Shodan · Arazzo Workflow

Shodan Alert With Notifier

Version 1.0.0

Create a notifier, attach it via an alert, and arm a trigger for delivery.

1 workflow 2 source APIs 1 provider
View Spec View on GitHub SecuritySearchInternetDevicesIoTVulnerabilitiesCVEAttack SurfaceThreat IntelligenceReconnaissanceNetworkDNSScanningPublic APIsArazzoWorkflows

Provider

shodan

Workflows

alert-with-notifier
Stand up a notifier and a triggered network alert in one flow.
Creates a notifier, creates a network alert on the supplied IP ranges, and enables a trigger so the alert can deliver events to the notifier.
3 steps inputs: alertName, apiKey, description, ips, notifierArgs, provider, trigger outputs: alertId, notifierId
1
createNotifier
Create a notifier for receiving alert events.
2
createAlert
Create a network alert over the supplied IP ranges.
3
enableTrigger
Enable the requested trigger so the alert begins delivering events.

Source API Descriptions

Arazzo Workflow Specification

Raw ↑
arazzo: 1.0.1
info:
  title: Shodan Alert With Notifier
  summary: Create a notifier, attach it via an alert, and arm a trigger for delivery.
  description: >-
    A notification-wired monitoring pattern. The workflow creates a notifier for
    receiving alerts, creates a network alert over the supplied IP ranges, and
    enables a trigger so events on the monitored ranges are delivered. Every
    step spells out its request inline so the flow can be read and executed
    without opening the underlying OpenAPI description.
  version: 1.0.0
sourceDescriptions:
- name: networkAlertsApi
  url: ../openapi/shodan-network-alerts-api-openapi.yml
  type: openapi
- name: notifiersApi
  url: ../openapi/shodan-notifiers-api-openapi.yml
  type: openapi
workflows:
- workflowId: alert-with-notifier
  summary: Stand up a notifier and a triggered network alert in one flow.
  description: >-
    Creates a notifier, creates a network alert on the supplied IP ranges, and
    enables a trigger so the alert can deliver events to the notifier.
  inputs:
    type: object
    required:
    - apiKey
    - provider
    - description
    - notifierArgs
    - alertName
    - ips
    - trigger
    properties:
      apiKey:
        type: string
        description: Shodan API key passed as the `key` query parameter.
      provider:
        type: string
        description: The notifier provider type (e.g. "email", "slack").
      description:
        type: string
        description: A human-readable description for the notifier.
      notifierArgs:
        type: object
        description: Provider-specific configuration arguments for the notifier.
      alertName:
        type: string
        description: A human-readable name for the network alert.
      ips:
        type: array
        items:
          type: string
        description: The IP ranges to monitor with this alert.
      trigger:
        type: string
        description: The trigger name to enable on the alert.
  steps:
  - stepId: createNotifier
    description: >-
      Create a notifier for receiving alert events.
    operationId: createNotifier
    requestBody:
      contentType: application/json
      payload:
        provider: $inputs.provider
        description: $inputs.description
        args: $inputs.notifierArgs
    parameters:
    - name: key
      in: query
      value: $inputs.apiKey
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      notifierId: $response.body#/id
  - stepId: createAlert
    description: >-
      Create a network alert over the supplied IP ranges.
    operationId: createAlert
    requestBody:
      contentType: application/json
      payload:
        name: $inputs.alertName
        filters:
          ip: $inputs.ips
    parameters:
    - name: key
      in: query
      value: $inputs.apiKey
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      alertId: $response.body#/id
  - stepId: enableTrigger
    description: >-
      Enable the requested trigger so the alert begins delivering events.
    operationId: enableAlertTrigger
    parameters:
    - name: key
      in: query
      value: $inputs.apiKey
    - name: id
      in: path
      value: $steps.createAlert.outputs.alertId
    - name: trigger
      in: path
      value: $inputs.trigger
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      success: $response.body#/success
  outputs:
    notifierId: $steps.createNotifier.outputs.notifierId
    alertId: $steps.createAlert.outputs.alertId

Work with this as data

Every workflow here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for arazzo workflows

4 MCP tools reach this
  • find_arazzoBrowse and filter every workflow in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This workflow
curl "https://apis.io/api/v1/arazzo/shodan-alert-with-notifier-workflow"
All arazzo workflows
curl "https://apis.io/api/v1/arazzo?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.