get_suspicious_ips
Retrieve suspicious IP addresses from Fastly's Next-Gen WAF to identify potential security threats and enhance web application protection.
Instructions
Get list of suspicious IP addresses
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "get_suspicious_ips"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| corpName | No | Corporation name (uses context default if not provided) | |
| siteName | No | Site name (uses context default if not provided) | |
| limit | No | Maximum number of IPs to return |
Implementation Reference
- server.js:1025-1031 (handler)MCP tool handler in the CallToolRequestSchema switch statement that resolves the corporation and site context, validates siteName, and calls the underlying client.getSuspiciousIPs method.
case 'get_suspicious_ips': const { corpName: corpForSuspicious, siteName: siteForSuspicious } = resolveContext(typedArgs); if (!siteForSuspicious) { throw new Error('Site name is required. Please set context or provide siteName parameter.'); } result = await client.getSuspiciousIPs(corpForSuspicious, siteForSuspicious, typedArgs.limit); break; - server.js:672-683 (schema)Input schema definition for the get_suspicious_ips tool, specifying parameters for corpName, siteName, and optional limit.
{ name: 'get_suspicious_ips', description: 'Get list of suspicious IP addresses', inputSchema: { type: 'object', properties: { corpName: { type: 'string', description: 'Corporation name (uses context default if not provided)' }, siteName: { type: 'string', description: 'Site name (uses context default if not provided)' }, limit: { type: 'number', description: 'Maximum number of IPs to return' }, }, }, }, - server.js:215-221 (helper)FastlyNGWAFClient helper method that makes an API GET request to retrieve suspicious IP addresses from the /suspiciousIPs endpoint.
async getSuspiciousIPs(corpName, siteName, limit) { const params = new URLSearchParams(); if (limit) params.append('limit', limit.toString()); const response = await this.api.get(`/corps/${corpName}/sites/${siteName}/suspiciousIPs?${params.toString()}`); return response.data; } - server.js:814-816 (registration)Registration of the tools list handler, which includes get_suspicious_ips in the static tools array returned for ListToolsRequestSchema.
server.setRequestHandler(ListToolsRequestSchema, async () => { return { tools }; });