Threatdown (Malwarebytes)Install

Summary

Sends a PUT request to the Threatdown (Malwarebytes) API at /endpoints/{id}/tags to set tags on a single endpoint, using the body fields and/or JSON you provide.

Inputs

• ID (required) — Path parameter: the ID of the endpoint whose tags are being set.
• Body Fields — Collection of optional body fields. Currently only offers 'Alias' (string), sent as the request body field alias.
• Additional JSON Body — Extra request body values as a JSON object, merged with Body Fields. Use it to pass fields the UI doesn't expose, such as the tags themselves.

Output shape

The API response for the PUT request, normalized into n8n items (usually the parsed JSON response body).

The source pack shows only function signatures, not bodies, so the exact response shape and the path used are inferred from the operation name (putEndpointsByIdTags). The UI exposes no dedicated tags field, so tags must be supplied via Additional JSON Body. Check the Threatdown API docs for the expected body schema.

Examples

Example 1: Replace the tags on a specific endpoint

Set ID to the endpoint ID and put the tags payload in Additional JSON Body, following the Threatdown API schema.

Example 2: Set an alias while updating an endpoint

Set ID, add the Alias body field, and optionally add more values in Additional JSON Body.

Links

• n8n community nodes installation guide