> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tracecat.com/llms.txt
> Use this file to discover all available pages before exploring further.

# CrowdSec

> Reference for the Tracecat CrowdSec integration: registered actions, required secrets, expected inputs, and example workflow usage.

## Lookup IP address

Action ID: `tools.crowdsec.lookup_ip_address`

Get threat intel report for an IP address from CrowdSec.

Reference: [https://docs.crowdsec.net/u/cti\_api/getting\_started/](https://docs.crowdsec.net/u/cti_api/getting_started/)

### Secrets

Required secrets:

* `crowdsec_cti`: required values `CTI_API_KEY`.

### Input fields

<ParamField path="ip_address" type="string" required>
  IPv4 or IPv6 address to analyze or scan.
</ParamField>