{"openapi":"3.1.0","info":{"title":"Validin (BYOK) API","version":"0.1.0","description":"Validin (BYOK) lets an AI assistant read your own Validin data through the Validin API with a key you supply (Validin API key). Read-only: 12 tools (get_api_usage, get_api_usage_daily, get_domain_dns_history, get_domain_a_history, get_domain_ns_history, get_domain_hostnames, list_subdomains, get_domain_certificates, get_domain_registration_history, get_domain_reputation, get_ip_reputation,...\n\nEvery operation is read-only or compute-only. The same tools are available over MCP (streamable HTTP) at https://byok-validin.connectorbay.com/mcp.","contact":{"name":"Unify Dynamics LLC","email":"agent@connectorbay.com","url":"https://connectorbay.com/byok-validin/docs"},"termsOfService":"https://connectorbay.com/byok-validin/terms"},"servers":[{"url":"https://byok-validin.connectorbay.com"}],"externalDocs":{"url":"https://connectorbay.com/byok-validin/docs"},"security":[{"upstreamKey":[]}],"components":{"securitySchemes":{"bearer":{"type":"http","scheme":"bearer","description":"Optional. A Pro API key raises rate limits; no credentials are required."},"upstreamKey":{"type":"apiKey","in":"header","name":"X-Upstream-Key","description":"Your own key for the service this connector wraps (bring your own key). Used for that one call only; never stored, logged or cached."}},"schemas":{"Error":{"type":"object","properties":{"ok":{"const":false},"error":{"type":"object"}}}}},"paths":{"/v1/tools/get_api_usage":{"post":{"operationId":"get_api_usage","summary":"Show how much of your Validin query allowance you have used (today and this month) for the current API key. Use for \"How","description":"Show how much of your Validin query allowance you have used (today and this month) for the current API key. Use for \"How many Validin queries have I used\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{},"title":"get_api_usageArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_api_usage_daily":{"post":{"operationId":"get_api_usage_daily","summary":"Show your Validin API usage broken down by day. Use for \"How many Validin API queries did I make each day\".","description":"Show your Validin API usage broken down by day. Use for \"How many Validin API queries did I make each day\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{},"title":"get_api_usage_dailyArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_domain_dns_history":{"post":{"operationId":"get_domain_dns_history","summary":"Get all historical DNS records (A, AAAA and NS) Validin has seen for a domain, with first and last seen times. Use for \"","description":"Get all historical DNS records (A, AAAA and NS) Validin has seen for a domain, with first and last seen times. Use for \"What DNS records has example.com had over time\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"domain":{"description":"Domain name, for example example.com.","maxLength":253,"title":"Domain","type":"string"},"wildcard":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":false,"description":"True to include child labels (subdomains) of the domain too.","title":"Wildcard"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"How many records to return (1 to 1000).","title":"Limit"},"first_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations after this date (YYYY-MM-DD).","title":"First Seen"},"last_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations not before this date (YYYY-MM-DD).","title":"Last Seen"},"lookback":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only search the past N days (overrides first_seen).","title":"Lookback"},"annotate":{"anyOf":[{"enum":["tags","popularity","intel"],"type":"string"},{"type":"null"}],"default":null,"description":"Add context to keys and values: tags (popularity and malicious lists), popularity, or intel.","title":"Annotate"},"time_format":{"anyOf":[{"enum":["unix","iso"],"type":"string"},{"type":"null"}],"default":null,"description":"How timestamps are written: unix (seconds since epoch) or iso.","title":"Time Format"},"exclude_nx":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":false,"description":"True to leave out non-existent-domain answers.","title":"Exclude Nx"}},"required":["domain"],"title":"get_domain_dns_historyArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_domain_a_history":{"post":{"operationId":"get_domain_a_history","summary":"Get the historical A (IPv4) records for a domain. Use for \"Which IPv4 addresses has example.com pointed to\".","description":"Get the historical A (IPv4) records for a domain. Use for \"Which IPv4 addresses has example.com pointed to\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"domain":{"description":"Domain name, for example example.com.","maxLength":253,"title":"Domain","type":"string"},"wildcard":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":false,"description":"True to include child labels (subdomains) of the domain too.","title":"Wildcard"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"How many records to return (1 to 1000).","title":"Limit"},"first_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations after this date (YYYY-MM-DD).","title":"First Seen"},"last_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations not before this date (YYYY-MM-DD).","title":"Last Seen"},"lookback":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only search the past N days (overrides first_seen).","title":"Lookback"},"annotate":{"anyOf":[{"enum":["tags","popularity","intel"],"type":"string"},{"type":"null"}],"default":null,"description":"Add context to keys and values: tags (popularity and malicious lists), popularity, or