API | abuse.ch

Obtain an Auth-Key (Required)

In order to interact with the Hunting APIs, you need to obtain an Auth-Key first. If you don't have one you can get one for free here:

Whenever you interact with one of the ThreatFox APIs, you must include the HTTP header Auth-Key with your Auth-Key. Example curl command:

curl -H "Auth-Key: YOUR-AUTH-KEY" -X POST https://hunting-api.abuse.ch/api/v1/ -d '{ "query": "get_fplist" }'

You can obtain a copy of the False Positive List by sending a HTTP request to the Hunting API as follow:

Key	Required?	Comment	Sample value
`query`	Yes	Selector, must be `get_fplist`	get_fplist
`format`	Yes	Format you want to have. Supported: `csv` and `json`	json

Here's a sample curl command that describes how to query the API for a get_fplist:

    curl -H "Auth-Key: YOUR-AUTH-KEY" -X POST https://hunting-api.abuse.ch/api/v1/ -d '{ "query": "get_fplist", "format": "csv" }'