otx-api

Query AlienVault OTX pulses and indicators for IPv4, domains, hashes, and URLs.

15|5|Updated Apr 6, 2026
One-click install
npx skills add https://github.com/Liberty91LTD/cti-skills --skill otx-api
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: otx-api
Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/otx-api
Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill otx-api

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AlienVault's OTX API reference provides a centralized way to access community threat intelligence pulses and indicators, enabling faster context gathering for security investigations.

Core Features & Use Cases

  • API reference for OTX endpoints enabling retrieval of IPv4, domain, file hash, and URL indicators.
  • Pulse discovery and indicator correlation to support incident response, threat hunting, and risk assessment.
  • Use Case: Look up an indicator to gather context, confidence, and related pulses for reporting and decision-making.

Quick Start

Query the IPv4 indicator general endpoint to retrieve data for a specific IP.

Frequently Asked Questions about otx-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query AlienVault OTX pulses for threat intelligence?

You can query OTX pulses by using the API endpoints to retrieve community threat intelligence and correlate indicators. This supports faster context gathering for incident response and threat hunting investigations.

What types of threat indicators can I look up using the OTX API?

You can look up IPv4, domain, file hash, and URL indicators using the OTX API. Querying these indicators returns related pulse data to aid in risk assessment and security investigations.

Do I need authentication to retrieve OTX indicator data?

Yes, retrieving OTX indicator data requires API authentication. The Skill documents API usage, authentication methods, rate limits, and endpoint structures to ensure deterministic lookups for your threat intelligence queries.

What is the best way to use OTX pulses for incident response?

The best way to use OTX pulses for incident response is to query specific indicators like IPs or file hashes to gather context and confidence levels. This pulse discovery and indicator correlation directly supports threat hunting and decision-making.

Are there rate limits when querying the AlienVault OTX API?

Yes, the AlienVault OTX API enforces rate limits on threat intelligence queries. The Skill documents these rate limits alongside API usage and endpoint structures to help you manage deterministic indicator lookups effectively.