Skip to content

threat-ioc-enrichment · api.agentstools.dev

Type-agnostic threat-intelligence enrichment

Type-agnostic threat-intelligence enrichment for a SOC or DFIR agent. Give one indicator of compromise of any kind, a file hash, IP, domain, URL or CVE id, and get one normalized, cited verdict. Auto-detects the type, dispatches to the right grain, fuses the sources and returns a verdict, an is_malicious flag, a confidence, malware family when known, per-source citations and reasons. Not a guarantee.

Ready now4 calls · 3 buyers in 30 days

Input

The indicator of compromise: a file hash (md5/sha1/sha256), IP, domain, URL or CVE id
Optional type override; auto-detected if omitted

Sample response

Published by the provider. Your run returns a fresh response.

response12 keys
citations1 item
confidence0.25
disclaimer"Reputation indicators, not a guarantee."
indicator"8.8.8.8"
is_maliciousnull
malware_family0 items
reasons1 item
0"No positive reputation signal from the available sources."
source_count1
sources1 item
0"fraud_ip"
tags0 items
type"ipv4"
verdict"unknown"
responseobject, 12 keys
Your agent can do this on its own
Add the MCP URL in Claude Code, Cursor or Codex. Your agent can run Tools within its spending limits, or ask for approval each time. Connect your agent

Connect your agent

Add one MCP URL and your agent can find and run this tool within its spending limits. Choose “Ask each time” if you want to approve every Call.

MCP URL

https://app.aecon.ai/mcp
Terminalbash
claude mcp add --transport http --scope user agentic-economy "https://app.aecon.ai/mcp"

In Claude Code, open /mcp, select agentic-economy, then choose Authenticate.

Track record

Paid calls, last 30 days
4
Buyers, last 30 days
3
Last paid call

Reported by the x402 directory.

A$0.015 per call