Use IBM X-Force Exchange from Claude
Add the IBM X-Force Exchange connection to a Space that runs Claude, then use it from every channel in that Space.
ConnectorIBM X-Force Exchange
IBM X-Force Exchange integration for Claude and Codex
Connect IBM X-Force Exchange once, then control which Spaces can use its approved tools and data without pasting credentials into prompts or threads.
CategorySecurity & Identity
Use IBM X-Force Exchange from Codex
Add the IBM X-Force Exchange connection to a Space that runs Codex, then use it from every channel in that Space.
Use IBM X-Force Exchange from Sidekick
Connect your own OpenClaw to Sidekick while type.com provides the conversations, permissions, connections, skills, and automations.
Security & Identity
What the IBM X-Force Exchange connector can do
Security teams use IBM X-Force Exchange to research IP addresses, URLs, malware, and vulnerabilities before responding to an incident. With it connected to type.com, a Space can have Claude pull public threat collections, check reputation categories, or confirm account details without opening a separate portal.
One connection, many Spaces
Connect IBM X-Force Exchange once, then decide which Spaces can use it in threads, skills, automations, and coding work.
What teams do with IBM X-Force Exchange in type.com
Pull recent public threat research
Get the latest public collections to see what threat researchers have recently published without logging into the portal.
Get the latest public IBM X-Force Exchange collections related to ransomware.
Understand how a reputation score is classified
Check the IP or URL category list to understand what a specific reputation classification actually means.
Get the IBM X-Force URL category list so I can understand what 'Spam' classification covers.
Confirm account standing before a research sprint
Check the authenticated user's profile and membership details before relying on the account for a research project.
Get our IBM X-Force Exchange profile information before we start this week's threat research.
Representative actions
- Get Latest Public Collections
Returns the most recent publicly available threat collections.
- Get Public Collections Paginated
Returns public collections with pagination for browsing a larger set.
- Get IPR Category List
Returns the IP reputation categories used to classify IP addresses.
- Get URL Category List
Returns the URL categories used to classify web addresses.
- Get User Profile Information
Returns the authenticated user's account details and membership statistics.
Connection
API and auth details
IBM X-Force Exchange provides threat-intelligence APIs for security research and enrichment. Integrations can look up IPs, URLs, domains, malware, vulnerabilities, files, collections, threat reports, and commercial intelligence feeds using X-Force API credentials from IBM account settings.
- Source
- type.com catalog metadata
- Auth schemes
- API key
- API docs
- https://api.xforce.ibmcloud.com/
- Auth docs
- https://www.ibm.com/docs/en/qradar-common?topic=wizard-submitting-x-force-exchange-credentials
- Official site
- https://exchange.xforce.ibmcloud.com/
FAQ
Questions people ask before connecting IBM X-Force Exchange
Can Claude pull threat intelligence from X-Force Exchange?
Yes. With IBM X-Force Exchange connected to a Space, Claude can pull public collections, check reputation categories, and confirm account details from a type.com thread.
How does type.com authenticate with IBM X-Force Exchange?
X-Force Exchange uses an API key, added once by an admin when the connection is created, who then controls which Spaces can use it.
Can threat research checks run on a schedule?
Yes. A recurring pull of new public collections on a topic can be set up as a type.com automation that posts updates to a channel.
Is this the same as an MCP server for IBM X-Force Exchange?
Not exactly. type.com uses connectors and connections to give selected Spaces access to approved app tools and data. Some connectors use hosted MCP, while others use OAuth, API keys, service accounts, or custom APIs.
More security & identity connectors
All Security & Identity integrationsConnect Control D to Claude in type.com to remove outdated devices, profiles, rules, and schedules from a shared team thread.
Connect Conveyor to Claude in type.com to check authorization requests, review access groups, and clean up trust center files in a shared thread.
Connect Dnsfilter to Claude in type.com to update allowlists, blocklists, and filtering policies for your network in a shared thread.
Connect Dock Certs to Claude in type.com to issue API keys, manage webhooks, and clean up credentials or tags in a shared thread.