{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/6"},{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Provides a Python client library for the OpenCTI API, enabling developers to programmatically interact with OpenCTI threat intelligence platform instances through standardized methods and utilities.","skillfed_tags":["threat-intelligence","api-client","opencti"],"use_cases":["Automate threat intelligence ingestion by querying OpenCTI for indicators, malware profiles, or campaigns and feeding them into your security tools.","Build custom connectors or enrichment workflows that read from OpenCTI and write results back, leveraging the client's standardized API methods.","Integrate OpenCTI threat data into SOAR platforms or incident response systems via programmatic API calls rather than manual exports.","Develop monitoring dashboards or reporting scripts that pull live threat statistics and entity relationships from an OpenCTI instance."],"what_it_does":"Pycti is the official Python client for OpenCTI, a threat intelligence platform developed by Filigran. It abstracts the OpenCTI REST API into Python methods and utilities, allowing developers to query, create, and manage threat intelligence objects (indicators, malware, campaigns, etc.) programmatically. The client is used both by external integrations and by OpenCTI's own internal components.\n\nThe package brings together a substantial dependency graph\u2014including boto3 for cloud storage, pika for message queuing, fastapi and uvicorn for async web operations, stix2 for standards-based threat data, and observability tools like prometheus-client and opentelemetry\u2014suggesting it is designed for production environments where threat data flows through multiple systems. It requires Python 3.7 or later and is actively maintained, with its last release 3 days old.","worth_installing":"Yes. The package is actively maintained, permissively licensed, has no known vulnerabilities, and is widely used (top 5000 PyPI). Install it if you need to integrate with OpenCTI; the main consideration is ensuring your OpenCTI instance is accessible and that the 18 runtime dependencies align with your environment's constraints."},"id":"pycti","links":{"html":"https://skillfed.io/packages/pycti","md":"https://skillfed.io/packages/pycti.md","pypi":"https://pypi.org/project/pycti/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-11","license_spdx":null,"license_treatment":"permissive","name":"pycti","python_support":"supports_current","summary":"Python API client for OpenCTI."},"popularity":{"monthly_downloads":1917186,"position":3433,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"7.260811.0"}
