AbuseIPDB Blacklist Management

naftiko: 1.0.0-alpha2
info:
  label: AbuseIPDB Blacklist Management
  description: 'AbuseIPDB Blacklist Management. 1 operation. Lead operation: AbuseIPDB Download Blacklist. Self-contained
    Naftiko capability for downloading the community blacklist with confidence, country, and IP-version filtering.'
  tags:
    - AbuseIPDB
    - Blacklist
    - Threat Intelligence
  created: '2026-05-30'
  modified: '2026-05-30'
binds:
  - namespace: env
    keys:
      ABUSEIPDB_API_KEY: ABUSEIPDB_API_KEY
capability:
  consumes:
    - type: http
      namespace: abuseipdb-blacklist
      baseUri: https://api.abuseipdb.com
      description: AbuseIPDB v2 blacklist download surface.
      auth:
        type: apiKey
        in: header
        name: Key
        valueFrom: env.ABUSEIPDB_API_KEY
      resources:
        - name: api-v2-blacklist
          path: /api/v2/blacklist
          operations:
            - name: getBlacklist
              method: GET
              description: AbuseIPDB Download Blacklist
              outputRawFormat: json
              outputParameters:
                - name: result
                  type: object
                  value: $.data
              inputParameters:
                - name: confidenceMinimum
                  in: query
                  type: integer
                  description: Minimum confidence (25-100, default 100).
                - name: limit
                  in: query
                  type: integer
                  description: Max entries to return (varies by plan).
                - name: onlyCountries
                  in: query
                  type: string
                  description: Comma-separated ISO 3166-1 alpha-2 codes to include.
                - name: exceptCountries
                  in: query
                  type: string
                  description: Comma-separated ISO 3166-1 alpha-2 codes to exclude.
                - name: ipVersion
                  in: query
                  type: integer
                  description: Restrict to IP version 4 or 6.
                - name: plaintext
                  in: query
                  type: boolean
                  description: When true, returns plain text instead of JSON.