isMalicious

isMalicious provides threat intelligence APIs that allow users to lookup IPs, domains, URLs, email addresses, phone numbers, crypto wallets, file hashes, CVEs, and ASN data. The platform emphasizes evidence-first investigations, offering free tier access with 250 requests per month and paid plans for higher volume and STIX/TAXII feeds. It integrates with SIEMs and threat intel platforms, delivering real-time data to enhance security operations.

isMalicious publishes 19 API contracts indexed on the APIs.io network, including Action Center API, Alerts API, Blocklist API, and 16 more. Tagged areas include Company, Threat Intelligence, Cybersecurity, STIX, and Threat Data.

The isMalicious catalog on APIs.io includes 1 event-driven AsyncAPI specification, 1 JSON-LD context, and 1 Spectral governance ruleset.

isMalicious’ developer surface includes authentication, support, sandbox, pricing, changelog, engineering blog, documentation, and 28 more developer resources.

🌐 Visit website 📡 Profile data on GitHub

65.0/100 strong Agent 39/100 agent ready Full breakdown ↓
scored 2026-11-13 · rubric v0.28.0 · Show this score on your site →

AccessFreemiumSelf serve⚡ Free to try

1 published contract 3 Agent Skills

Company Threat Intelligence Cybersecurity STIXThreat Data

Kin Score

Kin Score How this is scored →
scored 2026-11-13 · rubric v0.28.0

Composite quality — 65.0/100 · strong

Contract Quality 15.1 / 21

Developer Ergonomics 10.4 / 17

Access Clarity 11.6 / 17

Operational Transparency 7.1 / 11

Contract Governance 3.6 / 10

Discoverability 5.6 / 9

Regulatory Posture 4.4 / 15

Agent readiness — 39/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 12 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 6 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Pagination 0 / 5

Distinct Operations 3 / 3

MCP Tool Quality 6 / 6

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero: never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and several others — scorable at all.

The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Show this score on your site.

It updates itself when the score changes. Paste this where you link to your API docs:

<a href="https://apis.io/providers/ismalicious-com/"><img src="https://apis.io/badge/ismalicious-com/card.svg" alt="isMalicious on APIs.io — Kin Score by API Evangelist"></a>

Other styles, a README pill and a shields.io endpoint are on the badge page.

Raise your score.

Agent readiness — checks not met, largest first (exact, from this profile):

Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented) Ask about this →
A2A Agent Card +8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0 Ask about this →
Registration Without a Human +6 pts — a `registration_endpoint` in the served RFC 8414 / OIDC discovery document Ask about this →
Delegated User Identity +6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented) Ask about this →
Documented Reversibility +6 pts — a reversal operation in the contract, graded up when a window is documented too Ask about this →
Pagination +5 pts — share of collection GETs (an array, or one wrapped in data/items/results ...) that declare a page/limit/offset/cursor parameter, a Link header or a next/cursor field; na with no collection GETs Ask about this →

5 more unmet checks in the Agent Readiness table above.

Kin Score — facets with the most composite points still available (weight × headroom):

Developer Ergonomics scores 61.3 — up to +7.7 composite points Ask about this →
Contract Governance scores 35.6 — up to +7.7 composite points Ask about this →
Contract Quality scores 71.1 — up to +7.2 composite points Ask about this →

Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.

Not sure how this applies to your stack? Ask about any one item. Kin Lane reads every question, looks at your profile and your situation, and replies with what a fix would take — scoped to that one area, priced up front, yours whether you ship it or not. Ask a question →

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from the provider profile at artifacts.apis.io/ismalicious-com/apis.yml: open an issue on github.com/api-evangelist/ismalicious-com to ask a question or point us at an artifact you publish. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Standards implemented 2

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

Model Context Protocol (MCP)

measured — observed by APIs.io (documented)

OpenAPI

measured — observed by APIs.io (published)

APIs 19

Individual APIs this provider publishes, each with its own machine-readable definition.

isMalicious Action Center API

Prioritized SOC action queue

isMalicious Alerts API

Alerting trends and metrics

isMalicious Blocklist API

Download blocklists and read their generation stats

isMalicious Briefs API

Executive risk briefs

isMalicious Cases API

SOC case workspace: cases and their evidence timeline

isMalicious Check API

Threat intelligence check endpoints for IPs, domains, URLs, and file hashes

isMalicious Cve API

CVE catalog: lookup by id, search and recent list (authenticated, one request each) and public statistics (EPSS, exploitation signals, time series — no authentication, not metered)

isMalicious Gate API

isinjected gate: prompt-injection scanning and link reputation for AI agents (own scan meter)

