---
updatedAt: 2026-02-27T14:01:47.000Z
agentTools:
  projectIndex: https://gtidocs.readme.io/llms.txt
---

# Google Threat Intelligence API key

All Google Threat Intelligence **users** can access their API key by [logging into the platform ](https://www.virustotal.com/gui/sign-in)and selecting the **API Key** option found either in the top-right corner or via the left-hand menu or by simply accessing this [link](https://www.virustotal.com/gui/my-apikey).

Your personal key will be listed in the section labeled **GOOGLE THREAT INTELLIGENCE API KEY**.

<Image align="center" width="700px" src="https://files.readme.io/69f5223c873bc3abdbc5131853cc6d369ac3f4d8ce503e12235e20d65a75906f-user_api_key_20260227.png" />

For **integrations**, Google TI **group administrators** can [create **Service Accounts** ](https://gtidocs.readme.io/docs/admins-guide#131-adding-a-new-service-account-to-an-existing-google-threat-intelligence-group)and utilize [their API keys](https://gtidocs.readme.io/docs/admins-guide#133-getting-a-service-accounts-api-key) instead. These are ideal because they are not tied to a specific individual and do not require email addresses or the completion of invitation forms.

# Legacy Mandiant API keys

Customers using legacy Mandiant Threat Intelligence integrations **must replace their existing basic authentication configuration with a Google Threat Intelligence API key**. Following the [migration guide](https://gtidocs.readme.io/docs/mati-migration-guide#out-of-the-box-third-party-integrations), update your credentials as follows:

* **API Secret** (`api_secret`): Replace your Mandiant API Secret with your [new Google TI Service Account](https://gtidocs.readme.io/docs/admins-guide#131-adding-a-new-service-account-to-an-existing-google-threat-intelligence-group) [API key](https://gtidocs.readme.io/docs/admins-guide#133-getting-a-service-accounts-api-key).
* **API Key ID** (`api_key`): Replace your Mandiant API Key ID with the string `gti-user`.