# TeleSint Watchlist Create

> TeleSint Watchlist Create is a paid API for AI agents from telesint-api.onrender.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-20).

Creates a persistent threat intelligence watchlist on TeleSint bound to the caller's wallet, monitoring Telegram for pre-attack signals matching specified organizations, sector, country, actor, vendor, and keywords.

## Facts

- Endpoint: GET https://telesint-api.onrender.com/watch/create?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/telesint-watchlist-create-857ce0b2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-eAc8JqJVFxvg2wNVaCJy

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability telesint-watchlist-create-857ce0b2
```

Example prompt: Set up a TeleSint watchlist to monitor for pre-attack signals against Acme Corp and GlobalBank in the financial sector, focusing on the US and EU regions, and watch for keywords like 'ransomware', 'initial access', 'credential dump' over the next 30 days.

## When to prefer this

Use this endpoint when you need continuous, pull-based monitoring of Telegram threat intelligence for a specific set of organizations, sectors, or threat actors — rather than a one-time query. It is the starting point for any recurring threat surveillance workflow on TeleSint; prefer it over ad-hoc search endpoints when you need to track new signals over time across a defined scope.

## Known failure modes

- Missing or invalid required parameters returns an error with no watch_id
- Exceeding 5 organizations in the comma list causes a validation error
- Window value outside 7–90 day range is rejected
- Payment wallet not recognized or insufficient USDC balance causes a 402 payment required error
- Duplicate watchlist creation for same parameters may succeed but creates a separate watch_id

## How this service works

Create a watchlist bound to the paying wallet (no account). Pass organizations (comma list, max 5), sector, country, actor, vendor, keywords. Returns watch_id for /watch/pull.

## Output

Returns a watch_id (identifier string) that the caller uses with the /watch/pull endpoint to retrieve threat intelligence records ingested since the last pull. The watchlist is bound to the paying wallet and persists until deactivated.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "actor": {
       "type": "string",
       "description": "Actor"
      },
      "sector": {
       "type": "string",
       "description": "Sector"
      },
      "vendor": {
       "type": "string",
       "description": "Vendor"
      },
      "window": {
       "type": "string",
       "description": "Preparation window days 7-90, default 30"
      },
      "country": {
       "type": "string",
       "description": "Country or region"
      },
      "keywords": {
       "type": "string",
       "description": "Comma-separated keywords, max 10"
      },
      "organizations": {
       "type": "string",
       "description": "Comma-separated organisations, max 5"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "next": "GET /watch/pull?watch_id=6f1d2c3b-4a5e-4f60-8a7b-9c0d1e2f3a4b",
  "source": "TeleSint",
  "endpoint": "watch/create",
  "watch_id": "6f1d2c3b-4a5e-4f60-8a7b-9c0d1e2f3a4b",
  "owner_wallet": "0xabc…"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/telesint-watchlist-create-857ce0b2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from telesint-api.onrender.com](https://www.zero.xyz/host/telesint-api.onrender.com/llms.txt)