intel.","title":"Annotate"},"time_format":{"anyOf":[{"enum":["unix","iso"],"type":"string"},{"type":"null"}],"default":null,"description":"How timestamps are written: unix (seconds since epoch) or iso.","title":"Time Format"}},"required":["domain"],"title":"get_domain_a_historyArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_domain_ns_history":{"post":{"operationId":"get_domain_ns_history","summary":"Get the historical nameserver (NS) records for a domain. Use for \"Which nameservers has example.com used\".","description":"Get the historical nameserver (NS) records for a domain. Use for \"Which nameservers has example.com used\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"domain":{"description":"Domain name, for example example.com.","maxLength":253,"title":"Domain","type":"string"},"wildcard":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":false,"description":"True to include child labels (subdomains) of the domain too.","title":"Wildcard"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"How many records to return (1 to 1000).","title":"Limit"},"first_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations after this date (YYYY-MM-DD).","title":"First Seen"},"last_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations not before this date (YYYY-MM-DD).","title":"Last Seen"},"lookback":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only search the past N days (overrides first_seen).","title":"Lookback"},"annotate":{"anyOf":[{"enum":["tags","popularity","intel"],"type":"string"},{"type":"null"}],"default":null,"description":"Add context to keys and values: tags (popularity and malicious lists), popularity, or intel.","title":"Annotate"},"time_format":{"anyOf":[{"enum":["unix","iso"],"type":"string"},{"type":"null"}],"default":null,"description":"How timestamps are written: unix (seconds since epoch) or iso.","title":"Time Format"}},"required":["domain"],"title":"get_domain_ns_historyArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_domain_hostnames":{"post":{"operationId":"get_domain_hostnames","summary":"Find the historical reverse-DNS (PTR) records for a domain. Use for \"What PTR records point at example.com\".","description":"Find the historical reverse-DNS (PTR) records for a domain. Use for \"What PTR records point at example.com\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"domain":{"description":"Domain name, for example example.com.","maxLength":253,"title":"Domain","type":"string"},"wildcard":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":false,"description":"True to include child labels (subdomains) of the domain too.","title":"Wildcard"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"How many records to return (1 to 1000).","title":"Limit"},"first_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations after this date (YYYY-MM-DD).","title":"First Seen"},"last_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations not before this date (YYYY-MM-DD).","title":"Last Seen"},"lookback":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only search the past N days (overrides first_seen).","title":"Lookback"},"annotate":{"anyOf":[{"enum":["tags","popularity","intel"],"type":"string"},{"type":"null"}],"default":null,"description":"Add context to keys and values: tags (popularity and malicious lists), popularity, or intel.","title":"Annotate"},"time_format":{"anyOf":[{"enum":["unix","iso"],"type":"string"},{"type":"null"}],"default":null,"description":"How timestamps are written: unix (seconds since epoch) or iso.","title":"Time Format"}},"required":["domain"],"title":"get_domain_hostnamesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_subdomains":{"post":{"operationId":"list_subdomains","summary":"Enumerate subdomains Validin has observed for a domain. Use for \"What subdomains of example.com has Validin seen\".","description":"Enumerate subdomains Validin has observed for a domain. Use for \"What subdomains of example.com has Validin seen\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"domain":{"description":"Domain name, for example example.com.","maxLength":253,"title":"Domain","type":"string"},"wildcard":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":false,"description":"True to include child labels (subdomains) of the domain too.","title":"Wildcard"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"How many records to return (1 to 1000).","title":"Limit"},"first_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations after this date (YYYY-MM-DD).","title":"First Seen"},"last_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations not before this date (YYYY-MM-DD).","title":"Last Seen"},"lookback":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only search the past N days (overrides first_seen).","title":"Lookback"},"annotate":{"anyOf":[{"enum":["tags","popularity","intel"],"type":"string"},{"type":"null"}],"default":null,"description":"Add context to keys and values: tags (popularity and malicious lists), popularity, or intel.","title":"Annotate"},"time_format":{"anyOf":[{"enum":["unix","iso"],"type":"string"},{"type":"null"}],"default":null,"description":"How timestamps are written: unix (seconds since epoch) or iso.","title":"Time Format"}},"required":["domain"],"title":"list_subdomainsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_domain_certificates":{"post":{"operationId":"get_domain_certificates","summary":"Find historic certificates from the certificate transparency stream that covered a domain. Use for \"Which TLS certificat","description":"Find historic certificates from the certificate transparency stream that covered a domain. Use for \"Which TLS certificates were issued for