How to Use the AbuseIPDB MCP in Google ADK

Q: How do I add AbuseIPDB tools to my google-adk security agent?

Instantiate McpToolset with your Vinkius HTTP endpoint and pass it to the tools list of your LlmAgent. This exposes the IP lookup capabilities directly to Gemini.

Q: Can I restrict which AbuseIPDB tools my google-adk agent can access?

Yes, use the toolnames filter in your Python setup to only expose specific tools like checkipaddress. This limits the agent's scope and prevents it from pulling heavy blacklists unnecessarily.

Q: How does my agent confirm that the API is active?

Your agent runs the checkapistatus tool first. If the service is online, it proceeds to run the heavier reputation queries against this MCP Server.

Run enterprise threat analysis on Google Cloud using AbuseIPDB tools inside your Google ADK pipelines.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect AbuseIPDB MCP to Google ADK

Create your Vinkius account to connect AbuseIPDB to Google ADK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup AbuseIPDB with Google ADK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Cross-Reference BigQuery Data with this MCP Server

The `check_ip_address` tool inspects specific IPs to determine their threat level before your Google ADK agent writes them to your database. Your agent extracts IP logs from BigQuery, runs them through the check, and flags malicious actors automatically. This setup uses the `McpToolset` class to register the server tools directly with Gemini's long-context reasoning engine. Gemini can ingest thousands of log rows at once, using this MCP tool to verify every connection point in a single run.

Feed AbuseIPDB Blacklists to Google ADK Agents

The `get_abuse_blacklist` tool pulls the most reported malicious IPs directly into your Google ADK agent context. This lets your agent build real-time firewall rules or update VPC Service Controls on Google Cloud based on active threat intelligence. You configure this by passing the toolset to your `LlmAgent` constructor. The agent processes the raw blacklist payload and formats it for storage, keeping your cloud perimeter updated without manual script maintenance.

Drill Down on IP Abuse Reports in Gemini

The `get_ip_abuse_reports` tool fetches historical reports for any flagged IP address to help your Google ADK agent triage security incidents. Your agent analyzes the frequency of reports and the specific categories of abuse to determine if a server is compromised or part of a coordinated botnet. You can use the `tool_names` filter to expose only this specific reporting tool to your security agents, minimizing token usage. The MCP integration runs over secure HTTP transport, letting your agent work safely inside Vertex AI environments.

Setup guide

Set up AbuseIPDB MCP in Google ADK

Prerequisites

Python 3.10+ installed
google-adk package (pip install google-adk)
Active Vinkius subscription with a valid endpoint token

1

Install Google ADK

Run pip install google-adk to install the Agent Development Kit. MCP support is included via the McpToolset class.
2

Connect via SSE transport

Use McpToolset.from_server() with SseServerParams pointing to your Vinkius endpoint. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Create an LlmAgent

Pass the returned mcp_tools list directly to LlmAgent(tools=mcp_tools). The ADK maps each MCP tool to a native Gemini function call — no manual schema definitions required.
4

Run with any Gemini model

The agent works with any Gemini model (gemini-2.0-flash, gemini-2.5-pro, etc.). Copy the full example on the right to get started with AbuseIPDB tools in your ADK agent.

agent.py

from google.adk.agents import LlmAgent
from google.adk.tools.mcp_tool.mcp_toolset import McpToolset
from google.adk.tools.mcp_tool.mcp_session_manager import SseServerParams

# Connect to the MCP via SSE
mcp_tools, exit_stack = await McpToolset.from_server(
    connection_params=SseServerParams(
        url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    )
)

# Create your agent with auto-discovered tools
agent = LlmAgent(
    name="AbuseIPDB_agent",
    model="gemini-2.0-flash",
    instruction="You have access to AbuseIPDB tools via MCP.",
    tools=mcp_tools,
)

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by AbuseIPDB. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect AbuseIPDB now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about AbuseIPDB MCP in Google ADK

Instantiate `McpToolset` with your Vinkius HTTP endpoint and pass it to the `tools` list of your `LlmAgent`. This exposes the IP lookup capabilities directly to Gemini.

Yes, use the `tool_names` filter in your Python setup to only expose specific tools like `check_ip_address`. This limits the agent's scope and prevents it from pulling heavy blacklists unnecessarily.

The SDK supports both Stdio and HTTP transports when connecting to this MCP Server. For cloud-hosted environments like Vertex AI, the HTTP transport is the recommended setup.

Your agent runs the `check_api_status` tool first. If the service is online, it proceeds to run the heavier reputation queries against this MCP Server.

Your queries use the Vinkius zero-trust MCP gateway, meaning your IP addresses and API keys are injected at the proxy level and never exposed to the LLM context. Checked IP data is processed in memory-isolated sandboxes that destroy all session footprints the millisecond your agent receives the response payload.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript