API & Tools

SDKs & Libraries Official client libraries

Official TypeScript SDK with typed check, stream, TAXII, and webhook helpers. Other languages use the REST API.

TypeScriptPythonGoRust

REST · same response shape across every SDK

# Or just use curl
curl -G "https://api.ismalicious.com/check" \
  --data-urlencode "query=example.com" \
  --data-urlencode "enrichment=standard" \
  -H "X-API-KEY: YOUR_API_KEY"

Official SDK

100 %

API Coverage

TypeScript

Full Types

MIT

License

Capabilities

Key features. Everything you need to protect your infrastructure and users.

TypeScript SDK

npm install @ismalicious/sdk — typed check, stream, TAXII, webhooks, monitoring.

OpenAPI

https://api.ismalicious.com/openapi.json — generate Python, Go, or Rust clients until official SDKs exist.

curl / any HTTP client

GET /check?query=… with X-API-KEY. Same contract the TypeScript SDK wraps.

Auto Retries

Automatic retry with exponential backoff.

Pagination

Built-in pagination helpers for list endpoints.

Applications

Use cases. How security teams use this tool.

Quick Integration

Get started in minutes with idiomatic code.

Type Safety

Full type definitions catch errors at compile time.

Best Practices

SDKs implement retry logic and error handling.

Community

Open source with active GitHub community.

Official TypeScript SDK

The published client is @ismalicious/sdk on npm. It covers check, bulk, stream, TAXII, webhooks, and monitoring. Python, Go, and Rust official packages are not published; generate them from https://api.ismalicious.com/openapi.json or call GET /check with X-API-KEY.

Type Safety and Developer Experience

The TypeScript SDK mirrors the API response schema with full IntelliSense. Other languages should follow OpenAPI or the REST examples on /api-docs.

Production-Ready Error Handling

The TypeScript SDK retries network errors and short-window 429s with backoff, honouring Retry-After and its retries option, applies a per-request timeout (30 seconds by default), and throws typed errors: AuthenticationError, RateLimitError, ValidationError, NotFoundError, TimeoutError and ApiError.

Open Source and Community Driven

The TypeScript SDK is open source under the MIT license on GitHub. Python, Go, and Rust official packages are not published — generate a client from https://api.ismalicious.com/openapi.json or call GET /check with X-API-KEY.

Support

Frequently asked questions.

What languages do you support?

The official SDK is TypeScript/JavaScript (@ismalicious/sdk on npm). Other languages use the REST API with X-API-KEY, or generate a client from https://api.ismalicious.com/openapi.json.

Are the SDKs open source?

Yes, all our SDKs are open source and available on GitHub under the MIT license.

Do SDKs handle rate limiting?

The TypeScript SDK retries network errors and short-window 429s after the Retry-After delay, up to its retries option, then throws RateLimitError. A monthly-quota 429 does not clear before the 1st of next month (00:00 UTC): catch RateLimitError rather than relying on retries.

Is TypeScript supported?

Yes, our Node.js SDK is written in TypeScript and includes full type definitions.

Explore

Related tools.

Lookup API

API reference

API Playground

Try the API

Authentication

API keys

Research

Related articles. Learn more from our security research blog.

Blog post

API Integration for Threat Intelligence: Automate Your Security

Discover how integrating threat intelligence APIs can transform your security infrastructure. Learn best practices for automated threat detection, continuous monitoring, and documented integration with your existing systems.

Blog post

Bulk IP and Domain Lookups: Designing Indicator Enrichment That Survives Real Volume

One incident produces hundreds of indicators, and per-indicator lookups are where triage stalls. Here is how to build a batch enrichment pipeline that respects quotas, deduplicates properly, and fails gracefully.

Blog post

STIX/TAXII Threat Feeds: Operational Guide for OpenCTI, MISP, and SIEM Pipelines

How to wire STIX 2.1 and TAXII 2.1 collections into OpenCTI, MISP, or your SIEM — what to poll, how to handle confidence and aging indicators, and where enrichment APIs fit alongside feed ingestion.

Get Started

Ready to get started?

Join thousands of security teams using isMalicious to protect their infrastructure.

Create free account Contact Sales

No credit card required · Free API key