AbuseIPDB Abuse Reporting

naftiko: 1.0.0-alpha2
info:
  label: AbuseIPDB Abuse Reporting
  description: 'AbuseIPDB Abuse Reporting. 3 operations. Lead operation: AbuseIPDB Report IP. Self-contained Naftiko
    capability covering single-IP report, CSV bulk-report, and self-service clear of past reports.'
  tags:
    - AbuseIPDB
    - Abuse Reporting
    - Threat Intelligence
  created: '2026-05-30'
  modified: '2026-05-30'
binds:
  - namespace: env
    keys:
      ABUSEIPDB_API_KEY: ABUSEIPDB_API_KEY
capability:
  consumes:
    - type: http
      namespace: abuseipdb-reporting
      baseUri: https://api.abuseipdb.com
      description: AbuseIPDB v2 write surface for community abuse reporting.
      auth:
        type: apiKey
        in: header
        name: Key
        valueFrom: env.ABUSEIPDB_API_KEY
      resources:
        - name: api-v2-report
          path: /api/v2/report
          operations:
            - name: reportIp
              method: POST
              description: AbuseIPDB Report IP
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.data
              inputParameters:
                - name: ip
                  in: form
                  type: string
                  required: true
                  description: IPv4 or IPv6 address to report.
                - name: categories
                  in: form
                  type: string
                  required: true
                  description: Comma-separated category IDs (up to 30).
                - name: comment
                  in: form
                  type: string
                  description: Optional description and supporting log evidence.
                - name: timestamp
                  in: form
                  type: string
                  description: Optional ISO 8601 timestamp.
        - name: api-v2-bulk-report
          path: /api/v2/bulk-report
          operations:
            - name: bulkReportIps
              method: POST
              description: AbuseIPDB Bulk Report IPs
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.data
              inputParameters:
                - name: csv
                  in: multipart
                  type: file
                  required: true
                  description: CSV file with IP, Categories, ReportDate, Comment columns.
        - name: api-v2-clear-address
          path: /api/v2/clear-address
          operations:
            - name: clearAddress
              method: DELETE
              description: AbuseIPDB Clear My Reports for IP
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.data
              inputParameters:
                - name: ipAddress
                  in: query
                  type: string
                  required: true