AlienVault

AlienVault Indicators API

Indicator of compromise detail lookups and submission

Documentation GitHub OpenAPI

Operations 7

POST /api/v1/pulses/indicators/validate Validate an indicator #

GET /api/v1/indicators/{type}/{indicator}/{section} Get indicator details #

POST /api/v1/indicators/submit_file Submit a file for analysis #

GET /api/v1/indicators/submitted_files List submitted files #

POST /api/v1/indicators/submit_url Submit a URL for analysis #

POST /api/v1/indicators/submit_urls Submit multiple URLs for analysis #

GET /api/v1/indicators/submitted_urls List submitted URLs #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/alienvault-indicators-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: AlienVault OTX DirectConnect Indicators API
  description: The Open Threat Exchange (OTX) DirectConnect API provides programmatic access to the AlienVault OTX threat intelligence community.
  version: v1
  contact:
    name: AlienVault OTX (LevelBlue)
    url: https://otx.alienvault.com/api
  license:
    name: OTX Terms of Service
    url: https://otx.alienvault.com/terms/
servers:
- url: https://otx.alienvault.com
  description: OTX production
security:
- OTXApiKey: []
tags:
- name: Indicators
  description: Indicator of compromise detail lookups and submission
paths:
  /api/v1/pulses/indicators/validate:
    post:
      operationId: validateIndicator
      summary: Validate an indicator
      tags:
      - Indicators
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                indicator:
                  type: string
                type:
                  type: string
      responses:
        '200':
          description: Validation result
  /api/v1/indicators/{type}/{indicator}/{section}:
    get:
      operationId: getIndicatorDetails
      summary: Get indicator details
      description: Look up threat detail for an indicator. `type` is one of IPv4, IPv6, domain, hostname, url, hash (file), cve. `section` selects a facet (general, geo, malware, url_list, passive_dns, reputation, analysis, etc.).
      tags:
      - Indicators
      parameters:
      - name: type
        in: path
        required: true
        schema:
          type: string
          enum:
          - IPv4
          - IPv6
          - domain
          - hostname
          - url
          - file
          - cve
      - name: indicator
        in: path
        required: true
        schema:
          type: string
      - name: section
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Indicator detail for the requested section
        '404':
          description: Indicator not found
  /api/v1/indicators/submit_file:
    post:
      operationId: submitFile
      summary: Submit a file for analysis
      tags:
      - Indicators
      requestBody:
        required: true
        content:
          multipart/form-data:
            schema:
              type: object
              properties:
                file:
                  type: string
                  format: binary
      responses:
        '200':
          description: Submission accepted
  /api/v1/indicators/submitted_files:
    get:
      operationId: getSubmittedFiles
      summary: List submitted files
      tags:
      - Indicators
      responses:
        '200':
          description: Paginated list of submitted files
  /api/v1/indicators/submit_url:
    post:
      operationId: submitUrl
      summary: Submit a URL for analysis
      tags:
      - Indicators
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                url:
                  type: string
      responses:
        '200':
          description: Submission accepted
  /api/v1/indicators/submit_urls:
    post:
      operationId: submitUrls
      summary: Submit multiple URLs for analysis
      tags:
      - Indicators
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                urls:
                  type: array
                  items:
                    type: string
      responses:
        '200':
          description: Submission accepted
  /api/v1/indicators/submitted_urls:
    get:
      operationId: getSubmittedUrls
      summary: List submitted URLs
      tags:
      - Indicators
      responses:
        '200':
          description: Paginated list of submitted URLs
components:
  securitySchemes:
    OTXApiKey:
      type: apiKey
      in: header
      name: X-OTX-API-KEY
      description: OTX API key, available from your OTX account settings page.