{
    "name": "recordedfuture_ip",
    "category": "threat_intel",
    "endpoint": "https://api.recordedfuture.com/v2/ip/{target}",
    "method": "GET",
    "requires_auth": true,
    "selectors": {
        "risk": "$.data.risk.score"
    },
    "rate_limit": 1.0,
    "headers": {
        "X-RFToken": "{RF_TOKEN}"
    },
    "api_key_slots": [
        "{RF_TOKEN}"
    ],
    "input_type": "ip",
    "output_type": [
        "ip"
    ],
    "normalization_map": {
        "score": "rf_risk_score"
    },
    "tags": [
        "passive",
        "threat"
    ],
    "health_check_url": "https://api.recordedfuture.com",
    "expected_status": 200,
    "reliability_score": 5,
    "backup_endpoints": [],
    "confidence": 1.0
}