How can I add an IP address to the decisions list without using cscli? | CrowdSec | Page 1

wispy axle Dec 7, 2025, 1:51 PM

#

I’m using a Docker container and have my own list of IP addresses to block or display captchas on. I need to add them to CrowdSec from another container. I’ve only found a way to grant another container permissions to docker.sock, which I don’t really like. Are there any other options besides this? Thanks.

frozen kindleBOT Dec 7, 2025, 1:51 PM

#

Important Information

This post has been marked as resolved. If this is a mistake please press the red button below or type /unresolve

abstract solar Dec 7, 2025, 1:54 PM

#

Locally, cscli is the only way.

If you have a paid plan, you can manage the allowlists through the console (either through the UI or by using the console API)

wispy axle Dec 7, 2025, 1:58 PM

#

Unfortunately, even if I take the paid option, it won't work for me either.
The list of IP addresses is in the database and must be added dynamically.
Okay, thanks for the answer.

It's a pity that there is no http api for adding IP addresses, but only for receiving them.

abstract solar Dec 7, 2025, 1:58 PM

#

oh sorry
i totally misread your question
You are not talking about allowlists, but decisions

#

you can add decisions through the API exposed by LAPI (this is what cscli decisions add does behind the scenes)

#

You need to make a request to the /alerts endpoint, and add the IPs in the decisions field.
See the swagger here: https://crowdsecurity.github.io/api_doc/lapi/#/watchers/pushAlerts

wispy axle Dec 7, 2025, 2:03 PM

#

This looks like what I was looking for. It's weird that I couldn't find it myself.
Thanks, I'll definitely try that.
I'll close this thread a bit later if all goes well.

abstract solar Dec 7, 2025, 2:03 PM

#

I don't have a curl command that would do it, but if you are not against writing some code, you can probably take some inspirations from what cscli does: https://github.com/crowdsecurity/crowdsec/blob/master/cmd/crowdsec-cli/clidecision/import.go (this is the code for cscli decisions import ).

If you do use centralized allowlists, note that LAPI does not perform any check when receiving an alert that already contains decisions, you'd have to make sure any trusted IPs are not included in the request

GitHub

crowdsec/cmd/crowdsec-cli/clidecision/import.go at master · crowds...

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI. - crowdsecurity/crowdsec

wispy axle Dec 7, 2025, 2:05 PM

#

abstract solar I don't have a curl command that would do it, but if you are not against writing...

Thank you. I'll definitely take everything into account.
An example is optional; I think I can figure it out without it.
Thank you.

frozen kindleBOT Dec 8, 2025, 6:22 PM

#

frozen kindle

Resolving How can I add an IP address to the decisions list without using cscli?

#How can I add an IP address to the decisions list without using cscli?