---
title: "TAXII API root"
method: GET
path: "/taxii/api-root"
tags: ["taxii"]
---

# TAXII API root

`GET /taxii/api-root`

The single API root. `versions` is
`["application/taxii+json;version=2.1"]` and `max_content_length` is
`10485760` (10 MiB); the per-page byte budgets on `/objects` sit below it
so a page can never exceed what is advertised here.

Plan gate, quota rule and routing aliases: see `GET /taxii`.

## Response `200`

API root: `{"title", "description", "versions": ["application/taxii+json;version=2.1"], "max_content_length": 10485760}`

## Other responses

- `401` — Unauthorized - Missing or invalid credential. Emitted by the auth layer, so **not** TAXII-formatted
- `403` — Plan below Pro — `error_code: "UPGRADE_REQUIRED"`

## Changes

- **2026-09-02** `b834b2860af7` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/taxii/api-root/get.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/0fa256b179f3?raw)