NewsOperate As is live. Send your first client one link
Operate As

Integration

ThreatFox

Indicators of compromise shared by abuse.ch: IOCs by malware, tag and hash. Your client pastes their ThreatFox key once, and your agent or your code works with their access.

Developer tools

About ThreatFox

Through Operate As, your agent, n8n workflow or code works in ThreatFox with your client's own access. Your client pastes their auth key from ThreatFox once. We store it encrypted, so it never sits in an email or a shared doc. Your agent reaches any endpoint of ThreatFox's API through the request tool, with the client's access attached.

Common uses in Developer tools

  • Check status and alert the team when something breaks
  • Create and update resources from a workflow
  • Report on usage and costs

ThreatFox

ThreatFox · Developer tools

API key

Indicators of compromise shared by abuse.ch: IOCs by malware, tag and hash

The client pastes their auth key from ThreatFox's settings. We store it encrypted.

Tested against ThreatFox's live API.

Building with ThreatFox? The docs have setup steps and code for every tool.

Open the ThreatFox docs

Tools

Your agent calls any endpoint of ThreatFox's API with the request tool, with the client's access attached.

Base URL for request

https://threatfox-api.abuse.ch/api/v1

  • request

    HTTPS ANY /v1/clients/{clientId}/threatfox/{path}

    Any endpoint of ThreatFox's own API, with the client's access attached.

    servicestringrequired
    This service: threatfox
    methodstringrequired
    GET, POST, PUT, PATCH or DELETE
    pathstringrequired
    The path under https://threatfox-api.abuse.ch/api/v1
    queryobjectoptional
    Query parameters
    bodyobjectoptional
    A JSON body

Over MCP every tool also takes client_id, from list_clients. Over HTTPS send it as clientId to https://api.operate.as/v1.

What the client approves

  • Use the ThreatFox key you paste, with only the access you gave that key

Related

More in Developer tools

Browse every service

Get started

Send your next client one link

Add a client, select the services, copy the link. You'll get an email the moment their access is ready. Start free, no card required. Paid plans are one flat monthly price, and a busy month never takes your agents offline.

Prefer email? hello@operate.as