Threatdown (Malwarebytes)Install

Summary

Creates a new endpoint policy in Threatdown (Malwarebytes) via a POST to the policies endpoint, using a name, policy contents fields, and an optional raw JSON body.

Inputs

• Body Fields (op133_bodyFields) — Collection of optional fields mapped into the request body: name, contents.schema_version, contents.status, contents.policy.protect_service, contents.policy.sirius_update_schedule, contents.policy.startup_options.toggle_on, and endpoint_interface_options flags (allow_run_threat_scan, display_rtp_events, limit_endpoint_agent_control, show_threat_scan_shortcuts, show_windows_contextmenu).
• Additional JSON Body (op133_body) — Raw JSON object merged with the Body Fields to supply any other policy settings. Use it for fields not exposed in the collection.

Output shape

The API response for the created policy, normalized into n8n items (typically the new policy record).

The properties mark no fields as required, but the API will likely need at least a name and contents. The exact response fields depend on the Threatdown API. The source shows only function signatures, so the merge precedence between Body Fields and the JSON body is not confirmed.

Examples

Example 1: Create a basic policy named for a department

Body Fields: Name = 'Finance Workstations', Contents Policy Protect Service = true.

Example 2: Create a policy with a custom update schedule and a restricted endpoint UI

Body Fields: Name, Sirius Update Schedule, Limit Endpoint Agent Control = true, Show Windows Contextmenu = false.

Example 3: Supply a full policy definition from an earlier node

Additional JSON Body set to an expression containing the complete policy JSON, with Name set in Body Fields.

Links

• n8n community nodes installation guide