Can Lyro look up the reputation of a specific IP, URL, or file hash?

Not through this toolkit. It exposes the IP reputation and URL category taxonomies, which describe how X-Force classifies, but no indicator lookup action, so a single IP or hash cannot be scored here. Public collections and the category lists are what Lyro can read.

Do the API credentials Lyro generates expire?

No, and that is worth knowing before generating them. Generate API Key and Password produces a key and password pair that does not expire and works with Basic Authentication, so any credential created this way stays valid until it is revoked in X-Force Exchange.

Are private or group collections included?

No. Both collection actions return publicly accessible case files: Get Latest Public Collections for the most recent without pagination, and Get Public Collections Paginated for the full set with pagination metadata. Collections restricted to a group are not exposed.

How do we tell what the connected account is entitled to?

Get User Profile Information returns the authenticated account's details, membership statistics, and integration configurations, while Get Current API Version reports the API version, build number, and creation date. Together they answer most questions about why a call behaved differently than expected.

IBM X-Force Exchange MCP integration

Pulls the latest public threat collections, returns the IP reputation and URL category taxonomies, and reports the connected account's profile.

Connect IBM X-Force Exchange See all integrations

7actions available

What your agent can do with IBM X-Force Exchange

Every action runs live through MCP. Nothing to build, nothing to maintain.

Get user profile information
Lyro retrieves the authenticated user's profile from IBM X-Force Exchange. Teams confirm access permissions without separate verification steps.
Get latest public collections
Lyro accesses the most recent threat intelligence collections. Security teams stay current on emerging threats referenced by customers.

See all 7 actions

How businesses use IBM X-Force Exchange + Lyro

Each card is one request a support team gets, and the IBM X-Force Exchange actions Lyro runs to close it.

Check what threat researchers have just published
Lyro pulls the latest public collections of case files from X-Force Exchange, and pages through the complete public set when a single unpaginated call does not cover the question.
Get Latest Public CollectionsGet Public Collections Paginated
Read the taxonomies X-Force classifies against
Lyro returns the complete list of IP reputation categories and URL categories X-Force uses, so a finding from elsewhere can be mapped onto the classification the platform actually applies.
Get IPR Category ListGet URL Category List
Provision and audit API access to the platform
Lyro generates a new API key and password pair, reports the connected account's profile with its membership statistics and integration configuration, and confirms which API version and build the instance runs.
Generate API Key And PasswordGet User Profile InformationGet Current API Version

How it works

Get started in 3 steps

Connect once, then just ask. There is no workflow builder to learn and nothing to maintain — Lyro reads the IBM X-Force Exchange actions it has and picks the ones a request needs.

01
Connect IBM X-Force Exchange
Authorize the IBM X-Force Exchange account your team already uses — one consent screen, no API keys, no mapping tables. Lyro can only do what you granted that account, and you can disconnect it at any time.
02
Tell your agent what you need
Describe the job the way you would hand it to a teammate. Lyro maps it to the IBM X-Force Exchange actions that close it and chains as many as the request needs.
03
Watch it work
The agent runs the actions inside the conversation the customer is already in, so nobody copies data between tabs and your team can take over at any point.
Get started free

IBM X-Force Exchange · Lyro

Everything else about IBM X-Force Exchange

Setup, permissions, and the limits of what Lyro can do inside IBM X-Force Exchange.

Not through this toolkit. It exposes the IP reputation and URL category taxonomies, which describe how X-Force classifies, but no indicator lookup action, so a single IP or hash cannot be scored here. Public collections and the category lists are what Lyro can read.

Every action available in IBM X-Force Exchange

All 7 actions your agent can call on IBM X-Force Exchange, straight from the live MCP connection.

Get latest public collections
Retrieve latest public Collections from IBM X-Force Exchange.
Get public collections paginated
Retrieve all public Collections using pagination from IBM X-Force Exchange.
Get ipr category list
Retrieve the complete list of IP reputation categories from IBM X-Force Exchange.
Get URL category list
Retrieve the complete list of URL categories from IBM X-Force Exchange.
Get user profile information
Retrieve authenticated user's profile information from IBM X-Force Exchange.
Get current API version
Retrieve current running API version information from IBM X-Force Exchange.
Generate API key and password
Generate a new API key and password pair for IBM X-Force Exchange authentication.