---
id: taxii2-client
version: "2.3.0"
license: BSD
license_treatment: permissive
maintenance: dormant
---

# taxii2-client — TAXII 2 Client Library

License: permissive · Maintenance: dormant · Downloads: 318.2K/mo

## What it is and what it does

taxii2-client is a Python library that implements a minimal client for TAXII 2.X servers, the standard protocol for sharing cyber threat intelligence. It provides four main classes—Server, ApiRoot, Collection, and Status—that let you connect to a TAXII server, browse its structure, and retrieve or submit threat intelligence objects (STIX bundles). The library handles authentication, lazy-loads server metadata, and supports both TAXII 2.0 and 2.1 API variants with pagination helpers.

You instantiate a Server object with a URL and optional credentials, then navigate through api_roots to collections and individual objects. The library caches metadata in instances to avoid repeated requests. It depends only on requests, six, and pytz, making it lightweight. However, the project is dormant—no updates since March 2021—so it may not support the latest TAXII server features or Python versions.

Use it for:

- Retrieve threat indicators and malware samples from a TAXII 2.X server for local analysis
- Automate bulk collection of STIX objects from a threat intelligence platform using pagination
- Submit your organization's threat data (STIX bundles) to a shared TAXII collection
- Integrate threat intelligence feeds into a security monitoring or incident response workflow
- Query server metadata and collection capabilities to discover available threat data sources

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

A minimal client library for querying and managing TAXII 2.X threat intelligence servers, supporting server discovery, collection access, object retrieval, and submission.

Yes, if you need to integrate with a TAXII 2.X server and can tolerate dormancy. The package is stable, has no known vulnerabilities, and low install friction. However, verify that your target TAXII server version is compatible and that you don't require Python versions beyond 3.9. Consider it a read-only dependency unless you actively maintain a fork or the upstream project resumes maintenance.

## Install

pip install taxii2-client
uv add taxii2-client
poetry add taxii2-client

## Installing taxii2-client

Before you install: Low install friction with only three common runtime dependencies. However, the package is dormant—last release was 2021-03-12, over 1981 days ago—so expect no active maintenance or security updates.

License in practice: BSD permissive license allows commercial and private use with minimal restrictions, making it suitable for most integration scenarios.

Quickstart:

pip install taxii2-client

from taxii2client.v21 import Server
server = Server('https://example.com/taxii2/', user='user_id', password='user_password')
api_root = server.api_roots[0]
collection = api_root.collections[0]
objects = collection.get_objects()

Requires a live TAXII 2.X server endpoint; authentication credentials may be needed depending on server configuration.

Verify before relying:

- Whether the package remains compatible with current TAXII 2.X server implementations despite dormancy
- Support status for Python versions beyond 3.9 (classifiers list only through 3.9)

## Package facts

- License: BSD (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: dormant
- Downloads: 318.2K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

taxii client library, threat intelligence api, taxii 2.x server, cti data retrieval, stix collection access, cyber threat intelligence, taxii server discovery, threat-intelligence, taxii-protocol, stix-client

[View on SkillFed](https://skillfed.io/packages/taxii2-client) · [View on PyPI](https://pypi.org/project/taxii2-client/)