{"id":"40378f02-1009-40be-a514-7cf23107449b","url":"https://api.agentstools.dev/threat/ioc?indicator=8.8.8.8","method":"GET","fingerprint":"af67dcf477ad9c7701f9a974fe15da3e42d821fc7d566f6eb62a0a86b3aa32a9","name":"threat-ioc-enrichment","description":null,"category":"data-enrichment","docs_url":null,"advertised_price_usd":"0.010000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453"],"pay_to":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","input_schema":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["indicator"],"properties":{"type":{"enum":["md5","sha1","sha256","hash","ip","ipv4","ipv6","domain","url","cve"],"type":"string","description":"Optional type override; auto-detected if omitted"},"indicator":{"type":"string","description":"The indicator of compromise: a file hash (md5/sha1/sha256), IP, domain, URL or CVE id"}}}},"additionalProperties":false},"output_schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}},"schema_completeness":0,"status":"degraded","first_seen_at":"2026-08-23 21:53:43.224728+00","last_seen_at":"2026-08-23 21:53:43.006+00","last_success_at":"2026-09-14 08:24:38.473+00","dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-09-14 08:29:38.473+00","search_tsv":"'data':6 'data-enrich':5 'enrich':4,7 'ioc':3 'threat':2 'threat-ioc-enrich':1","catalog_number":"11538","x402_version":2,"resource_url":"https://api.agentstools.dev/threat/ioc","resource_description":"Type-agnostic threat-intelligence enrichment for a SOC or DFIR agent. Give one indicator of compromise of any kind — a file hash, IP, domain, URL or CVE id — and get one normalized, cited verdict. Auto-detects the type, dispatches to the right grain, fuses the sources and returns a verdict, an is_malicious flag, a confidence, malware family when known, per-source citations and reasons. Not a guarantee.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"indicator":"8.8.8.8"}},"output":{"type":"json","example":{"tags":[],"type":"ipv4","reasons":["No positive reputation signal from the available sources."],"sources":["fraud_ip"],"verdict":"unknown","citations":[{"source":"IP reputation","attribution":"iptoasn + Spamhaus DROP"}],"indicator":"8.8.8.8","confidence":0.25,"disclaimer":"Reputation indicators, not a guarantee.","is_malicious":null,"source_count":1,"malware_family":[]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["indicator"],"properties":{"type":{"enum":["md5","sha1","sha256","hash","ip","ipv4","ipv6","domain","url","cve"],"type":"string","description":"Optional type override; auto-detected if omitted"},"indicator":{"type":"string","description":"The indicator of compromise: a file hash (md5/sha1/sha256), IP, domain, URL or CVE id"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact","network":"eip155:8453","amountAtomic":"10000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 08:24:38.473+00","bazaar_validation_error":null,"window":"24h","probes_n":23,"handshake_uptime":0.9130435,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":780,"latency_p90":3571,"price_drift_pct":0,"score":0.8152,"computed_at":"2026-09-14 08:24:56.296+00","source_metadata":[{"raw":{"url":"https://api.agentstools.dev/threat/ioc?indicator=8.8.8.8","name":"threat-ioc-enrichment","method":"GET","source":"bazaar:api.cdp.coinbase.com","fingerprint":"af67dcf477ad9c7701f9a974fe15da3e42d821fc7d566f6eb62a0a86b3aa32a9","advertisedPriceUsd":0.01},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://api.agentstools.dev/threat/ioc","resource_description":"Type-agnostic threat-intelligence enrichment for a SOC or DFIR agent. Give one indicator of compromise of any kind — a file hash, IP, domain, URL or CVE id — and get one normalized, cited verdict. Auto-detects the type, dispatches to the right grain, fuses the sources and returns a verdict, an is_malicious flag, a confidence, malware family when known, per-source citations and reasons. Not a guarantee.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"indicator":"8.8.8.8"}},"output":{"type":"json","example":{"tags":[],"type":"ipv4","reasons":["No positive reputation signal from the available sources."],"sources":["fraud_ip"],"verdict":"unknown","citations":[{"source":"IP reputation","attribution":"iptoasn + Spamhaus DROP"}],"indicator":"8.8.8.8","confidence":0.25,"disclaimer":"Reputation indicators, not a guarantee.","is_malicious":null,"source_count":1,"malware_family":[]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["indicator"],"properties":{"type":{"enum":["md5","sha1","sha256","hash","ip","ipv4","ipv6","domain","url","cve"],"type":"string","description":"Optional type override; auto-detected if omitted"},"indicator":{"type":"string","description":"The indicator of compromise: a file hash (md5/sha1/sha256), IP, domain, URL or CVE id"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact","network":"eip155:8453","amountAtomic":"10000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 08:24:38.473+00","bazaar_validation_error":null},"sonar_metrics":{"score":0.8152,"uptime":0.9130435,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":780,"latency_p90":3571,"price_drift_pct":0},"cdp_indexed":false,"confidence":"high"}