Skip to main content

Cloud-delivered Incident ResponderIncident Responder Documentation

Configure the Urlscan.io API Service

Configure urlscan.io as a service to get entity and artifact reputations using actions.

  • Ensure that you have your urlscan.io API key. For more information, contact urlscan.io technical support.

  • Ensure that the scan visibility level of your urlscan.ioi application is Public or Private. We don't support the Unlisted scan visibility.

  • If you use a proxy, ensure that you whitelist https://urlscan.io/api/

  1. In the sidebar, click SETTINGSA grey gear icon, then select Core.

  2. Under SERVICE INTEGRATIONS, select Services.

  3. Select a service:

    • To configure a specific service, hover over a service, then click CONFIGURE. Use the search by vendor or filter by action to find a service.

    • To manually provide the relevant information for a service, click Configure a new serviceA dark blue plus sign..

    • To view all actions for a service, hover over a service, then click the information icon An icon of a grey i inside a grey circle..

  4. Enter information about the service:

    • Service Name – Enter a unique name for the service. By default, the service name is URLScan.io.

    • (Optional) Description – Describe the service.

    • (Optional) Owner – Enter the email address of the person or group responsible for the service. 

    • API Key – Enter your urlscan.io API key. For more information, contact urlscan.io technical support.

    • Scan Type – Select the scan visibility of your urlscan.io application, Public or Private. If the scan visibility level of your urlscan.io application is Unlisted, change it to Public or Private.

  5. To validate the source, select TEST CONNECTIVITY.

  6. Select CREATE SERVICE.