← Back to directory

Type-agnostic threat-intelligence enrichment for a SOC or DFIR agent. Give one i...

https://api.agentstools.dev/threat/ioc

Overview

Type-agnostic threat-intelligence enrichment for a SOC or DFIR agent. Give one indicator of compromise of any kind — a file hash, IP, domain, URL or CVE id — and get one normalized, cited verdict. Auto-detects the type, dispatches to the right grain, fuses the sources and returns a verdict, an is_malicious flag, a confidence, malware family when known, per-source citations and reasons. Not a guarantee.

Protocol x402
Price $0.01
Payment Asset USD Coin
Payment Network eip155:8453
Category uncategorized
Provider threat-ioc-enrichment
Source bazaar
Indexed 2026-07-15 13:12:10

Health

Status healthy
Latency (p50) 513ms
Uptime (30d) 100.0%
Reliability Score 90/100
Last Checked 2026-10-31 07:17:40
Last Healthy 2026-10-31 07:17:40
Consecutive Failures 0

x402 Payment Validation

Payment Requirements Valid
Asset Verified Known USDC
Facilitator —

Input Schema

{ "method": "GET", "queryParams": { "indicator": "8.8.8.8" }, "type": "http" }

Output Schema

{ "example": { "citations": [ { "attribution": "iptoasn + Spamhaus DROP", "source": "IP reputation" } ], "confidence": 0.25, "disclaimer": "Reputation indicators, not a guarantee.", "indicator": "8.8.8.8", "is_malicious": null, "malware_family": [], "reasons": [ "No positive reputation signal from the available sources." ], "source_count": 1, "sources": [ "fraud_ip" ], "tags": [], "type": "ipv4", "verdict": "unknown" }, "type": "json" }