Nebulock · Arazzo Workflow

Run a Nebulock hunt and generate a report

Version 1.0.0

Create a hunt, add a follow-up directive, then generate and fetch its report.

1 workflow 1 source API 1 provider
View Spec View on GitHub CompanySecurityThreat HuntingThreat DetectionSecurity OperationsDetection EngineeringAI AgentsSIEMArazzoWorkflows

Provider

nebulock

Workflows

runHuntAndReport
Create a hunt, drive it with a directive, and generate a report.
5 steps inputs: followup, query outputs: huntId, reportId
1
createHunt
2
getHunt
3
addDirective
4
generateReport
5
fetchReport

Source API Descriptions

Arazzo Workflow Specification

Raw ↑
arazzo: 1.0.1
info:
  title: Run a Nebulock hunt and generate a report
  version: 1.0.0
  summary: Create a hunt, add a follow-up directive, then generate and fetch its report.
sourceDescriptions:
- name: huntsApi
  url: ../openapi/nebulock-hunts-api-openapi.yml
  type: openapi
workflows:
- workflowId: runHuntAndReport
  summary: Create a hunt, drive it with a directive, and generate a report.
  inputs:
    type: object
    properties:
      query:
        type: string
      followup:
        type: string
  steps:
  - stepId: createHunt
    operationId: create_hunt_v2
    requestBody:
      contentType: application/json
      payload:
        query: $inputs.query
    outputs:
      huntId: $response.body#/hunt_id
  - stepId: getHunt
    operationId: get_hunt_v2
    parameters:
    - name: hunt_id
      in: path
      value: $steps.createHunt.outputs.huntId
  - stepId: addDirective
    operationId: add_directive_v2
    parameters:
    - name: hunt_id
      in: path
      value: $steps.createHunt.outputs.huntId
    requestBody:
      contentType: application/json
      payload:
        query: $inputs.followup
  - stepId: generateReport
    operationId: generate_hunt_report_v2
    parameters:
    - name: hunt_id
      in: path
      value: $steps.createHunt.outputs.huntId
    outputs:
      reportId: $response.body#/hunt_report_id
  - stepId: fetchReport
    operationId: get_hunt_report
    parameters:
    - name: hunt_report_id
      in: path
      value: $steps.generateReport.outputs.reportId
  outputs:
    huntId: $steps.createHunt.outputs.huntId
    reportId: $steps.generateReport.outputs.reportId

Work with this as data

Every workflow here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for arazzo workflows

4 MCP tools reach this
  • find_arazzoBrowse and filter every workflow in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This workflow
curl "https://apis.io/api/v1/arazzo/nebulock-run-hunt-and-report"
All arazzo workflows
curl "https://apis.io/api/v1/arazzo?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.