Argus Reputation MCP Tools#

These MCP tools let you retrieve Argus Cyber IOC reputation data for IP addresses and fully qualified domain names.

They support two common tasks:

  • look up reputation observations for an IP address or domain

  • calculate the current reputation score record for an IP address or domain

General Notes#

  • Use these tools when you want the LLM to retrieve reputation data from Argus APIs.

  • Reputation observation lookups return observed IOC reputation information for the requested indicator.

  • Calculated reputation lookups return the calculated score record for the requested indicator.

  • The tools return live Argus API results. The LLM should use those results as the source of truth instead of guessing reputation status.

  • IP tools expect an IP address. Domain tools expect a fully qualified domain name.

Tool: lookupIPReputationObservation#

Purpose

Search Argus Cyber IOC reputation observations for one IP address.

Arguments

Field

Description

Type

Default

Required

ipAddress

IP address to look up.

string

None

Yes

Usage notes

  • Use this when the user asks for observed reputation data for an IP address.

  • The lookup waits briefly for observation count information before returning results.

Tool: lookupDomainReputationObservation#

Purpose

Search Argus Cyber IOC reputation observations for one fully qualified domain name.

Arguments

Field

Description

Type

Default

Required

domainNameFQDN

Fully qualified domain name to look up.

string

None

Yes

Usage notes

  • Use this when the user asks for observed reputation data for a domain.

  • The domain should be a fully qualified domain name, not a partial search term.

  • The lookup waits briefly for observation count information before returning results.

Tool: calculatedIPReputation#

Purpose

Calculate and retrieve the Argus Cyber IOC reputation score record for one IP address.

Arguments

Field

Description

Type

Default

Required

ipAddress

IP address to calculate reputation for.

string

None

Yes

Usage notes

  • Use this when the user asks for the current calculated reputation score or reputation assessment for an IP address.

  • This is different from observation lookup: it returns calculated reputation scoring rather than raw observations.

Tool: calculatedDomainReputation#

Purpose

Calculate and retrieve the Argus Cyber IOC reputation score record for one fully qualified domain name.

Arguments

Field

Description

Type

Default

Required

domainNameFQDN

Fully qualified domain name to calculate reputation for.

string

None

Yes

Usage notes

  • Use this when the user asks for the current calculated reputation score or reputation assessment for a domain.

  • The domain should be a fully qualified domain name, not a partial search term.

  • This is different from observation lookup: it returns calculated reputation scoring rather than raw observations.