---
title: "Retrieving Data from the TAXII 2.1 Server (App Version 1.0)"
slug: "retrieving-data-from-the-taxii-21-server"
description: "This article provides an overview of how TAXII users can use the TAXII REST API to retrieve data from the TAXII 2.1 server."
updated: 2022-09-02T14:09:58Z
published: 2022-09-02T14:09:58Z
canonical: "knowledge.threatconnect.com/retrieving-data-from-the-taxii-21-server"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Retrieving Data from the TAXII 2.1 Server (App Version 1.0)

To retrieve data from the ThreatConnect TAXII™ 2.1 server via the TAXII REST API, you must use a TAXII user account. If you do not have a TAXII user account, see [*Creating a TAXII User for the TAXII 2.1 Server*](/v1/docs/creating-a-taxii-user-for-the-taxii-21-server).

## Authentication

The TAXII REST API uses [basic authentication](https://swagger.io/docs/specification/authentication/basic-authentication/#:~:text=Basic%20authentication%20is%20a%20simple,%2Dencoded%20string%20username%3Apassword%20.), which is completed using the username and password of your TAXII user account.

## Required Headers

The **Accept** header must be set to application/taxii+json;version=2.1.

## Available Endpoints

Refer to Table 1 for a description of each available API endpoint on the ThreatConnect TAXII 2.1 server and supported HTTP method for each endpoint.

| Endpoint | HTTP Method | Description |
| --- | --- | --- |
| /tc_taxii/ | GET | Retrieves information about the ThreatConnect TAXII 2.1 server |
| /tc_taxii/collections/ | GET | Retrieves information about all collections available on the ThreatConnect TAXII 2.1 server |
| /tc_taxii/collections/{collection_id or org_name}/ | GET | Retrieves information about a specific collection available on the ThreatConnect TAXII 2.1 server |
| /tc_taxii/collections/{collection_id or org_name}/manifest/ | GET | Retrieves manifest information about the contents of a specific collection available on the ThreatConnect TAXII 2.1 server |
| /tc_taxii/collections/{collection_id or org_name}/objects/ | GET | Retrieves all objects from a specific collection available on the ThreatConnect TAXII 2.1 server |
| /taxii2/ | GET | Retrieves information about the TAXII 2.1 server and available API Roots |

## Available Parameters

[Parameters](https://docs.oasis-open.org/cti/taxii/v2.1/cs01/taxii-v2.1-cs01.html#_Toc31107517) included in common STIX™ 2.1 frameworks are supported for the API endpoints listed in Table 1.

## Example Requests and Responses

Example requests and responses for each endpoint listed in Table 1 are available at [docs.threatconnect.com/en/latest/rest_api/taxii/taxii_2.1.html](https://docs.threatconnect.com/en/latest/rest_api/taxii/taxii_2.1.html).

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc. STIX™ and TAXII™ are trademarks of The MITRE Corporation.*

20103-04 v.05.A