Argus Reputation MCP Tools¶
These MCP tools let you retrieve Argus Cyber IOC reputation data for IP addresses and fully qualified domain names.
They support two common tasks:
- look up reputation observations for an IP address or domain
- calculate the current reputation score record for an IP address or domain
General Notes¶
- Use these tools when you want the LLM to retrieve reputation data from Argus APIs.
- Reputation observation lookups return observed IOC reputation information for the requested indicator.
- Calculated reputation lookups return the calculated score record for the requested indicator.
- The tools return live Argus API results. The LLM should use those results as the source of truth instead of guessing reputation status.
- IP tools expect an IP address. Domain tools expect a fully qualified domain name.
Tool: lookupIPReputationObservation¶
Purpose
Search Argus Cyber IOC reputation observations for one IP address.
Arguments
| Field | Description | Type | Default | Required |
|---|---|---|---|---|
ipAddress |
IP address to look up. | string |
None | Yes |
Usage notes
- Use this when the user asks for observed reputation data for an IP address.
- The lookup waits briefly for observation count information before returning results.
Tool: lookupDomainReputationObservation¶
Purpose
Search Argus Cyber IOC reputation observations for one fully qualified domain name.
Arguments
| Field | Description | Type | Default | Required |
|---|---|---|---|---|
domainNameFQDN |
Fully qualified domain name to look up. | string |
None | Yes |
Usage notes
- Use this when the user asks for observed reputation data for a domain.
- The domain should be a fully qualified domain name, not a partial search term.
- The lookup waits briefly for observation count information before returning results.
Tool: calculatedIPReputation¶
Purpose
Calculate and retrieve the Argus Cyber IOC reputation score record for one IP address.
Arguments
| Field | Description | Type | Default | Required |
|---|---|---|---|---|
ipAddress |
IP address to calculate reputation for. | string |
None | Yes |
Usage notes
- Use this when the user asks for the current calculated reputation score or reputation assessment for an IP address.
- This is different from observation lookup: it returns calculated reputation scoring rather than raw observations.
Tool: calculatedDomainReputation¶
Purpose
Calculate and retrieve the Argus Cyber IOC reputation score record for one fully qualified domain name.
Arguments
| Field | Description | Type | Default | Required |
|---|---|---|---|---|
domainNameFQDN |
Fully qualified domain name to calculate reputation for. | string |
None | Yes |
Usage notes
- Use this when the user asks for the current calculated reputation score or reputation assessment for a domain.
- The domain should be a fully qualified domain name, not a partial search term.
- This is different from observation lookup: it returns calculated reputation scoring rather than raw observations.