# isMalicious

**Canonical:** https://apis.io/providers/ismalicious-com/  
**Website:** https://ismalicious.com/  
**APIs profiled:** 1

isMalicious provides threat intelligence APIs that allow users to lookup IPs, domains, URLs, email addresses, phone numbers, crypto wallets, file hashes, CVEs, and ASN data. The platform emphasizes evidence-first investigations, offering free tier access with 250 requests per month and paid plans for higher volume and STIX/TAXII feeds. It integrates with SIEMs and threat intel platforms, delivering real-time data to enhance security operations.

## Kin Score — 65.0 / 100 (strong)

Scored 2026-11-13 under rubric 0.28.0.

| Facet | Score |
|---|---|
| Discoverability | 66.1 |
| Contract Quality | 71.1 |
| Contract Governance | 35.6 |
| Operational Transparency | 64.3 |
| Developer Ergonomics | 61.3 |
| Access Clarity | 68.1 |

Regulatory layer — **Horizontal (data, software, accessibility, platform)**: 29.4 (matched via fallback).

## Agent readiness — 38.8 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | partial |
| Rate Limit Signal | verified |
| Event Surface Described | yes |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |
| Pagination Ratio | no |
| Operation Distinctiveness | distinct |
| MCP Tool Quality | na |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (19)

- **isMalicious Action Center API** — Prioritized SOC action queue
- **isMalicious Alerts API** — Alerting trends and metrics
- **isMalicious Blocklist API** — Download blocklists and read their generation stats
- **isMalicious Briefs API** — Executive risk briefs
- **isMalicious Cases API** — SOC case workspace: cases and their evidence timeline
- **isMalicious Check API** — Threat intelligence check endpoints for IPs, domains, URLs, and file hashes
- **isMalicious Cve API** — CVE catalog: lookup by id, search and recent list (authenticated, one request each) and public statistics (EPSS, exploitation signals, time series — no authentication, not metered)
- **isMalicious Gate API** — isinjected gate: prompt-injection scanning and link reputation for AI agents (own scan meter)
- **isMalicious Mail API** — Inbound-message scan: what a mail's structure and the dataset say about it (gate scan meter, one unit per message)
- **isMalicious Monitoring API** — Watch ownership and authenticated monitoring
- **isMalicious Platform API** — Dataset freshness and data-ops pipeline status
- **isMalicious Ransomware API** — Ransomware intelligence from the cached ransomware.live datasets: victims, groups, sectors, press. Authenticated, one request each except `/ransomware/live-quota`
- **isMalicious Search API** — Search for similar malicious domains
- **isMalicious Stats API** — Public dataset statistics — no authentication, not metered
- **isMalicious Submit API** — Submit new threat intelligence sources
- **isMalicious Surveillance API** — Vulnerability monitoring of the organisation's stack: watched sources (a domain, a lockfile/SBOM project, a manual stack), findings with the affected range and the fix, the aler...
- **isMalicious Taxii API** — TAXII 2.1 / STIX 2.1 threat-intelligence feed (Pro and Enterprise). Never decrements the monthly request quota
- **isMalicious Trust API** — Trust assessment contract
- **isMalicious Webhooks API** — Webhook event catalog

## Agentic access (1)

- **isMalicious Agentic Access** — 178 operations · 48 acting · 4 human-in-the-loop

## Security (2)

- **isMalicious Authentication** — 4 schemes
- **isMalicious Domain Security** — TLSv1.3 · DMARC

## Plans (1)

- **isMalicious Plans Pricing**

## Tags

Company, Threat Intelligence, Cybersecurity, STIX, Threat Data

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/ismalicious-com/). Scores are computed from the provider's own public artifacts under a published rubric.