Bring public X-Force collections into new threat reviews
Start a threat review with a quick look at the latest public collections in IBM X-Force Exchange.
Trigger
Page Created
Triggers when a new Notion page is created. Customer optionally scopes with at most one of: - data_source_id: new row in this data source - parent_page_id: new sub-page under this page (immediate parent only) With neither set, fires for any new page in the workspace the integration has access to. Notion sends ~60s aggregation latency on most events.
Action
Get Latest Public Collections
Tool to retrieve latest public Collections from IBM X-Force Exchange. Use when you need to access publicly available collections without pagination. For fetching all public collections, consider using the paginated endpoint instead.
Why this helps
A new review can stall while you remember where to look for current shared threat intelligence.
- Adds a repeatable intelligence check to the start of a review.
- Reduces the chance that a useful public collection is overlooked.
- Keeps the lookup tied to the Notion page that prompted it.
Setup
Build it in a few focused steps.
- 1Connect Notion and IBM X-Force Exchange to Notis once in the portal.
- 2Create an automation in Automations or ask Notis to set it up in plain language.
- 3In one instruction, ask Notis to retrieve the latest public collections when a threat review page is created and summarize the results in your chosen report channel.
- 4Select the Notion Page Created trigger and choose where Notis should report runs.
- 5Test by creating one real threat review page.
Questions about this workflow
Does this create or update a collection in X-Force Exchange?
No. The selected X-Force action retrieves the latest public collections; it does not create or change a collection.
Can the lookup return every public collection?
This workflow uses the latest-public-collections action. For paginated retrieval of all public collections, use the paginated action instead.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Notion to IBM X-Force Exchange. A trigger fires from one place; an action lands in another.
Notion triggers
IBM X-Force Exchange actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Get Latest Public Collections
Tool to retrieve latest public Collections from IBM X-Force Exchange. Use when you need to access publicly available collections without pagination. For fetching all public collections, consider using the paginated endpoint instead.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Public Collections Paginated
Tool to retrieve all public Collections using pagination from IBM X-Force Exchange. Use when you need to access publicly available collections with pagination support. Returns a list of publicly accessible case files with pagination metadata.
All Page Events
Triggers when any Notion page is created or updated across the workspace.
Get IPR Category List
Tool to retrieve the complete list of IP reputation categories from IBM X-Force Exchange. Use when you need to understand available IPR classification categories used by XFE.
Comment Created
Triggers when a new comment is created in Notion. Optional `page_id` filter scopes to comments on a specific page. When omitted, fires for any new comment in the workspace the integration has access to. Requires the 'Read comments' capability on the Notion integration. If a connection was authorized before that capability was enabled, the user must re-authorize the connection for comment events to flow.
Get URL Category List
Tool to retrieve the complete list of URL categories from IBM X-Force Exchange. Use when you need to understand available URL classification categories used by XFE.
New Comment
Triggers when a new comment is added to a specified Notion block or page.
Get User Profile Information
Tool to retrieve authenticated user's profile information from IBM X-Force Exchange. Use when you need to access user account details, membership statistics, or integration configurations.
Database Created
Triggers when a new Notion database (the container) is created. A database is the post-2025-09-03 container that holds one or more data sources. This trigger fires for the container's creation event (`database.created`), distinct from `NOTION_DATASOURCE_CREATED` which fires when a new data source is added to an existing database. Most customers calling Notion's `POST /v1/databases` (the legacy API) or creating a database via the Notion UI will see this event. Adding a new data source to an existing database fires `data_source.created` instead — use `NOTION_DATASOURCE_CREATED` for that. Notion's payload puts `entity.type: "block"` (the container is a `child_database` block in the content tree) and `entity.id` is the database id.
Get Current API Version
Tool to retrieve current running API version information from IBM X-Force Exchange. Use when you need to check the API version, build number, or creation date.
Data Source Created
Triggers when a new Notion data source is created. Fires workspace-wide. The payload's `data.parent` carries the data source's tree parent (typically the teamspace) for downstream filtering. A single template-based database creation can fire multiple `data_source.created` events at once — one per data source the template instantiates.
Generate API Key and Password
Tool to generate a new API key and password pair for IBM X-Force Exchange authentication. Use when you need to create new credentials for API access. The generated credentials do not expire and can be used with Basic Authentication.
Data Source Schema Updated
Triggers when a Notion data source's schema is updated. Fires on column add / remove / rename. Payload includes `data.updated_properties: [{id, name, action}]` so consumers can discriminate the kind of change downstream. Optional `data_source_id` filter scopes to schema changes on a single data source. When omitted, fires for any schema change in the workspace the integration has access to. Note: adding a column also fires `page.properties_updated` once per existing row in the data source. Customers wanting a single structural-change signal should use this trigger.
Connect any two apps with Notis in the middle.
Notion and IBM X-Force Exchange, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business IBM X-Force Exchange.