Data Feeds API

You can obtain Threat Data Feeds by using the Kaspersky Threat Intelligence Portal API methods.

Endpoints, required parameters, responses, and usage examples are described in the OpenAPI documentation.

You can use the Data Feeds API with an API token. In this case, the Bearer authentication scheme is required. Also, you can use the Data Feeds API with a certificate, if using an API token is not allowed by your organization. In this case, the Basic authentication scheme is required. For details, please see the OpenAPI documentation.

Before working with the Kaspersky Threat Intelligence Portal API, you must accept the Terms and Conditions online in your browser at https://tip.kaspersky.com.

To obtain an API token, you must sign in to Kaspersky Threat Intelligence Portal via your browser, and then request an API token.

To obtain Data Feeds by using Kaspersky Threat Intelligence Portal API with your API token:

Specify the Bearer authentication scheme.
Specify the required HTTP method.
Run your query by using one of the methods described in the API documentation.

If necessary, you can specify the Basic authentication scheme and use your API token as described below.

To obtain Data Feeds by using the Kaspersky Threat Intelligence Portal API with Basic authentication scheme:

Specify the Basic authentication scheme.
Specify the user name (login) api_token and your API token as password.
Login api_token is the same for all users within the Data Feeds API service.
Specify the required HTTP method.
Run your query by using one of the methods described in the API documentation.

View the OpenAPI specification describing requests to the Kaspersky Threat Intelligence Portal API