# AbuseIPDB — how to use (mcp.ai)

Connect your AbuseIPDB account and use 6 tools for security and identity straight from your AI agent. Connect with your own API key. AbuseIPDB is a project dedicated to helping make the internet safer by providing a central repository for reporting and checking IP addresses associated with malicious activities.

## Option A — via MCP (recommended)
Remote MCP endpoint (HTTP, streamable): `https://api.mcp.ai/p_abuselpdb?ms=1787293500000`
Add it as a custom/remote MCP connector in your client (Claude, Cursor, VS Code…), then authenticate when prompted. Once connected, ask the agent to use the server's tools (e.g. `abuselpdb_blacklist`).

## Option B — via direct REST API
Base URL: `https://api.mcp.ai/api/abuselpdb`
Auth: `Authorization: Bearer sk_live_…` — create a workspace API key at https://mcp.ai/settings/api-keys
Discover endpoints: `GET https://api.mcp.ai/api/abuselpdb/_endpoints`

### Endpoints
- `POST https://api.mcp.ai/api/abuselpdb/blacklist` — Retrieves a list of the most reported malicious IP addresses from AbuseIPDB's database. Use this tool to build dynamic blocklists, threat intelligence feeds, or firewall rules. The blacklist is update
  - body: { limit?: integer, ipVersion?: integer, onlyCountries?: string, exceptCountries?: string, confidenceMinimum?: integer }
- `POST https://api.mcp.ai/api/abuselpdb/bulk/report` — Submit multiple IP abuse reports to AbuseIPDB in bulk via CSV upload. Use this when you need to report many malicious IPs at once instead of one-by-one. Returns the count of successfully saved reports
  - body: { csv: string }
- `POST https://api.mcp.ai/api/abuselpdb/check/block` — Tool to check the reputation of all IP addresses in a CIDR range. Use when you need aggregated abuse data for a network block.
  - body: { network: string, maxAgeInDays?: integer }
- `POST https://api.mcp.ai/api/abuselpdb/check/ip` — Tool to check the reputation of an IP address. Use when you need to determine if an IP address has been reported for abusive activity within a specified look-back period. Example: CheckIp(ipAddress='8
  - body: { verbose?: boolean, ipAddress: string, maxAgeInDays?: integer }
- `POST https://api.mcp.ai/api/abuselpdb/clear/address` — Tool to remove all reports associated with a specific IP address. Use when you need to purge your own abuse records after verifying control of the IP.
  - body: { ipAddress: string }
- `POST https://api.mcp.ai/api/abuselpdb/get/reports` — Retrieve abuse reports for a specific IP address from AbuseIPDB. Use this tool to view the history of abuse complaints filed against an IP address, including the reported abuse categories, reporter de
  - body: { page?: integer, perPage?: integer, ipAddress: string, maxAgeInDays?: integer }

## Example prompts
- "What can I do in AbuseIPDB?"
- "Show me a summary of my AbuseIPDB account"

## More
- Page: https://mcp.ai/abuselpdb
- Agent spec (llms.txt): https://mcp.ai/abuselpdb/llms.txt
- Postman collection: https://mcp.ai/abuselpdb/postman.json