---
title: "Add objects (refused)"
method: POST
path: "/taxii/api-root/collections/{collectionId}/objects"
tags: ["taxii"]
---

# Add objects (refused)

`POST /taxii/api-root/collections/{collectionId}/objects`

## Request

- Base URL: `https://api.ismalicious.com`
- URL: `https://api.ismalicious.com/taxii/api-root/collections/{collectionId}/objects`
- Auth: one of:
  - API key in header `X-API-KEY`
  - HTTP bearer
  - HTTP basic

Every collection is `can_write: false`: a POST is answered 403, as §5.5
requires, with the TAXII error message.

Plan gate and routing aliases: see `GET /taxii`.

## Path parameters

- `collectionId` string, required

## Other responses

- `403`: Read-only collection, or plan below Pro (`error_code: "UPGRADE_REQUIRED"`)
- `404`: Unknown collection id

## Changes

- **2026-10-03** `876eab76f736`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/taxii/api-root/collections/:collectionId/objects/post.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) - [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/b6f45e6169a7?raw)