isMalicious · Authentication Profile

isMalicious Authentication

Authentication

Authentication schemes as published on isMalicious pages.

isMalicious declares 4 security scheme(s) across its OpenAPI definitions.

CompanyThreat IntelligenceCybersecuritySTIXThreat Data

Methods: Schemes: 4 OAuth flows: API key in:

Security Schemes

X-API-KEY apiKey

Basic http-basic

Bearer http-bearer

Session Cookie other

Source

Authentication Profile

generated: '2026-11-12'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://ismalicious.com/posts/analyze-dmarc-xml-reports
sources:
- https://ismalicious.com/posts/analyze-dmarc-xml-reports
- https://ismalicious.com/api-docs/authentication
- https://ismalicious.com/glossary/api-key
- https://ismalicious.com/api-docs
description: Authentication schemes as published on isMalicious pages.
schemes:
- type: apiKey
  name: X-API-KEY
  evidence: 'Authentication : with your key pair REST calls to https://api.ismalicious.com accept X-API-KEY (Base64 of apiKey:apiSecret) or HTTP
    Basic Auth (username=apiKey, password=apiSecret).'
  location: header
  header: X-API-KEY
  how_to_obtain: Sign up and open Account → API keys to view or rotate credentials; or request a free key via curl -d "email=you@example.com"
    https://ismalicious.com/api/keys/instant.
- type: http-basic
  name: Basic
  evidence: 'Authentication : with your key pair REST calls to https://api.ismalicious.com accept X-API-KEY (Base64 of apiKey:apiSecret) or HTTP
    Basic Auth (username=apiKey, password=apiSecret).'
  location: header
  header: Authorization
  how_to_obtain: Use the same API key pair (apiKey and apiSecret) as username and password.
- type: http-bearer
  name: Bearer
  evidence: 'If none is present, the API returns 401 with "message": "Provide an X-API-KEY header, a Bearer token, HTTP Basic Auth (apiKey:apiSecret),
    or a valid session cookie".'
  location: header
  header: Authorization
- type: other
  name: Session Cookie
  evidence: 'If none is present, the API returns 401 with "message": "Provide an X-API-KEY header, a Bearer token, HTTP Basic Auth (apiKey:apiSecret),
    or a valid session cookie".'
  location: cookie
  how_to_obtain: Log in via the web UI to obtain a session cookie.
note: No OAuth2 flows are documented on the provided pages.
docs: https://ismalicious.com/posts/analyze-dmarc-xml-reports

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/ismalicious-com-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.