> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Connecting AbuseIPDB to Neo

> Create your AbuseIPDB API key and save it in Neo

You connect AbuseIPDB once at the MSP level, with an API key.

## 1. Create an API key

<Steps>
  <Step title="Sign in to AbuseIPDB">
    Sign in at [abuseipdb.com](https://www.abuseipdb.com), or create a free account there.
  </Step>

  <Step title="Create the key">
    Open **Account → API** and click **Create Key**. Name it "Neo" and copy it. Use an APIv2 key; an old APIv1 key does not work.
  </Step>
</Steps>

## 2. Add the key in Neo

<Steps>
  <Step title="Open Integrations">
    Open [**Integrations → AbuseIPDB**](https://dashboard.neoagent.io/integrations?tab=directory\&open=abuseipdb) in the Neo Dashboard. The card is under Security.
  </Step>

  <Step title="Save the key">
    Paste the **API Key** and click **Save**. Neo checks the key with AbuseIPDB before it saves, so a wrong key is rejected straight away. The check uses one of your daily IP checks.
  </Step>
</Steps>

## 3. Turn AbuseIPDB on per agent

Open the agent from [**Agents**](https://dashboard.neoagent.io/agents), go to the Integrations section, and configure the AbuseIPDB block. To check alert IPs, **IP Reputation Lookups** at Read Only is enough.

Give **Abuse Reports** Read / Write only to an agent that should report confirmed attackers. AbuseIPDB lets an account report only after it approves it: request reporting privilege on [abuseipdb.com/report](https://www.abuseipdb.com/report) first, or every report fails. Reports are public, so the Helpdesk and IT Admin profiles ask a technician before each one.

To use the result in a SaaS Alerts investigation, give the same agent the SaaS Alerts integration, and name the check in its instructions, for example: "For every alert with an IP address, check the IP with AbuseIPDB and include the score and report categories in your note."

See [AbuseIPDB API](/agents/tools/security/abuseipdb-api) for what each profile does.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.