OTXv2
AlienVault OTX API
What it is and what it does
OTXv2 wraps the AlienVault Open Threat Exchange API, allowing you to fetch threat intelligence pulses, query indicators (IPs, domains, files, URLs), and retrieve threat details programmatically. It's built on three stable dependencies: requests for HTTP calls, python-dateutil and pytz for timestamp handling. The package is designed for security teams and researchers who want to integrate live threat data into their infrastructure—pulling indicators of compromise into firewalls, IDS systems, or custom security tools.
The library supports both read and write operations: you can subscribe to pulses and download their indicators, or create and manage your own pulses in OTX. It's used in production by security analysts and threat intelligence platforms, though the package itself has been dormant since early 2021, meaning no recent updates or bug fixes have been released despite the underlying API continuing to operate.
Use it for:
- Fetch indicators of compromise from subscribed OTX pulses and feed them into your firewall or IDS rules.
- Query threat details for a domain, IP, file hash, or URL to check if it's known malicious.
- Automate creation and management of threat intelligence pulses within OTX from your security workflow.
- Build a command-line tool or dashboard to monitor and display threat indicators your organization is tracking.
- Integrate OTX data into a SIEM or threat hunting platform for real-time indicator enrichment.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
OTXv2 is a Python client for AlienVault's Open Threat Exchange API, enabling you to query threat intelligence data and manage security indicators programmatically.
Yes, with conditions. OTXv2 is stable and has no known vulnerabilities, with low install friction. However, it has been dormant since 2021-04-02—no maintenance for over 1960 days. Install it if you need to integrate with OTX and can accept that bugs or API changes won't be addressed by the maintainers. Verify license terms before use in proprietary contexts, and test compatibility with your Python version since support is unspecified.
Install
otxv2 on PyPI
pip
pip install otxv2uv
uv add otxv2poetry
poetry add otxv2Installing OTXv2
Before you install
Installation is straightforward with low friction—three lightweight runtime dependencies (requests, python-dateutil, pytz). However, the package is dormant: last release was 2021-04-02, over 1960 days ago, with no recent maintenance despite an active repository.
License in practice
License treatment is unclear—no SPDX identifier or raw license text is available in the package metadata. Verify the actual license before use in proprietary or compliance-sensitive contexts.
Quickstart
pip install OTXv2
from OTXv2 import OTXv2
otx = OTXv2("YOUR_API_KEY")
indicators = otx.get_pulse_indicators("pulse_id")
for indicator in indicators:
print(indicator["indicator"])
Requires a valid AlienVault OTX API key (obtain from https://otx.alienvault.com).
Verify before relying
- Python version compatibility—requires_python is unspecified; verify support for your target Python version.
- Whether the dormant status (last release 2021-04-02) affects API compatibility with current OTX endpoints.
- Actual license terms—license_treatment is unclear; check the repository for LICENSE file.
- Current monthly download volume and whether dormancy has affected adoption trends.
Package facts
| License | not declared (unclear) |
| Python support | not specified |
| Install friction | low — pure-Python wheel |
| Runtime dependencies | 3 — requests, python-dateutil, pytz |
| Maintenance | dormant — 1,960 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 86,367/month — #13,868 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: OTXv2-1.5.12-py3-none-any.whl
Tags
More Security packages
Provides Python bindings to the FreeDesktop.org…
permissive · top 1,000 on PyPI
msalMSAL for Python handles OAuth2 and OpenID…
permissive · top 1,000 on PyPI
joserfcjoserfc implements JOSE standards (JWS, JWE,…
permissive · top 1,000 on PyPI
AuthlibAuthlib provides a complete implementation of…
permissive · top 1,000 on PyPI
argon2-cffi-bindingsProvides low-level CFFI bindings to the…
permissive · top 1,000 on PyPI
adalADAL for Python authenticates applications with…
permissive · top 1,000 on PyPI
ioc-fangerConverts defanged indicators of compromise…
permissive · top 15,000 on PyPI
vt-pyOfficial Python client for the VirusTotal REST…
permissive · top 15,000 on PyPI
stix2Serializes and deserializes STIX 2 JSON…
permissive · top 5,000 on PyPI
stixParses, manipulates, and generates STIX v1.2.0…
permissive · top 15,000 on PyPI
pyctiProvides a Python client library for the…
permissive · top 5,000 on PyPI
domaintools-apiProvides a Python interface to DomainTools…
permissive · top 15,000 on PyPI
threatwirethreatwire provides real-time network packet…
permissive · top 15,000 on PyPI
taxii2-clientA minimal client library for querying and…
permissive · top 15,000 on PyPI
stix2-patternsValidates the syntax of STIX 2 Pattern…
permissive · top 5,000 on PyPI
sigmatoolsSigmatools provides command-line utilities and…
copyleft · top 15,000 on PyPI