---
title: "Enrich an attribute with the given modules"
method: POST
path: "/attributes/enrich/{attributeId}"
tags: ["Attributes"]
---

# Enrich an attribute with the given modules

`POST /attributes/enrich/{attributeId}`

## Path parameters

- `attributeId` union, required
  - string
  - string, uuid

## Request body

- EnrichModulesList
  - `reversedns` boolean
  - `sigma_syntax_validator` boolean
  - `ods_enrich` boolean
  - `recordedfuture` boolean
  - `eupi` boolean
  - `docx_enrich` boolean
  - `passivetotal` boolean
  - `abuseipdb` boolean
  - `ransomcoindb` boolean
  - `domaintools` boolean
  - `crowdstrike_falcon` boolean
  - `google_safe_browsing` boolean
  - `geoip_country` boolean
  - `joesandbox_query` boolean
  - `crowdsec` boolean
  - `geoip_asn` boolean
  - `rbl` boolean
  - `yeti` boolean
  - `ocr_enrich` boolean
  - `onyphe` boolean
  - `odt_enrich` boolean
  - `socialscan` boolean
  - `sophoslabs_intelix` boolean
  - `mmdb_lookup` boolean
  - `vmray_submit` boolean
  - `trustar_enrich` boolean
  - `ipinfo` boolean
  - `backscatter_io` boolean
  - `ipasn` boolean
  - `urlscan` boolean
  - `threatcrowd` boolean
  - `html_to_markdown` boolean
  - `yara_query` boolean
  - `sigma_queries` boolean
  - `xforceexchange` boolean
  - `whois` boolean
  - `pdf_enrich` boolean
  - `threatfox` boolean
  - `clamav` boolean
  - `vmware_nsx` boolean
  - `sigmf-expand` boolean
  - `urlhaus` boolean
  - `stix2_pattern_syntax_validator` boolean
  - `censys_enrich` boolean
  - `variotdbs` boolean
  - `joesandbox_submit` boolean
  - `virustotal_public` boolean
  - `macaddress_io` boolean
  - `mcafee_insights_enrich` boolean
  - `countrycode` boolean
  - `shodan` boolean
  - `dnsdb_query` boolean
  - `greynoise` boolean
  - `xlsx_enrich` boolean
  - `lastline_submit` boolean
  - `assemblyline_submit` boolean
  - `hashlookup` boolean
  - `apivoid` boolean
  - `lastline_query` boolean
  - `eql` boolean
  - `cuckoo_submit` boolean
  - `hyasinsight` boolean
  - `assemblyline_query` boolean
  - `circl_passivedns` boolean
  - `securitytrails` boolean
  - `hashdd` boolean
  - `geoip_city` boolean
  - `qrcode` boolean
  - `sourcecache` boolean
  - `threatminer` boolean
  - `cytomic_orion` boolean
  - `iprep` boolean
  - `qintel_qsentry` boolean
  - `wiki` boolean
  - `cve` boolean
  - `btc_scam_check` boolean
  - `whoisfreaks` boolean
  - `google_search` boolean
  - `malwarebazaar` boolean
  - `intel471` boolean
  - `btc_steroids` boolean
  - `mwdb` boolean
  - `dbl_spamhaus` boolean
  - `onyphe_full` boolean
  - `ipqs_fraud_and_risk_scoring` boolean
  - `farsight_passivedns` boolean
  - `cve_advanced` boolean
  - `cpe` boolean
  - `passive-ssh` boolean
  - `vulners` boolean
  - `yara_syntax_validator` boolean
  - `jinja_template_rendering` boolean
  - `virustotal` boolean
  - `macvendors` boolean
  - `vulndb` boolean
  - `circl_passivessl` boolean
  - `dns` boolean
  - `otx` boolean
  - `bgpranking` boolean
  - `extract_url_components` boolean
  - `intelmq_eventdb.experimental` boolean
  - `apiosintds` boolean
  - `pptx_enrich` boolean
  - `hibp` boolean

## Response `200`

Enrich attribute response

- object
  - `saved` boolean — Present and `true` if the attribute was successfully enriched.
  - `success` boolean — Status message of the operation.
  - `name` string
  - `message` string
  - `url` string

## Other responses

- `403` — Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.
- `default` — Unexpected API error

---

[API](https://skmtc.net/misp/apis/misp-automation-api.md) · [All operations](https://skmtc.net/misp/apis/misp-automation-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/misp/misp-automation-api/revisions/88b34ff032a1/schema)