API Reference

Get an Atomic Test

Fetch the full details of a single Atomic Red Team test by its internal id, including executors, input arguments, and dependencies.

GET

/v1/atomics/tests/{atomic-test-id}

Cost: 1 credit per successful call

Path parameters

atomic-test-idintegerrequired

Internal Atomic Red Team test id. Must be an integer of 1 or greater. Obtain ids from GET /v1/atomics/tests.

Request

curl https://api.precursorintelligence.com/functions/v1/atomics/tests/4012 \
  -H "Authorization: Bearer $PRECURSOR_API_KEY"

Response

200 OK

{
  "data": {
    "id": 4012,
    "name": "PowerShell Base64 Encoded Command",
    "description": "Executes a base64-encoded PowerShell command to simulate an obfuscated script-based attack.",
    "auto_generated_guid": "a3b1c2d4-5e6f-7890-abcd-ef1234567890",
    "supported_platforms": ["windows"],
    "technique": {
      "attack_technique": "T1059.001",
      "display_name": "Command and Scripting Interpreter: PowerShell"
    },
    "executors": [
      {
        "id": 8201,
        "name": "powershell",
        "elevation_required": false,
        "command": "powershell.exe -EncodedCommand #{encoded_command}",
        "cleanup_command": null
      }
    ],
    "dependencies": [],
    "input_arguments": [
      {
        "id": 12045,
        "name": "encoded_command",
        "description": "Base64-encoded PowerShell command to execute",
        "type": "string",
        "default_value": "V3JpdGUtSG9zdCAnSGVsbG8gV29ybGQn"
      }
    ],
    "generated_at": "2026-05-29T10:14:07.221Z"
  },
  "meta": {
    "request_id": "8b16efb8-9a6c-4ace-b817-11cbee626d08",
    "generated_at": "2026-05-18T10:24:31.118Z",
    "credits": { "charged": 1, "remaining": 9998 }
  }
}

Response fields

data.idintegeroptional

Internal id of the atomic test.

data.namestringoptional

Human-readable name of the atomic test.

data.descriptionstringoptional

What the test does and what adversary behavior it simulates.

data.auto_generated_guidstringoptional

Stable globally unique identifier assigned by the Atomic Red Team project.

data.supported_platformsarrayoptional

Platforms the test runs on (e.g. windows, linux, macos).

data.techniqueobjectoptional

MITRE ATT&CK technique this test maps to. Contains attack_technique (e.g. T1059.001) and display_name.

data.executorsarrayoptional

Executor definitions for the test. Each entry includes id, name (e.g. powershell, sh, command_prompt), elevation_required (boolean), command, and cleanup_command (nullable).

data.dependenciesarrayoptional

Prerequisites required before running the test. Each entry includes id, description, prereq_command, and get_prereq_command.

data.input_argumentsarrayoptional

Input variables the test accepts. Each entry includes id, name, description, type, and default_value.

data.generated_atstringoptional

ISO 8601 timestamp of when the response was generated.

Errors

Status	`error`	When
400	`invalid_atomic_test_id`	The path segment is not a positive integer.
401	`invalid_authorization`	Missing or malformed `Authorization` header.
401	`unauthorized`	Invalid/revoked key, or IP not allowlisted.
402	`insufficient_credits`	Organisation credit balance is below 1.
404	`not_found`	The id is valid but no test matches it.
405	`method_not_allowed`	Only `GET` and `OPTIONS` are accepted.
500	`internal`	Unexpected server error (credit auto-refunded).

See Errors for the full error reference.