isMalicious Mail API

Inbound-message scan: what a mail's structure and the dataset say about it (gate scan meter, one unit per message)

isMalicious Monitoring API

Watch ownership and authenticated monitoring

isMalicious Platform API

Dataset freshness and data-ops pipeline status

isMalicious Ransomware API

Ransomware intelligence from the cached ransomware.live datasets: victims, groups, sectors, press. Authenticated, one request each except `/ransomware/live-quota`

isMalicious Search API

Search for similar malicious domains

isMalicious Stats API

Public dataset statistics — no authentication, not metered

isMalicious Submit API

Submit new threat intelligence sources

isMalicious Surveillance API

Vulnerability monitoring of the organisation's stack: watched sources (a domain, a lockfile/SBOM project, a manual stack), findings with the affected range and the fix, the aler...

isMalicious Taxii API

TAXII 2.1 / STIX 2.1 threat-intelligence feed (Pro and Enterprise). Never decrements the monthly request quota

isMalicious Trust API

Trust assessment contract

isMalicious Webhooks API

Webhook event catalog

Scroll for all 19

Agent Skills 3

Packaged agent skills for driving this provider's APIs from an AI assistant.

ismalicious-com-check-indicator

AGENT SKILL

ismalicious-com-gate-scan-workflow

AGENT SKILL

ismalicious-com-manage-case-evidence

AGENT SKILL

isMalicious API pricing

Prices published by isMalicious, read 2026-11-12 from ismalicious.com/pricing.

Plan	Price
Free	€0
Basic	€49/month
Pro	€99/month
Enterprise	Contact sales

Plan details, limits and sources →

Rate limits

FREE per-minute burst: 60 / min
FREE monthly quota: 250 / month
BASIC per-minute burst: 60 / min

All 7 limits →

Pricing Plans 1

Published pricing tiers and plan structures.

isMalicious Plans Pricing

4 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

isMalicious Rate Limits

7 limits

RATE LIMITS

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Ismalicious Com Webhooks

ASYNCAPI

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Ismalicious Com Context

120 classes · 412 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs. Counts are the severity each rule declares, not results of running them.

isMalicious API Rules

69 rules · 49 error-severity 13 warn-severity 7 info-severity

SPECTRAL

JSON Schema 6

Standalone JSON Schema definitions for this provider's data models.

BlocklistSchedule

7 properties

JSON SCHEMA

CheckResponse

52 properties

JSON SCHEMA

CreateSourceRequest

0 properties

JSON SCHEMA

ExposureResponse

11 properties

JSON SCHEMA

MailScanResponse

14 properties

JSON SCHEMA

PasswordCheckResponse

11 properties

JSON SCHEMA

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

isMalicious Authentication

4 schemes

SECURITY

isMalicious Domain Security

TLSv1.3 · DMARC

SECURITY

Agentic Access (API Evangelist recommendations) 1

Recommended x-agentic-access execution contracts for AI agents.

isMalicious Agentic Access

178 operations · 48 acting · 4 human-in-the-loop

178 operations · 48 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

Sandbox

Sandbox

Login

DeveloperPortal

DeveloperPortal

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgentSkill

LLMsTxt

WellKnown

Design & Contract 9

Pagination, idempotency, versioning, errors, and events

Spectral

JSONLD

Vocabulary

Webhooks

DataModel

Conventions

ErrorCatalog

Conformance

Webhooks

Scroll for all 9

Build 2

SDKs, sample code, and the tooling you integrate with

SDKs

SDKs

GitHubOrganization

GitHubOrganization

Access & Security 5

Authentication, authorization, and security posture

Authentication

SecurityTxt

TrustCenter

Security

DomainSecurity

Operate 3

Status, limits, changes, and where to get help

RateLimits

RateLimits

Support

Support

ChangeLog

ChangeLog

Commercial 4

Pricing, plans, and the legal terms of use

Plans

TermsOfService

PrivacyPolicy

Pricing

Company 2

The organization behind the API

Blog

Blog

Website

Website

Other 1

Properties that don't map to a standard resource type

Hosts

Hosts

Source (apis.yml)

