taxii2-client

What it is and what it does

taxii2-client is a Python library that implements a minimal client for TAXII 2.X servers, the standard protocol for sharing cyber threat intelligence. It provides four main classes—Server, ApiRoot, Collection, and Status—that let you connect to a TAXII server, browse its structure, and retrieve or submit threat intelligence objects (STIX bundles). The library handles authentication, lazy-loads server metadata, and supports both TAXII 2.0 and 2.1 API variants with pagination helpers.

You instantiate a Server object with a URL and optional credentials, then navigate through api_roots to collections and individual objects. The library caches metadata in instances to avoid repeated requests. It depends only on requests, six, and pytz, making it lightweight. However, the project is dormant—no updates since March 2021—so it may not support the latest TAXII server features or Python versions.

Use it for:

• Retrieve threat indicators and malware samples from a TAXII 2.X server for local analysis
• Automate bulk collection of STIX objects from a threat intelligence platform using pagination
• Submit your organization's threat data (STIX bundles) to a shared TAXII collection
• Integrate threat intelligence feeds into a security monitoring or incident response workflow
• Query server metadata and collection capabilities to discover available threat data sources

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

A minimal client library for querying and managing TAXII 2.X threat intelligence servers, supporting server discovery, collection access, object retrieval, and submission.

Yes, if you need to integrate with a TAXII 2.X server and can tolerate dormancy. The package is stable, has no known vulnerabilities, and low install friction. However, verify that your target TAXII server version is compatible and that you don't require Python versions beyond 3.9. Consider it a read-only dependency unless you actively maintain a fork or the upstream project resumes maintenance.

Install

taxii2-client on PyPI

pip install taxii2-client

uv add taxii2-client

poetry add taxii2-client

Installing taxii2-client

Before you install

Low install friction with only three common runtime dependencies. However, the package is dormant—last release was 2021-03-12, over 1981 days ago—so expect no active maintenance or security updates.

License in practice

BSD permissive license allows commercial and private use with minimal restrictions, making it suitable for most integration scenarios.

Quickstart

pip install taxii2-client

from taxii2client.v21 import Server
server = Server('https://example.com/taxii2/', user='user_id', password='user_password')
api_root = server.api_roots[0]
collection = api_root.collections[0]
objects = collection.get_objects()

Requires a live TAXII 2.X server endpoint; authentication credentials may be needed depending on server configuration.

Verify before relying

• Whether the package remains compatible with current TAXII 2.X server implementations despite dormancy
• Support status for Python versions beyond 3.9 (classifiers list only through 3.9)

Package facts

Evidence: taxii2_client-2.3.0-py2.py3-none-any.whl

Keywords: taxii, taxii2, client, json, cti, cyber, threat, intelligence

Tags

More Security packages