---
title: "CrowdSec"
description: "Reference for the Tracecat CrowdSec integration: registered actions, required secrets, expected inputs, and example workflow usage."
---

{/* Auto-generated by scripts/generate_tool_docs.py; do not edit by hand. */}
## Lookup IP address

Action ID: `tools.crowdsec.lookup_ip_address`

Get threat intel report for an IP address from CrowdSec.

Reference: [https://docs.crowdsec.net/u/cti_api/getting_started/](https://docs.crowdsec.net/u/cti_api/getting_started/)

### Secrets

Required secrets:

- `crowdsec_cti`: required values `CTI_API_KEY`.

### Input fields

<ParamField path="ip_address" type="string" required>

IPv4 or IPv6 address to analyze or scan.

</ParamField>