aid: ismalicious-com
name: isMalicious
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  gated: none
  gated_source:
  - onboarding
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  - rate-limits
  - security
  generated: '2026-11-13'
  method: derived
image: https://ismalicious.com/opengraph-image.jpg
description: isMalicious provides threat intelligence APIs that allow users to lookup IPs, domains, URLs, email addresses,
  phone numbers, crypto wallets, file hashes, CVEs, and ASN data. The platform emphasizes evidence-first investigations, offering
  free tier access with 250 requests per month and paid plans for higher volume and STIX/TAXII feeds. It integrates with SIEMs
  and threat intel platforms, delivering real-time data to enhance security operations.
url: https://artifacts.apis.io/ismalicious-com/apis.yml
x-type: company
x-source: harvest:mcp-registry
x-tier: profiled
x-tier-reason: enrichment pass 2026-11-12 (modular-v1; was harvest)
specificationVersion: '0.20'
created: '2026-11-12'
modified: '2026-11-12'
tags:
- Company
- Threat Intelligence
- Cybersecurity
- STIX
- Threat Data
tags_raw:
- Company
- Threat Intelligence
- Cybersecurity
- API
- STIX
- Threat Data
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: AgenticAccess
  url: agentic-access/ismalicious-com-agentic-access.yml
- type: RateLimits
  url: rate-limits/ismalicious-com-rate-limits.yml
- type: Plans
  url: plans/ismalicious-com-plans-pricing.yml
- type: Spectral
  url: rules/ismalicious-com-rules.yml
- type: JSONLD
  url: json-ld/ismalicious-com-context.jsonld
- type: Vocabulary
  url: vocabulary/ismalicious-com-vocabulary.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Webhooks
  url: asyncapi/ismalicious-com-webhooks.yml
- type: DataModel
  url: data-model/ismalicious-com-data-model.yml
- type: Conventions
  url: conventions/ismalicious-com-conventions.yml
- type: Authentication
  url: authentication/ismalicious-com-authentication.yml
- type: ErrorCatalog
  url: errors/ismalicious-com-problem-types.yml
- type: Conformance
  url: conformance/ismalicious-com-conformance.yml
- type: LLMsTxt
  url: llms/ismalicious-com-llms.txt
- type: SecurityTxt
  url: well-known/ismalicious-com-security.txt
- type: WellKnown
  url: well-known/ismalicious-com-well-known.yml
- type: Hosts
  url: hosts/ismalicious-com-hosts.yml
- type: Webhooks
  url: https://ismalicious.com/api-docs/webhooks
- type: TrustCenter
  url: https://ismalicious.com/trust
- type: TermsOfService
  url: https://ismalicious.com/terms
- type: Support
  url: https://ismalicious.com/support
- type: Security
  url: https://ismalicious.com/security
- type: Sandbox
  url: https://ismalicious.com/api-docs/playground
- type: SDKs
  url: https://ismalicious.com/api-docs/sdks
- type: PrivacyPolicy
  url: https://ismalicious.com/privacy
- type: Pricing
  url: https://ismalicious.com/pricing
- type: Login
  url: https://ismalicious.com/auth/login
- type: GitHubOrganization
  url: https://github.com/hexablob
- type: ChangeLog
  url: https://ismalicious.com/changelog
- type: Blog
  url: https://ismalicious.com/blog
- type: Documentation
  url: https://docs.ismalicious.com/
- type: DeveloperPortal
  url: https://api.ismalicious.com\\\
- type: APIReference
  url: https://ismalicious.com/api
- type: DomainSecurity
  url: security/ismalicious-com-domain-security.yml
- type: Website
  url: https://ismalicious.com/
apis:
- aid: ismalicious-com:ismalicious-com-action-center-api
  name: isMalicious Action Center API
  description: Prioritized SOC action queue
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Action Center
  tags_raw:
  - action-center
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-action-center-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-alerts-api
  name: isMalicious Alerts API
  description: Alerting trends and metrics
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Alerts
  tags_raw:
  - alerts
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-alerts-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-blocklist-api
  name: isMalicious Blocklist API
  description: Download blocklists and read their generation stats
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Blacklist
  tags_raw:
  - blocklist
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-blocklist-api-openapi.yml
  - type: JSONSchema
    url: json-schema/ismalicious-com-blocklist-schedule-schema.json
- aid: ismalicious-com:ismalicious-com-briefs-api
  name: isMalicious Briefs API
  description: Executive risk briefs
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Briefs
  tags_raw:
  - briefs
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-briefs-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-cases-api
  name: isMalicious Cases API
  description: 'SOC case workspace: cases and their evidence timeline'
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Cases
  tags_raw:
  - cases
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-cases-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-check-api
  name: isMalicious Check API
  description: Threat intelligence check endpoints for IPs, domains, URLs, and file hashes
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Check
  tags_raw:
  - check
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-check-api-openapi.yml
  - type: JSONSchema
    url: json-schema/ismalicious-com-check-response-schema.json
  - type: JSONSchema
    url: json-schema/ismalicious-com-password-check-response-schema.json
- aid: ismalicious-com:ismalicious-com-cve-api
  name: isMalicious Cve API
  description: 'CVE catalog: lookup by id, search and recent list (authenticated, one request each) and public statistics
    (EPSS, exploitation signals, time series — no authentication, not metered)'
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - CVE
  tags_raw:
  - cve
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-cve-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-gate-api
