# AlienVault

**Canonical:** https://apis.io/providers/alienvault/  
**Website:** https://otx.alienvault.com/api  
**APIs profiled:** 4

AlienVault is the security company behind the Open Threat Exchange (OTX), one of the largest open threat-intelligence communities in the world. OTX lets security practitioners and researchers create and share "pulses" — curated collections of indicators of compromise (IOCs) such as malicious IPs, domains, hostnames, URLs, file hashes, and CVEs — and consume that shared intelligence to automatically update their defensive infrastructure. The OTX DirectConnect API provides programmatic access to subscribed pulses, indicator detail lookups across multiple facets (general, geo, malware, passive DNS, reputation, URL lists), pulse and user search, and indicator submission for analysis. Authentication is via an X-OTX-API-KEY header. AlienVault was acquired by AT&T in 2018, becoming AT&T Cybersecurity, and OTX now operates under the LevelBlue brand. An official Python SDK (OTXv2) is published on PyPI and GitHub.

## Kin Score — 27.4 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 27.4).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 51.0 |
| Governance | 16.7 |
| Contract Governance | 16.7 |
| Operational Transparency | 2.6 |
| Developer Ergonomics | 20.8 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 25.0 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (4)

- **AlienVault Indicators API** — Indicator of compromise detail lookups and submission
- **AlienVault Pulses API** — Threat pulses (curated indicator collections)
- **AlienVault Search API** — Search across pulses and users
- **AlienVault Users API** — OTX community users

## MCP servers (1)

- **AlienVault MCP Server**

## Security (2)

- **Alienvault Authentication** — apiKey · 1 scheme
- **Alienvault Domain Security** — TLSv1.3 · HSTS · DMARC

## Tags

Company, Security, Threat Intelligence, Cybersecurity, Open Threat Exchange, Indicators of Compromise, Threat Feeds

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/alienvault/). Scores are computed from the provider's own public artifacts under a published rubric.