# osintverse-community/otx-indicators

Looks up an IP, domain, URL or file hash in AlienVault OTX: the threat reports that mention it, malware, tags

## Install and run

```sh
ot install osintverse-community/otx-indicators
ot run osintverse-community/otx-indicators ip:8.8.8.8
ot run osintverse-community/otx-indicators d:example.com
ot run osintverse-community/otx-indicators url:https://example.com/
```

The first `ot run` installs the tool after asking once. New to `ot`? See https://otinstaller.com/docs/getting-started.

From an AI agent, through ot's MCP server (`ot mcp`):

```
run_tool {"tool":"osintverse-community/otx-indicators","inputs":{"ip":"8.8.8.8"}}
```

## Inputs

| Name | Type | Required | Default | Description |
| --- | --- | --- | --- | --- |
| `ip` | ip | no |  | IP address (give exactly one of ip, domain, url or hash) |
| `domain` | domain | no |  | Domain or host name (give exactly one of ip, domain, url or hash) |
| `url` | url | no |  | URL (give exactly one of ip, domain, url or hash) |
| `hash` | hash | no |  | MD5, SHA-1 or SHA-256 of a file (give exactly one of ip, domain, url or hash) |

## Outputs

Finds: ip, domain, url, document, other, organization, location.

- `document`: A file hash's OTX record
- `other`: Each OTX pulse (community threat report) that mentions the indicator

## What a run does

- Does not contact the target.
- Does not collect personal data.
- Does not need an account.
- Does not notify the target.
- Usually takes about 5 seconds.
- Connects to otx.alienvault.com.

An agent needs the person's consent before running this tool, because it goes online. See https://otinstaller.com/docs/agents#consent.

## API keys

- `OTX_API_KEY` (optional, free): Your OTX API key; optional, it raises the rate limits Get one at https://otx.alienvault.com/settings

Store a key with `ot keys set NAME`; it stays in the OS keychain.

## Trust

- Latest version: 0.1.0
- Signed: yes
- Verified publisher: yes
- Health: unknown
- Installs in the last 30 days: 0
- License: MIT
- Runtime: Docker image, pinned by digest
- Repository: https://github.com/osintverse-community/otx-indicators

## Links

- Web page: https://otinstaller.com/osintverse-community/otx-indicators
- JSON: https://api.otinstaller.com/v1/tools/osintverse-community/otx-indicators
- README: https://github.com/osintverse-community/otx-indicators#readme
- Security details: https://otinstaller.com/osintverse-community/otx-indicators/security
- Report a problem: https://otinstaller.com/osintverse-community/otx-indicators/report