  name: isMalicious Gate API
  description: 'isinjected gate: prompt-injection scanning and link reputation for AI agents (own scan meter)'
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Gate
  tags_raw:
  - gate
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-gate-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-mail-api
  name: isMalicious Mail API
  description: 'Inbound-message scan: what a mail''s structure and the dataset say about it (gate scan meter, one unit per
    message)'
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Mail
  tags_raw:
  - mail
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-mail-api-openapi.yml
  - type: JSONSchema
    url: json-schema/ismalicious-com-mail-scan-response-schema.json
- aid: ismalicious-com:ismalicious-com-monitoring-api
  name: isMalicious Monitoring API
  description: Watch ownership and authenticated monitoring
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Monitoring
  tags_raw:
  - monitoring
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-monitoring-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-platform-api
  name: isMalicious Platform API
  description: Dataset freshness and data-ops pipeline status
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Platform
  tags_raw:
  - platform
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-platform-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-ransomware-api
  name: isMalicious Ransomware API
  description: 'Ransomware intelligence from the cached ransomware.live datasets: victims, groups, sectors, press. Authenticated,
    one request each except `/ransomware/live-quota`'
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Ransomware
  tags_raw:
  - ransomware
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-ransomware-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-search-api
  name: isMalicious Search API
  description: Search for similar malicious domains
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Search
  tags_raw:
  - search
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-search-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-stats-api
  name: isMalicious Stats API
  description: Public dataset statistics — no authentication, not metered
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Stats
  tags_raw:
  - stats
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-stats-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-submit-api
  name: isMalicious Submit API
  description: Submit new threat intelligence sources
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Submit
  tags_raw:
  - submit
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-submit-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-surveillance-api
  name: isMalicious Surveillance API
  description: 'Vulnerability monitoring of the organisation''s stack: watched sources (a domain, a lockfile/SBOM project,
    a manual stack), findings with the affected range and the fix, the alert policy. API key or session; the unit is the watched
    source, not the request'
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Surveillance
  tags_raw:
  - surveillance
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-surveillance-api-openapi.yml
  - type: JSONSchema
    url: json-schema/ismalicious-com-create-source-request-schema.json
  - type: JSONSchema
    url: json-schema/ismalicious-com-exposure-response-schema.json
- aid: ismalicious-com:ismalicious-com-taxii-api
  name: isMalicious Taxii API
  description: TAXII 2.1 / STIX 2.1 threat-intelligence feed (Pro and Enterprise). Never decrements the monthly request quota
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - TAXII
  tags_raw:
  - taxii
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-taxii-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-trust-api
  name: isMalicious Trust API
  description: Trust assessment contract
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Trust
  tags_raw:
  - trust
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-trust-api-openapi.yml
- aid: ismalicious-com:ismalicious-com-webhooks-api
  name: isMalicious Webhooks API
  description: Webhook event catalog
  humanURL: https://ismalicious.com/api
  baseURL: https://api.ismalicious.com
  tags:
  - Webhook
  tags_raw:
  - webhooks
  properties:
  - type: OpenAPI
    url: openapi/ismalicious-com-webhooks-api-openapi.yml
x-enrichment:
  date: '2026-11-12'
  status: enriched
  artifacts_added: 31
  pass: modular-v1
  engine: identity=local,contract=local,surfaces=local,docs=local,regulatory=local

isMalicious API — frequently asked questions

Does isMalicious have an API?

Yes. APIs.io lists 19 APIs from isMalicious, including isMalicious Action Center API, isMalicious Alerts API and isMalicious Blocklist API, and 16 more.

Is there an OpenAPI specification for the isMalicious API?

Yes. APIs.io indexes 19 OpenAPI specifications for isMalicious, each linked for download from this page.

How do I authenticate with the isMalicious API?

isMalicious uses bearer-token authentication (4 schemes). The details are profiled on APIs.io as isMalicious Authentication.

How much does the isMalicious API cost?

isMalicious publishes its prices; its Free plan is €0 as of 2026-11-12. APIs.io lists 4 pricing plans for isMalicious, with each plan's price, limits and inclusions under Pricing on this page.

Is the isMalicious API ready for AI agents?

isMalicious has a Kin Score of 65.0 out of 100 (strong) and an Agent Readiness score of 38.8 (agent-ready), scored by API Evangelist on 2026-11-13.

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/ismalicious-com"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/ismalicious-com/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/ismalicious-com/evidence"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.