Enrich IP addresses with Team Cymru Scout
Build a reusable workflow that accepts an IP address via HTTP request or Send-to-Story. Query the Team Cymru Scout API for detailed information, then process the response to filter client-server IPs and keep the relevant fields. Validate the input is a valid IP, handle not-found and rate-limit responses, and retry transient errors. Return the filtered analysis to the originating request or parent story as structured output.
What this prompt builds
Look up an IP in Team Cymru Scout and return filtered, analysis-ready results to the caller.
The problem
Analysts need quick, detailed context on an IP during an investigation, but raw threat-intel responses are noisy and not in a usable shape. Building this lookup repeatedly across workflows wastes effort.
Solution and impact
This workflow queries Team Cymru Scout for an IP, filters client-server IP noise, and returns clean results to the calling HTTP request or parent Story. It's a reusable enrichment building block that gives consistent IP context everywhere.