Security & Testing

hackmyip.com

Provides IP geolocation, VPN/proxy detection, and network intelligence via a free MCP server with no API key or signup required.

1 endpoint15 known toolsFirst detected August 7, 2026Last detected August 7, 2026

ENDPOINT 1

https://hackmyip.com/mcp

No auth detected

MCP server metadata

Name: hackmyip
Version: 1.0.0

Capabilities

tools.listChanged

Known tools 15

server_info

Describe this MCP server: what it wraps, the fact that it is completely free with no API key, no signup and no auth, the fair-use rate limit, the full tool list, and links to hackmyip.

Inferred read-only

my_ip

Get the public IP address of the machine that opened this MCP connection, enriched with city/country, coordinates, timezone, ISP, ASN and hosting/proxy classification.

Inferred read-only

ip_lookup

Look up geolocation (city, region, country, lat/lon, timezone, postal code) plus ISP, ASN, organization and AS name for any public IPv4 or IPv6 address.

Inferred read-only

bulk_ip_lookup

Look up country, city, ISP, organization and coordinates for up to 50 IP addresses in a single request.

Inferred read-only

vpn_proxy_check

Classify an IP as hosting/datacenter, open proxy, or mobile-carrier, alongside its geolocation and network owner.

Inferred read-only

asn_lookup

Resolve an Autonomous System by IP address, AS number, or organization name.

Inferred read-only

reverse_dns

Get the PTR hostname for an IPv4 or IPv6 address.

Inferred read-only

dns_lookup

Query live DNS records for a domain over public resolvers.

Inferred read-only

whois_domain

Fetch registration data for a domain via RDAP: registrar, creation/expiration/last-updated dates, nameservers and EPP status codes.

Inferred read-only

ip_blacklist_check

Check an IPv4 address against 12 major spam and abuse blacklists (Spamhaus ZEN, Barracuda, SpamCop, UCEPROTECT and others) with a per-list LISTED / CLEAN / unavailable breakdown.

Inferred read-only

email_breach_check

Check whether an email address appears in known data breaches, using the XposedOrNot breach database.

Potential side effects

email_auth_check

Audit a domain's email authentication setup: MX records, SPF record and DMARC policy, with a pass/warn/fail verdict per mechanism and an overall grade.

Potential side effects

security_headers_check

Fetch a site and grade its HTTP security headers (A-F): CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, plus information-leak headers like Server and X-Powered-By.

Inferred read-only

port_scan

Run a real server-side TCP connect scan against a public host.

Inferred read-only

site_status_check

Check whether a site is reachable from Cloudflare's network.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.hackmyip]
url = "https://hackmyip.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "hackmyip": {
      "type": "http",
      "url": "https://hackmyip.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: hackmyip
Remote MCP URL: https://hackmyip.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "hackmyip": {
      "url": "https://hackmyip.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "hackmyip": {
      "type": "http",
      "url": "https://hackmyip.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "hackmyip",
  "transport": "streamable-http",
  "url": "https://hackmyip.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for hackmyip.com was fetched 2026-08-21T12:48:23.092Z.

Trust status Neutral

hackmyip.com is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.