse/minimal report

## How this service works

Sector situation report. Pass ?sector=energy&period=30. Fans out to actor/sector, advisory, campaign, delta, compliance primitives. Returns 30-day threat landscape, top actors, new advisories, what changed, compliance posture, recommended priorities. Designed for weekly security briefing automation.

## Output

A Markdown-formatted sector situation report (~850 words) with TLP classification, composed from actor profiles, CISA ICS-CERT advisories, active campaign data, sector change delta, and compliance gap mappings. Includes AI-enriched OT-adjusted severity scores, cyber-physical impact analysis, and MITRE ATT&CK for ICS technique annotations. Response includes metadata fields: tlp, sector, word_count, period_days, and a _composed_from list of source sub-endpoints.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "sector"
     ],
     "properties": {
      "period": {
       "type": "string",
       "description": "Lookback days, default 30"
      },
      "sector": {
       "type": "string",
       "description": "energy | water | manufacturing | oil-and-gas | electric | nuclear | chemical"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "tlp": "WHITE",
  "sector": "energy",
  "word_count": 850,
  "period_days": 30,
  "_composed_from": [
   "ot/actor/sector",
   "ot/advisory",
   "ot/campaign",
   "ot/delta",
   "ot/compliance"
  ],
  "sitrep_markdown": "# Sector Situation Report: Energy\n..."
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ot-intel-api-sector-situation-report-sitrep-d3664373/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ot-intel-api.onrender.com](https://www.zero.xyz/host/ot-intel-api.onrender.com/llms.txt)