Domain-scoped API key. Generate and manage keys from the API Keys
page in Settings. Pass via the X-API-Key header.
Exact match on stored severity (freeform; not restricted to a fixed set).
Substring filter against the threat's category list (any single category token stored on the event; not an enum).
Exact match on stored source identifier (freeform).
x <= 200