naftiko: 1.0.0-alpha2
info:
  label: AbuseIPDB IP Reputation Lookup
  description: 'AbuseIPDB IP Reputation Lookup. 3 operations. Lead operation: AbuseIPDB Check IP. Self-contained Naftiko
    capability that exposes single-IP and CIDR-block reputation reads plus paginated report retrieval.'
  tags:
    - AbuseIPDB
    - IP Reputation
    - Threat Intelligence
  created: '2026-05-30'
  modified: '2026-05-30'
binds:
  - namespace: env
    keys:
      ABUSEIPDB_API_KEY: ABUSEIPDB_API_KEY
capability:
  consumes:
    - type: http
      namespace: abuseipdb-reputation
      baseUri: https://api.abuseipdb.com
      description: AbuseIPDB v2 reputation read surface. Self-contained, no shared references.
      auth:
        type: apiKey
        in: header
        name: Key
        valueFrom: env.ABUSEIPDB_API_KEY
      resources:
        - name: api-v2-check
          path: /api/v2/check
          operations:
            - name: checkIp
              method: GET
              description: AbuseIPDB Check IP
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.data
              inputParameters:
                - name: ipAddress
                  in: query
                  type: string
                  required: true
                  description: IPv4 or IPv6 address to look up.
                - name: maxAgeInDays
                  in: query
                  type: integer
                  description: Limit reports to the last N days (1-365, default 30).
                - name: verbose
                  in: query
                  type: boolean
                  description: When true, include recent individual reports.
        - name: api-v2-check-block
          path: /api/v2/check-block
          operations:
            - name: checkBlock
              method: GET
              description: AbuseIPDB Check CIDR Block
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.data
              inputParameters:
                - name: network
                  in: query
                  type: string
                  required: true
                  description: CIDR network range (e.g. 192.0.2.0/24).
                - name: maxAgeInDays
                  in: query
                  type: integer
                  description: Limit reports to the last N days (1-365).
        - name: api-v2-reports
          path: /api/v2/reports
          operations:
            - name: listReports
              method: GET
              description: AbuseIPDB List Reports for IP
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.data
              inputParameters:
                - name: ipAddress
                  in: query
                  type: string
                  required: true
                - name: maxAgeInDays
                  in: query
                  type: integer
                - name: page
                  in: query
                  type: integer
                - name: perPage
                  in: query
                  type: integer