Create Blocklist
create-blocklistDynamically generate a blocklist auto-populated with IPs matching a GNQL query. Automate threat blocking by defining query-based rules.
Instructions
Create a dynamic blocklist from a GNQL query. The blocklist auto-populates with IPs matching the query. Requires a plan entitled to blocklists.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Human-friendly blocklist name | |
| query | Yes | GNQL query whose matching IPs populate the blocklist | |
| enabled | No | Whether the blocklist is active (default: true) | |
| ip_limit | No | Max IPs to include | |
| workspace_id | No | Workspace ID (UUID). Defaults to the workspace the API key is bound to. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| name | No | ||
| query | No | ||
| token | No | ||
| enabled | No | ||
| ip_limit | No | ||
| created_at | No | ||
| updated_at | No | ||
| workspace_id | No | ||
| last_ip_count | No | ||
| entitlement_level | No | ||
| query_workspace_id | No |