get_suspicious_ips
Retrieve suspicious IP addresses from Fastly's Next-Gen WAF to identify potential security threats and enhance web application protection.
Instructions
Get list of suspicious IP addresses
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| corpName | No | Corporation name (uses context default if not provided) | |
| siteName | No | Site name (uses context default if not provided) | |
| limit | No | Maximum number of IPs to return |
Implementation Reference
- server.js:1025-1031 (handler)MCP tool handler in the CallToolRequestSchema switch statement that resolves the corporation and site context, validates siteName, and calls the underlying client.getSuspiciousIPs method.
case 'get_suspicious_ips': const { corpName: corpForSuspicious, siteName: siteForSuspicious } = resolveContext(typedArgs); if (!siteForSuspicious) { throw new Error('Site name is required. Please set context or provide siteName parameter.'); } result = await client.getSuspiciousIPs(corpForSuspicious, siteForSuspicious, typedArgs.limit); break; - server.js:672-683 (schema)Input schema definition for the get_suspicious_ips tool, specifying parameters for corpName, siteName, and optional limit.
{ name: 'get_suspicious_ips', description: 'Get list of suspicious IP addresses', inputSchema: { type: 'object', properties: { corpName: { type: 'string', description: 'Corporation name (uses context default if not provided)' }, siteName: { type: 'string', description: 'Site name (uses context default if not provided)' }, limit: { type: 'number', description: 'Maximum number of IPs to return' }, }, }, }, - server.js:215-221 (helper)FastlyNGWAFClient helper method that makes an API GET request to retrieve suspicious IP addresses from the /suspiciousIPs endpoint.
async getSuspiciousIPs(corpName, siteName, limit) { const params = new URLSearchParams(); if (limit) params.append('limit', limit.toString()); const response = await this.api.get(`/corps/${corpName}/sites/${siteName}/suspiciousIPs?${params.toString()}`); return response.data; } - server.js:814-816 (registration)Registration of the tools list handler, which includes get_suspicious_ips in the static tools array returned for ListToolsRequestSchema.
server.setRequestHandler(ListToolsRequestSchema, async () => { return { tools }; });