Skip to main content
API & Tools

SDKs & Libraries for TypeScript or any HTTP client

Official TypeScript SDK with typed check, stream, TAXII, and webhook helpers. Other languages use the REST API.

npm install @ismalicious/sdk
View on npmAPI Reference

Python, Go, Rust: generate a client from openapi.json

# Or just use curl
curl -G "https://api.ismalicious.com/check" \
  --data-urlencode "query=example.com" \
  --data-urlencode "enrichment=standard" \
  -H "X-API-KEY: YOUR_BASE64_CREDENTIALS"
Official SDK
1
Retries by default
3
Typed client
TypeScript
License
MIT
Capabilities

Key features at a glance.

TypeScript SDK

npm install @ismalicious/sdk — typed check, stream, TAXII, webhooks, monitoring.

OpenAPI

https://api.ismalicious.com/openapi.json — generate a Python, Go or Rust client.

curl / any HTTP client

GET /check?query=… with X-API-KEY. Same contract the TypeScript SDK wraps.

Auto Retries

Retries 429 and network errors with exponential backoff, honouring Retry-After.

Typed errors

AuthenticationError, RateLimitError, ValidationError, TimeoutError and more.

Pagination

TAXII object lists paginate automatically.

FAQ

Frequently asked questions.

What languages do you support?

The official SDK is TypeScript/JavaScript (@ismalicious/sdk on npm). Other languages use the REST API with X-API-KEY, or generate a client from https://api.ismalicious.com/openapi.json.

Are the SDKs open source?

Yes. @ismalicious/sdk is published under the MIT license.

Do SDKs handle rate limiting?

Yes. The TypeScript SDK retries network errors and short-window 429s after the Retry-After delay, up to its retries option (3 by default), then throws RateLimitError. A monthly-quota 429 holds until the 1st of next month (00:00 UTC): catch RateLimitError rather than relying on retries.

Is TypeScript supported?

Yes, our Node.js SDK is written in TypeScript and includes full type definitions.
Explore

Related tools and pages.

Lookup API

API reference

API Playground

Try the API

Authentication

API keys
Research

Related articles from the research blog.

Blog post

API Integration for Threat Intelligence: Automate Your Security

Discover how integrating threat intelligence APIs can transform your security infrastructure. Learn best practices for automated threat detection, continuous monitoring, and documented integration with your existing systems.

Read more

Blog post

Bulk IP and Domain Lookups: Designing Indicator Enrichment That Survives Real Volume

One incident produces hundreds of indicators, and per-indicator lookups are where triage stalls. Here is how to build a batch enrichment pipeline that respects quotas, deduplicates properly, and fails gracefully.

Read more

Blog post

STIX/TAXII Threat Feeds: Operational Guide for OpenCTI, MISP, and SIEM Pipelines

How to wire STIX 2.1 and TAXII 2.1 collections into OpenCTI, MISP, or your SIEM — what to poll, how to handle confidence and aging indicators, and where enrichment APIs fit alongside feed ingestion.

Read more

Test it with your own indicators.

The free plan includes website lookups with no monthly cap and 250 API requests a month. Check the sources and limits, then connect the API.

Create free accountContact Sales

No credit card required · Free API key