Skip to content

53,600 AI-swarm attacks. Every one stopped in the kernel. 0 bytes leaked.See the evidence

SolomonJS · TypeScript and Node SDK

Solomon, from TypeScript.

SolomonJS (package sdknode) is a typed Node.js client for the Solomon platform’s intelligence and Copilot endpoints. Pass a bearer token, call a method, get a typed response.

analyze.tsSolomonClient
import { SolomonClient } from './dist/index.js';

const client = new SolomonClient('https://api.vintercept.ai', accessToken);

const result = await client.analyzeObservable('203.0.113.7');
console.log('Risk Score:', result.risk_score);
console.log('Analysis:', result.ai_analysis);
console.log('Remediation:', result.remediation_status);

IP from a documentation range. accessToken is your platform token.

What it covers

A small client that does a few things well.

  • Intelligence

    • Analyze an IP: risk score, AI analysis and remediation status
    • Search MITRE ATT&CK by keyword, phase and platform
    • Analyze recent logs for one agent
  • Copilot

    • Send analyst feedback on a Copilot answer
    • Execute an analyst-approved Copilot action
    • Get an operation id back to track it
  • Typed, ES modules

    • Request and response interfaces exported with the client
    • Errors carry the HTTP status and the platform's message
    • Compiled with tsc to dist/; axios underneath for HTTP

Set up

Build it, import it.

SolomonJS is an ES module written in TypeScript. Build it from source with npm, then import SolomonClient from the compiled output.

Point it at the Solomon gateway (https://api.vintercept.ai) with a bearer token for your tenant. Keys for your organization come from the developer dashboard.

Need investigations, approvals for AI-agent actions, fleet health or cloud assets? Those are in SolomonPy today.

buildNode.js 16+
npm install
npm run build
SolomonClientmethods
analyzeObservable(ip, incidentId?)
POST /v1/intelligence/analyze
getMitreAttacks(params?)
GET /v1/intelligence/mitre/attacks
analyzeLogs(agentId, limit?)
POST /v1/intelligence/logs/analyze
submitCopilotFeedback(feedback)
POST /v1/copilot/feedback
executeCopilotAction(action)
POST /v1/copilot/execute

Examples

From alert to action.

Look things up

Map an alert to MITRE ATT&CK techniques and pull an AI read of an agent’s recent logs.

lookup.tsgetMitreAttacks · analyzeLogs
import type { MitreAttackParams } from './dist/index.js';

const params: MitreAttackParams = { search: 'Phishing', phase: 'Initial Access', limit: 5 };
const techniques = await client.getMitreAttacks(params);

const logs = await client.analyzeLogs('agent-web-03', 10);

Close the loop with Copilot

Record whether a Copilot answer helped, then run the action an analyst approved and keep its operation id.

copilot.tssubmitCopilotFeedback · executeCopilotAction
await client.submitCopilotFeedback({
  session_id: 'session-123',
  message_id: 'ai-456',
  is_positive: true,
  comment: 'Useful triage summary',
});

const action = await client.executeCopilotAction({
  session_id: 'session-123',
  action_id: 'isolate-host-1',
  user_id: 'analyst-42',
  action_name: 'ISOLATE_HOST',
  target: 'WS-EXEC-PC001',
});
console.log(action.operation_id);

Build with SolomonJS.

Register for developer access, then generate your key pair in the developer dashboard. The private key is downloaded once; VIntercept does not keep a copy.