otx_indicator_details
Retrieve detailed threat intelligence for IP addresses, domains, or hostnames from AlienVault OTX to analyze security indicators and identify potential threats.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"type": "<type>",
"indicator": "<indicator>"
},
"name": "otx_indicator_details"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| type | Yes | Type of indicator | |
| indicator | Yes | Indicator to lookup (IP, domain, etc.) |
Implementation Reference
- src/index.ts:278-290 (handler)The implementation of the 'otx_indicator_details' tool, which uses the otxClient to fetch indicator details.
server.tool( "otx_indicator_details", { type: z.enum(["IPv4", "domain", "hostname"]).describe("Type of indicator"), indicator: z.string().describe("Indicator to lookup (IP, domain, etc.)"), }, async ({ type, indicator }) => { const result = await otxClient.getIndicatorDetails(type, indicator); return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }], }; } );