Home
Automations
Customization in Playblocks
Playblocks provides flexible customization options to tailor automations according to your organization's needs.
AI Request
Use the AI Request step to send a prompt to a connected AI provider and use the model's response in subsequent steps.

Important Information
Introduction to Playblocks
Getting Started
Video Tutorials
Overview
Automations
- Automation Parameters and Flowchart
- Predefined Automations
- Configuring the Automation Parameters
- Running the Automation
- Enabling the Automation
- Approving, Rejecting or Reverting an Automation Execution
- Customization in Playblocks
  Playblocks provides flexible customization options to tailor automations according to your organization's needs.
  - Creating Automation from Blank
    Creating an automation from blank allows you to build fully customized flows from scratch and tailor every step to your specific use case.
  - Log Trigger
    Configure a Log Trigger to monitor logs, define conditions, and create example outputs for automation workflows.
  - Schedule Trigger
    Configure a schedule trigger to run automation at recurring intervals. The task explains how to select the repetition frequency and create the trigger.
  - Managing Trigger
    Learn how to manage a trigger by adding notifications, enrichments, conditions, or actions.
  - Notifications
    Configure notification actions including Notify, Ask, and Open Ticket options. This task explains how to create and customize notification messages and ticket actions.
  - Alert Steps
    Alert steps let an automation drive an incident through its full on-call lifecycle in PagerDuty and other alerting platforms behind the same vendor-neutral steps.
  - Enrichments
    Use enrichment steps to query the Reputation Service for IP addresses, URLs, or file hashes from previous step outputs. The enrichments provide threat intelligence data about the selected value.
  - Conditions
    Use conditions to create branches in the automation flow based on logical evaluations. This task explains how to configure condition expressions and operations.
  - Actions
    Action steps perform operational tasks such as running automations, managing indicators, and sending external API requests.
  - Run Automation
    Run an automation action and configure automation parameters and inputs for supported automation types.
  - Add to List
    Use the Add to List procedure to add IPs, URLs, domains, or hashes to a list with optional conditions and duration settings.
  - Create IoC Management Indicators
    Create IoC Management indicators by specifying indicator values and expiration settings in the Create IoC Management Indicators window.
  - API Request
    Configure an API Request action in an automation and define the example output structure for API responses.
  - AI Request
    Use the AI Request step to send a prompt to a connected AI provider and use the model's response in subsequent steps.
  - Isolate Endpoint Device
    Configure and create an isolation action for an endpoint device. Specify the endpoint product, device details, isolation duration, and reason for isolation.
  - Scan Endpoint Security Device
    Scan an Endpoint Security device by configuring target identification, scan options, and scheduling parameters.
  - Terminate Process on Endpoint Security Device
  - Delete File on Endpoint Security Device
  - Exporting/Importing Automation
    You can export and import an automation in JSON format. This task explains how to export an automation and import an automation file.
  - Cloning Existing Automation
    You can clone an existing automation for editing and customization. This task explains how to clone an automation from the card view and table view.
  - Creating Automation by AI
    AI allows you to create custom Playblocks automations using natural language prompts. This topic explains the supported capabilities, limitations, and steps to create an automation.
  - Automation Capabilities
    This topic describes the different automation capability types, their use cases, abilities, and editing restrictions.
  - Replace Trigger
    Replace Trigger allows you to change the current trigger type in your automation to a different one. This topic explains how to replace a trigger, configure the new trigger, and resolve validation errors.
  - Adding a Step to the Middle of an Automation
- Webhooks
- Authentications
Monitor
Executions
Pending Actions
Lists
Connectors
Notifications
Appendix

AI Request

Use the AI Request step to send a prompt to a connected AI provider and use the model's response in subsequent steps.

Use the AI Request step to send a prompt to a connected AI provider and use the model's response in subsequent steps.

Before you add this step, connect at least one AI provider on the Connectors page. See AI Connectors.

To add an AI Request step:

Access Playblocks and go to Automations.
Open your automation and click + to add a new step.
Select Actions > AI Request.
Click Add.

The AI Request window appears.
Enter these parameters:
- Provider - The AI vendor to call. Only providers with a connected connector are selectable. Supported providers:
  - OpenAI
  - Google Gemini
  - Anthropic Claude
  If you do not connect a provider, an error directs you to the Connectors page.
- Model - Read-only. Shows the model selected on the provider's connector. To change it, open the provider on the Connectors page and update the Model selection.
- Question - The prompt to send to the model. Supports values from the outputs of previous steps.
- Instructions - The system prompt that tells the model how to behave (role, format, constraints). Supports values from the outputs of previous steps.
- Advanced options (optional):
  - Temperature - Controls response randomness. Value between 0 and 2. Lower values produce more deterministic output.
  - Max output tokens - Caps the response length. Integer between 1 and 128000.
Click Create.

Using the Response

You can use the AI Request response in subsequent steps. In the smart-field selector, select the AI Request step as the source and select the output field (under text is the model response).

18 August 2026

© 2023 - 2026 Check Point Software Technologies Ltd.