Security & Testing

ipinfo.app

Provides network intelligence and security analysis for IP addresses and AS numbers.

1 endpoint13 known toolsFirst detected August 15, 2026Last detected August 15, 2026

ENDPOINT 1

https://mcp.ipinfo.app/mcp

No auth detected

MCP server metadata

Name: ipinfo-mcp
Version: 0.3.0

Capabilities

tools.listChanged

Server instructions

IP threat-triage tools over the ipinfo.app data platform. Start with `ip_triage` for a single address or `ip_triage_bulk` for a list. Both return TWO INDEPENDENT axes — network type (what kind of connection) and risk (is it behaving badly) — and you should keep them separate when reporting: a flagged residential address is a compromised home machine, a flagged hosting address is a server, and the right response differs. Before recommending any block, call `blocking_advice`: it reports how many addresses the block would affect and refuses ASN-wide blocks on consumer ISPs. `dataset_status` costs no quota and tells you how stale the underlying data is — call it whenever you are about to state a classification as fact. Two caveats apply to everything here. Classification confidence is an uncalibrated weight ratio, not a probability. And FBI IC3 listings are provenance only — advisories include victim and sinkhole addresses, so a listing never by itself means an address is hostile.

Known tools 13

ip_triage

Answer "is this IP safe?" for a single address.

Inferred read-only

ip_triage_bulk

Triage up to 100 addresses in one call and return a table ranked worst-first.

Inferred read-only

ip_context

Deep detail for one address when ip_triage is not enough: reverse DNS and what the PTR pattern implies, inferred point-of-presence from carrier rDNS, the full covering-prefix routing view, the announcing AS with its registry record, and the network abuse contact.

Inferred read-only

asn_search

Resolve a free-form query to AS numbers.

Inferred read-only

asn_lookup

Who operates an AS number: organisation, registry record, announced prefix counts, the curated network kind (hosting / residential / mobile / business / education / transit), and a curated description of what the network actually does where one exists.

Inferred read-only

asn_reputation

Answer "is this whole network bad?" — Spamhaus ASN-DROP membership, the count of FBI IC3 indicators attributed to the AS, the curated network kind, and how big the network is.

Potential side effects

blocking_advice

Answer "I want to block this — at what scope, and what will it break?" Accepts an IP, a CIDR, or an AS number.

Inferred read-only

prefix_lookup

Who announces a prefix, how widely it is seen, and whether more than one AS originates it (MOAS).

Inferred read-only

threat_intel

Look up FBI IC3 advisory indicators for an IP or an ASN, with the advisory titles, publication dates, and source URLs.

Inferred read-only

asn_evidence

Build the evidence pack needed to decide what kind of network an ASN is — hosting, residential, mobile, transit, education, business, government, or vpn.

Inferred read-only

asn_sweep_probe

Triage a batch of AS numbers into a worklist: which are announced, which already have a curated kind, which already have a written description card, and which are reserved or unallocated.

Inferred read-only

asn_classify_check

Given a kind and a confidence you have determined for an ASN, decide whether it may be added to the curated lists in apps/ipinfo/data/, and render the exact entry line if so.

Inferred read-only

dataset_status

Report how old the underlying datasets are and which sources are currently reachable.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.ipinfo-mcp]
url = "https://mcp.ipinfo.app/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "ipinfo-mcp": {
      "type": "http",
      "url": "https://mcp.ipinfo.app/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: ipinfo-mcp
Remote MCP URL: https://mcp.ipinfo.app/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "ipinfo-mcp": {
      "url": "https://mcp.ipinfo.app/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "ipinfo-mcp": {
      "type": "http",
      "url": "https://mcp.ipinfo.app/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "ipinfo-mcp",
  "transport": "streamable-http",
  "url": "https://mcp.ipinfo.app/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for ipinfo.app was fetched 2026-08-21T17:16:12.110Z.

Trust status Trusted

ipinfo.app is assessed as Trusted: Domain has an established technology history spanning over a year.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.