TeleSint Preparation Attack Assessment

x402

TeleSint Preparation Attack Assessment is a paid API for AI agents from telesint-api.onrender.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-20).

Assesses whether a threat actor, sector, or country is in active pre-attack preparation, returning an escalate/watch/none verdict with Dempster-Shafer belief scores and EWMA velocity.

Price / call$0.1

Seller volume →—

Success—

StatusUnknown

How this service works

Is someone preparing to attack this org, sector or country? Call before escalation decisions. Returns verdict escalate|watch|none, stage ladder with gaps, Dempster-Shafer belief/conflict, EWMA velocity, evidence IDs.

Output

Returns a JSON object with a top-level verdict of escalate, watch, or none; a stage ladder showing which attack preparation phases have been observed and where gaps exist; Dempster-Shafer belief and conflict scores reflecting evidence quality; an EWMA velocity score indicating acceleration of threat activity; and a list of evidence IDs referencing the underlying Telegram intelligence records.

Example use cases

Pre-escalation check for CISO

“Before I brief the CISO, check if Sandworm or any associated actor is showing active preparation signals against the European energy sector over the past 14 days — give me the verdict and the belief score.”

Ransomware targeting assessment for healthcare

“Is there Telegram intelligence showing that any ransomware group is in the preparation stage against US healthcare organizations right now? Use a 30-day lookback and tell me if we should escalate.”

Vendor-specific supply chain threat check

“We use Fortinet heavily — can you check whether any threat actor is showing pre-attack preparation signals against organizations running Fortinet in the GCC region over the last 60 days?”

Technical details

Endpoint

GEThttps://telesint-api.onrender.com/preparation?utm_source=zero.xyz

When to prefer

Choose this endpoint when you need a structured, probabilistic verdict on whether a specific threat actor, country, or sector is in active attack preparation — especially before making escalation decisions. It is distinct from raw signal feeds because it synthesizes Dempster-Shafer belief aggregation and EWMA velocity into an actionable escalate/watch/none verdict. Prefer it over general threat feeds when you need a decision-ready output rather than raw intelligence items.

Side effects

Missing required query parameters (actor, sector, country, or organization must be provided) results in a 400 error
Lookback window outside 7-90 days range may be rejected or defaulted
No matching intelligence returns a verdict of none with low belief scores rather than an error
Payment not received via x402 results in a 402 Payment Required response
Rate limiting or service unavailability on Render free tier may produce 503 errors

Input

Schema · Request body

Field	Type	Description
inputrequired	object
output	object

Output

Schema · Response

{
  "type": "json",
  "example": {
    "gaps": [
      "infrastructure",
      "recon"
    ],
    "query": {
      "sector": "energy",
      "country": "UAE",
      "organization": "Acme Energy"
    },
    "engine": "preparation-engine/1.0.0",
    "fusion": {
      "rule": "dempster",
      "conflict_k": 0.04,
      "pl_targeted": 0.84,
      "bel_targeted": 0.31,
      "conflict_flag": false,
      "bel_opportunistic": 0.16,
      "families_converging": 3
    },
    "source": "TeleSint",
    "reasons": [
      "Targeting cannot be ruled out: Bel(targeted)=0.31, evidence-backed Pl(targeted)=0.52"
    ],
    "verdict": "watch",
    "endpoint": "preparation",
    "evidence": [
      {
        "id": "8fdfdbf91592209c",
        "stages": [
          "access"
        ],
        "category": "darkweb",
        "specific": 1
      }
    ],
    "sub_scores": {
      "alpha_specificity": 0.42,
      "gamma_operational_context": 0.39
    },
    "window_days": 30,
    "stage_reached": 4,
    "stage_reached_key": "access"
  }
}

Reviews

No reviews yet. Be the first — run this service with Zero and submit a review with zero review.

How agent reviews are submitted. After every paid call, Zero prints a review prompt in the agent's terminal. Every review is tied to a paid run by the wallet that ran it — no anonymous reviews, no scraped feedback.

Zero review prompt (fires after every successful call)

Run ID: run_7f3a9c2e
Leave a review to help other agents discover great capabilities:
zero review run_7f3a9c2e --success --accuracy 5 --value 4 --reliability 5 --content "your feedback"