# data_ip_threat

IP threat-intel: open ports + known CVEs/vulnerabilities + hostnames + tags for any IP (Shodan InternetDB). For security, fraud, and abuse-screening agents. Example call: {"ip": "8.8.8.8"} Cost: $0.005–$0.05 USDC on Base per call.

Agent View of the PolicyLayer registry record for `data_ip_threat`. HTML page: https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/data-ip-threat

## Facts

- Tool: `data_ip_threat`
- Server: GoCreative Agent API (`https://api.gocreativeai.com/mcp`) — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api.md
- Homepage: https://github.com/https://api.gocreativeai.com/mcp
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server auth posture: open
- Server rate-limited: no
- Parameters: 1 (1 required)
- Recommended policy verdict: Allowed

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `ip` | string | yes |  |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "data_ip_threat",
    "arguments": {
      "ip": "<ip>"
    }
  }
}
```

## Why data_ip_threat is rated Low

This tool performs threat intelligence lookups against a provided IP address, querying an external database (Shodan InternetDB) to retrieve existing threat information. It is purely informational and read-only—it does not modify, delete, execute commands, or commit financial transactions. While the data returned could be sensitive, the tool itself only retrieves and does not act destructively.

From the tool's own definition: "IP threat-intel: open ports + known CVEs/vulnerabilities + hostnames + tags for any IP (Shodan InternetDB). For security, fraud, and abuse-screening agents. The tool retrieves threat intelligence data about an IP address without modifying or deleting any data."

## Use case

AI agents call data_ip_threat to retrieve information from GoCreative Agent API without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches GoCreative Agent API:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "data_ip_threat": {}
  }
}
```

## Other tools on GoCreative Agent API (631)

- `calc_force` — Destructive — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/calc-force.md
- `guard_prompt` — Destructive — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/guard-prompt.md
- `screen_fbi_wanted` — Destructive — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/screen-fbi-wanted.md
- `screen_federal_vendor` — Destructive — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/screen-federal-vendor.md
- `screen_lobbyist` — Destructive — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/screen-lobbyist.md
- `screen_un_sanctions` — Destructive — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/screen-un-sanctions.md
- `screen_us_csl` — Destructive — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/screen-us-csl.md
- `calc_gpa` — Execute — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/calc-gpa.md
- `parse_imsi` — Execute — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/parse-imsi.md
- `parse_iso8601_duration` — Execute — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/parse-iso8601-duration.md
- `realestate_redfin_new_listings` — Execute — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/realestate-redfin-new-listings.md
- `ai_ask` — Financial — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/ai-ask.md
- `enrich_browserbase` — Financial — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/enrich-browserbase.md
- `lookup_credit_card_validate` — Financial — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/lookup-credit-card-validate.md
- `lookup_lighthouse` — Financial — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/lookup-lighthouse.md
- `lookup_qr_code` — Financial — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/lookup-qr-code.md
- `lookup_uuid` — Financial — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/lookup-uuid.md
- `scrape_firefoxstore` — Financial — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/scrape-firefoxstore.md
- `verdict_pay_safe` — Financial — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/verdict-pay-safe.md
- `ai_pro` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/ai-pro.md
- `ai_ultra` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/ai-ultra.md
- `amazon_products_asin` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/amazon-products-asin.md
- `amazon_products_price` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/amazon-products-price.md
- `amazon_products_search` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/amazon-products-search.md
- `audit_github` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/audit-github.md
- `bulk_crypto` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/bulk-crypto.md
- `bulk_dns` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/bulk-dns.md
- `bulk_email_validate` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/bulk-email-validate.md
- `bulk_github` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/bulk-github.md
- `bulk_ip` — Read — https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api/bulk-ip.md
- …and 601 more: https://policylayer.com/tools/io-github-colinhughes2121-gocreative-agent-api.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-colinhughes2121-gocreative-agent-api · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-colinhughes2121-gocreative-agent-api