example.com\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"domain":{"description":"Domain name, for example example.com.","maxLength":253,"title":"Domain","type":"string"},"wildcard":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":false,"description":"True to include child labels (subdomains) of the domain too.","title":"Wildcard"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"How many records to return (1 to 1000).","title":"Limit"},"first_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations after this date (YYYY-MM-DD).","title":"First Seen"},"last_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations not before this date (YYYY-MM-DD).","title":"Last Seen"},"lookback":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only search the past N days (overrides first_seen).","title":"Lookback"},"time_format":{"anyOf":[{"enum":["unix","iso"],"type":"string"},{"type":"null"}],"default":null,"description":"How timestamps are written: unix (seconds since epoch) or iso.","title":"Time Format"}},"required":["domain"],"title":"get_domain_certificatesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_domain_registration_history":{"post":{"operationId":"get_domain_registration_history","summary":"View normalized WHOIS and RDAP registration history for a domain (key dates and attributes, privacy-redacted fields remo","description":"View normalized WHOIS and RDAP registration history for a domain (key dates and attributes, privacy-redacted fields removed). Use for \"When was example.com registered and how did its registration change\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"domain":{"description":"Domain name, for example example.com.","maxLength":253,"title":"Domain","type":"string"},"wildcard":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":false,"description":"True to include child labels (subdomains) of the domain too.","title":"Wildcard"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"How many records to return (1 to 1000).","title":"Limit"},"first_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations after this date (YYYY-MM-DD).","title":"First Seen"},"last_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations not before this date (YYYY-MM-DD).","title":"Last Seen"},"lookback":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only search the past N days (overrides first_seen).","title":"Lookback"},"annotate":{"anyOf":[{"enum":["tags","popularity","intel"],"type":"string"},{"type":"null"}],"default":null,"description":"Add context to keys and values: tags (popularity and malicious lists), popularity, or intel.","title":"Annotate"},"time_format":{"anyOf":[{"enum":["unix","iso"],"type":"string"},{"type":"null"}],"default":null,"description":"How timestamps are written: unix (seconds since epoch) or iso.","title":"Time Format"}},"required":["domain"],"title":"get_domain_registration_historyArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_domain_reputation":{"post":{"operationId":"get_domain_reputation","summary":"Get Validin's quick reputation verdict for a domain. Use for \"Is example.com considered malicious by Validin\".","description":"Get Validin's quick reputation verdict for a domain. Use for \"Is example.com considered malicious by Validin\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"domain":{"description":"Domain name, for example example.com.","maxLength":253,"title":"Domain","type":"string"}},"required":["domain"],"title":"get_domain_reputationArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_ip_reputation":{"post":{"operationId":"get_ip_reputation","summary":"Get Validin's quick reputation verdict for an IP address. Use for \"Is 93.184.216.34 considered malicious by Validin\".","description":"Get Validin's quick reputation verdict for an IP address. Use for \"Is 93.184.216.34 considered malicious by Validin\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"ip":{"description":"IPv4 or IPv6 address.","maxLength":64,"title":"Ip","type":"string"}},"required":["ip"],"title":"get_ip_reputationArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_ip_dns_history":{"post":{"operationId":"get_ip_dns_history","summary":"Find the DNS records (A or AAAA) Validin has observed pointing at an IP address. Use for \"Which domains have pointed at ","description":"Find the DNS records (A or AAAA) Validin has observed pointing at an IP address. Use for \"Which domains have pointed at 93.184.216.34\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"ip":{"description":"IPv4 or IPv6 address.","maxLength":64,"title":"Ip","type":"string"},"limit":{"anyOf":[{"maximum":1000,"minimum":1,"type":"integer"},{"type":"null"}],"default":100,"description":"How many records to return (1 to 1000).","title":"Limit"},"first_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations after this date (YYYY-MM-DD).","title":"First Seen"},"last_seen":{"anyOf":[{"maxLength":10,"type":"string"},{"type":"null"}],"default":null,"description":"Only observations not before this date (YYYY-MM-DD).","title":"Last Seen"},"lookback":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only search the past N days (overrides first_seen).","title":"Lookback"},"annotate":{"anyOf":[{"enum":["tags","popularity","intel"],"type":"string"},{"type":"null"}],"default":null,"description":"Add context to keys and values: tags (popularity and malicious lists), popularity, or intel.","title":"Annotate"},"time_format":{"anyOf":[{"enum":["unix","iso"],"type":"string"},{"type":"null"}],"default":null,"description":"How timestamps are written: unix (seconds since epoch) or iso.","title":"Time Format"}},"required":["ip"],"title":"get_ip_dns_historyArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}}}}