Live BGP routing table and registry lookups: IP origin, ASN prefixes, transit, org search.
Scored across 11 tools
Each tool has a clearly distinct target: single IP vs. batch IPs, ASN info vs. ASN prefixes vs. ASN transit, CIDR routes, org search vs. registry record, map, quota, and routing status. Descriptions explicitly cross-reference sibling tools to steer selection (e.g. 'for prefixes the AS merely transits use pwhois_asn_transit'), eliminating meaningful overlap.
All names share the pwhois_ prefix and snake_case, and most are verb-like and descriptive (lookup_ip, org_search, prefix_routes). A few are noun-phrase style (asn_info, routing_status, my_quota), which is a minor stylistic deviation but remains highly predictable.
Eleven tools is well-scoped for a BGP/routing/registry lookup service. Each tool covers a distinct query shape (single, batch, ASN, prefix, org, map) and no tool appears redundant or padded.
The surface covers lookup, batch enrichment, ASN profiles/prefixes/transit, CIDR routes, registry records, org search, visualization, quota, and table status—strong lifecycle coverage. Minor gap: upstream provider/neighbor relationships are only indirectly available via the map, not as a dedicated query.
Registered organization for an autonomous system (name, country, registry, contacts) and how many IPv4 and IPv6 prefixes it originates right now. Use this for a quick profile; use pwhois_asn_prefixes when you need the prefix list itself, and pwhois_asn_transit for prefixes it carries for others. Costs 1 query.
Inputs: asn (required). Returns: asn, allowance, prefixes_v4, prefixes_v6, +3 more
Every prefix currently announced with this AS as origin, with AS path and when each route was first seen. family: v4, v6 or both (default both). Large networks are truncated at 2,000 rows per family. Originated only: for prefixes the AS merely transits use pwhois_asn_transit; for counts without the list use pwhois_asn_info. Costs 1 query per family.
Inputs: asn (required), family. Returns: asn, count_v4, count_v6, allowance, +6 more
Prefixes whose AS path passes through this AS: its customer cone as seen from the routing table, with each origin AS and organization. Transited, not originated: for what the AS itself announces use pwhois_asn_prefixes. Truncated at 2,000 rows. Costs 1 query.
Inputs: asn (required). Returns: asn, count, routes, allowance, +2 more
Who announces this address right now: origin AS, most-specific prefix, AS path, network and organization names, country and approximate location, from the live global routing table plus registry data. For more than one address use pwhois_lookup_ips instead; for a whole CIDR block use pwhois_prefix_routes; for an AS use pwhois_asn_info. Set registry=true to also get the registry organization record with abuse and admin contacts. Costs 1 query.
Inputs: ip (required), registry. Returns: ip, city, note, org_id, +20 more
Batch enrichment in one call: clusters by origin AS and by country, plus per-address records. detail=full (default) returns every record for up to 500 addresses; detail=summary returns the clusters and unrouted list for up to 5,000 addresses. For more, call again with the next chunk. Always prefer this over repeated pwhois_lookup_ip calls. Accepts IPv4 and IPv6 mixed; at most 10 hostnames per batch (pass addresses for the rest). Costs 1 query per distinct address; check pwhois_my_quota before large batches.
Inputs: ips (required), detail. Returns: count, detail, routed, records, +6 more
Draw a network diagram / show the BGP path for an IP address, prefix or ASN: providers on the left, the network in the middle, downstream networks and prefixes on the right, enriched by Prefix WhoIs. Use for requests like 'draw a network diagram of AS15169', 'show me the BGP path to 8.8.8.8', 'display the network path for 2001:4860::/32'. Also for 'show me a network diagram' and 'map this ASN'. Returns the chart as a PNG image block (format=svg: no image block), a summary with a hosted image link, the interactive map link and a link that reproduces this exact look, an ARTIFACT_HTML text block (a self-contained page with the chart as SVG), and the counts in structuredContent. Clients differ. claude.ai chat and Claude Cowork do not display tool images: publish the ARTIFACT_HTML block as an HTML artifact, verbatim, then give the links. Claude Code receives the PNG as a saved file ('[Image: source: ]'): show that file to the user with the client's file tool (e.g. SendUserFile) or publish the ARTIFACT_HTML as an artifact. API clients that render image blocks need nothing more. Give the user both links and the attribution. Costs 5 queries per chart. Method: see pwhois.org/maps/credits.who#methodology.
Inputs: query (required), font, width, family, +4 more. Returns: cost, kind, note, bytes, +26 more
Your daily allowance: the limit, how much has been used today (directly and through this connection), what remains, and when it resets. Call this before large batches. Free.
Inputs: no named parameters. Returns: note, limit, remaining, resets_at, +5 more
Organizations whose registered name contains the text (case-insensitive), with their AS numbers and the prefixes those ASes announce. Use this to find an organization from its name; once you have an org ID, AS number or contact handle, pwhois_registry_record returns the full record. Costs 1 query.
Inputs: name (required). Returns: count, query, allowance, truncated, +1 more
Active routes in the global table for a CIDR prefix (IPv4 or IPv6): origin AS and AS path for the best route and, when asked, every route-server view. Use this when you have a CIDR block; for a single address use pwhois_lookup_ip, for everything an AS announces use pwhois_asn_prefixes. Costs 1 query.
Inputs: prefix (required), all. Returns: count, prefix, routes, allowance, +1 more
The registry record on file: by organization ID (e.g. LPL-141), by AS number, or by point-of-contact handle (e.g. ABUSE1393-ARIN). Returns address, registration dates and contact handles including abuse. Give exactly one key. To find an org from its name first use pwhois_org_search; for the org behind an IP address use pwhois_lookup_ip with registry=true. Costs 1 query.
Inputs: asn, org_id, poc_handle. Returns: count, lookup, records, allowance
Size of the IPv4 and IPv6 routing tables, number of peers and when the table was last refreshed. Free.
Inputs: no named parameters. Returns: ipv4, ipv6, as_of, stale, +2 more
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Look up any domain, IP address or AS number: hosting, DNS, registration, email, TLS and headers.
IP geolocation, ASN and network data, plus VPN, proxy and Tor detection. ASN tools need no key.
WHOIS, RDAP, DNS, IP / ASN / CIDR and Web3 name (ENS, Unstoppable, Handshake) lookups. No API key.
IP geolocation: country, continent, ASN and ISP lookup
Add one secure layer between your agents and this server.
