How can I add an IP address to the decisions list without using cscli?

I’m using a Docker container and have my own list of IP addresses to block or display captchas on. I need to add them to CrowdSec from another container. I’ve only found a way to grant another container permissions to docker.sock, which I don’t really like. Are there any other options besides this? Thanks.

CrowdSec•12/7/25, 1:51 PM

Important Information

This post has been marked as resolved. If this is a mistake please press the red button below or type

/unresolve

/unresolve

•

12/8/25, 6:22 PM

blotus•12/7/25, 1:54 PM

Locally, cscli is the only way.

If you have a paid plan, you can manage the allowlists through the console (either through the UI or by using the console API)

svmOP•12/7/25, 1:58 PM

Unfortunately, even if I take the paid option, it won't work for me either.
The list of IP addresses is in the database and must be added dynamically.
Okay, thanks for the answer.

It's a pity that there is no http api for adding IP addresses, but only for receiving them.

blotus•12/7/25, 1:58 PM

oh sorry
i totally misread your question
You are not talking about allowlists, but decisions

blotus•12/7/25, 1:59 PM

you can add decisions through the API exposed by LAPI (this is what cscli decisions addcscli decisions add does behind the scenes)

blotus•12/7/25, 2:00 PM

You need to make a request to the /alerts/alerts endpoint, and add the IPs in the decisionsdecisions field.
See the swagger here: https://crowdsecurity.github.io/api_doc/lapi/#/watchers/pushAlerts

svmOP•12/7/25, 2:03 PM

This looks like what I was looking for. It's weird that I couldn't find it myself.
Thanks, I'll definitely try that.
I'll close this thread a bit later if all goes well.

blotus•12/7/25, 2:03 PM

I don't have a curl command that would do it, but if you are not against writing some code, you can probably take some inspirations from what cscli does: https://github.com/crowdsecurity/crowdsec/blob/master/cmd/crowdsec-cli/clidecision/import.go (this is the code for

cscli decisions import

cscli decisions import

).

If you do use centralized allowlists, note that LAPI does not perform any check when receiving an alert that already contains decisions, you'd have to make sure any trusted IPs are not included in the request

GitHub

crowdsec/cmd/crowdsec-cli/clidecision/import.go at master · crowds...

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI. - crowdsecurity/crowdsec

Bblotus I don't have a curl command that would do it, but if you are not against writing...

svmOP•12/7/25, 2:05 PM

Thank you. I'll definitely take everything into account.
An example is optional; I think I can figure it out without it.
Thank you.