{"uid":"cap_HjyqRo-HfGw5D0vRKXavi","slug":"polyform-security-threat-lookup-c0a17acd","name":"Polyform Security Threat Lookup","description":"Pay-per-call data endpoints for AI agents. USDC on Base via x402. No account, no API key — one micropayment per call.","url":"https://api.polyform.org/v1/security/threat-lookup?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"type":"ip","indicator":"1.2.3.4","normalizedVerdict":"CLEAR"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_0S_332n-Bp4BsOs7cA40j","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up an IP address or other indicator against a threat intelligence database and returns a normalized threat verdict","exampleAgentPrompt":"Check if the IP address 198.51.100.42 is a known threat — I want to know if it's flagged as malicious, a scanner, or clear.","exampleUseCases":[{"title":"Block malicious IPs in real time","prompt":"Before processing this incoming request from 45.33.32.156, check if that IP is a known threat or scanner so I can decide whether to block it."},{"title":"Investigate suspicious login origin","prompt":"We got a login attempt from 91.108.4.1 that looks weird — can you check if that IP has a bad reputation or has been flagged as malicious?"},{"title":"Enrich security alert with threat context","prompt":"I have a security alert mentioning IP 185.220.101.34 — look it up and tell me if it's a known threat actor or comes back clean."}],"resultDescription":"Returns a JSON object containing the indicator type (e.g. 'ip'), the indicator value queried, and a normalizedVerdict field (e.g. 'CLEAR', 'MALICIOUS', or similar) indicating the threat assessment of the queried entity.","failureModes":["Invalid or malformed IP address returns an error response","Unrecognized indicator type may return an error","Payment failure via x402 results in 402 response and no data returned","Unknown or unindexed IP may return CLEAR by default even if no data exists","Network timeout if the threat database is temporarily unavailable"],"whenToPreferThis":"Choose this endpoint when you need a quick, pay-per-call threat reputation lookup for IP addresses without requiring an account or API key. Ideal for AI agents that need to enrich security events, validate incoming traffic, or gate access based on threat reputation on a per-query basis using USDC micropayments on Base.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T07:05:16.759Z","isFirstParty":false,"canonicalSlug":"polyform-security-threat-lookup-c0a17acd"}