Skip to main content
Glama

ip-doctor 🩺

Live reputation, network type & abuse score for any IP or domain — from real DNS lookups, no API key.

ip-doctor is both:

  • an MCP server (npx -y ip-doctor-mcp) you add to Claude, Cursor or any agent, and

  • a pay-per-call HTTP API gated by x402 (USDC on Base) — no sign-up, no key.

Give it an IP address or a domain and get back a CLEAN / LOW_RISK / ELEVATED / HIGH_RISK verdict with a 0–100 risk score and explained findings.

Why an MCP server?

An LLM can reason about an IP, but it cannot run live DNS, DNSBL or reverse-DNS lookups by itself. ip-doctor does exactly that on demand — the moat is the live network access, not the reasoning.

Related MCP server: mcp-server-dns

What it returns

Signal

Source (key-less)

🌍 Geolocation (RIR country) + ASN + organisation + BGP prefix

Team Cymru DNS IP-to-ASN

🏷️ Network type — datacenter/hosting, VPN/proxy, Tor exit, mobile/carrier, residential ISP

deduced from ASN org + PTR + Tor list

🔁 Reverse DNS (PTR)

node:dns reverse

🚫 DNS blocklist (DNSBL) membership

DroneBL, blocklist.de, s5h, SORBS, UCEPROTECT, Barracuda, Spamhaus ZEN

🧅 Tor exit node

Tor DNS exit list (dnsel.torproject.org)

📊 0–100 abuse/risk score + verdict

derived from the above

Honesty: geolocation is the coarse RIR-allocation country, not city-level GeoIP. The network type is a deduction from org/PTR signals, not an authoritative paid label. Blocklist zones that don't answer from a public resolver are reported as inconclusive, never silently "clean".

Use it as an MCP server (free)

{
  "mcpServers": {
    "ip-doctor": { "command": "npx", "args": ["-y", "ip-doctor-mcp"] }
  }
}

Tools:

  • check_ip{ target: "8.8.8.8" | "example.com", deep?: boolean }

  • check_many{ targets: ["1.1.1.1", "evil.example", ...] }

Or connect over HTTP at POST /mcp (stateless JSON-RPC).

Use it as an HTTP API

Free tier (rate-limited, 40/h/IP):

GET https://ip-doctor.vercel.app/check?target=8.8.8.8
GET https://ip-doctor.vercel.app/check?target=example.com&deep=true
GET https://ip-doctor.vercel.app/check_many?targets=1.1.1.1,8.8.8.8,9.9.9.9

Pay-per-call (x402, $0.02 USDC on Base, DEEP tier — more blocklists + listing reasons, no rate limit):

GET https://ip-doctor.vercel.app/pro/check?target=<ip|domain>
GET https://ip-doctor.vercel.app/pro/check_many?targets=...

Your agent's x402-aware HTTP client pays automatically on the 402 challenge. The server holds no private keypayTo is a public receiving address only.

Typical uses

  • Vet inbound traffic / API callers (datacenter or Tor → step-up auth).

  • Validate sign-ups & registrations (block known-abusive or proxy IPs).

  • Moderate user-supplied IPs/domains in a pipeline.

  • Enrich logs with ASN/org/type/blocklist context.

Local dev

npm install
npm run build
npm run test:engine     # live DNS smoke tests
npm run dev:http        # local HTTP server on :8080 (payments OFF by default unless env set)
npm run dev:mcp         # stdio MCP server

Notes

  • Read-only. No code is executed; nothing is written. All lookups are DNS/DNSBL/reverse-DNS.

  • Private/reserved addresses (RFC1918, loopback, CGNAT, link-local) are detected and skipped — no meaningless public lookups.

  • IPv6 is supported for ASN/PTR/geo; most DNSBLs are IPv4-only and are reported as not-applicable for IPv6.

MIT licensed. Source: https://github.com/Baneado98/ip-doctor

Available Tools

2 tools
check_ipA

Run a LIVE network & abuse reputation check on an IP address or a domain name. Performs real DNS / DNSBL / reverse-DNS lookups (something an LLM cannot do on its own) and returns: geolocation (RIR country) + ASN/organisation + BGP prefix, reverse DNS (PTR), a network-TYPE deduction (datacenter/hosting, VPN/proxy, Tor exit, mobile/carrier, or residential ISP), DNS blocklist (DNSBL) membership, Tor-exit status, and a 0–100 abuse/risk score with a CLEAN / LOW_RISK / ELEVATED / HIGH_RISK verdict and explained findings. Use this to vet inbound traffic, validate signups/registrations, decide whether to challenge a request, or moderate user-supplied IPs/domains. Pass deep=true for more blocklists and richer reasons.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetYesAn IPv4/IPv6 address (e.g. 8.8.8.8) or a domain name (e.g. example.com). Domains are resolved to their A record and that IP is analysed.
deepNoWhen true, queries additional DNSBL zones (incl. Spamhaus/Barracuda/UCEPROTECT), fetches TXT listing reasons, and expands all of a domain's addresses. Slower but more thorough.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full responsibility for transparency. It thoroughly explains the tool's behavior: real-time DNS lookups, DNSBL checks, Tor-exit status, abuse score calculation, and the effect of the deep parameter. It also notes that domains are resolved to their A record.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single paragraph but is well-organized and front-loaded with the main purpose. It uses clear language and avoids redundancy. Breaking into bullet points could improve readability, but it remains concise and effective.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has only 2 parameters, no output schema, and no nested objects, the description is remarkably complete. It explains both parameters, the entire output (including verdict levels like CLEAN, LOW_RISK, etc.), and the tool's mechanism. No critical information is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds value by explaining that domains are resolved to IPs, and that deep=true queries additional DNSBL zones and fetches TXT listing reasons. This goes beyond the schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool performs a live network and abuse reputation check on an IP or domain. It lists specific lookups (DNS, DNSBL, reverse-DNS) and return values (geolocation, ASN, BGP prefix, etc.). The purpose is distinct from the sibling tool check_many, which suggests batch operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear use cases: vetting inbound traffic, validating signups, moderating user-supplied IPs/domains. It does not explicitly state when not to use it or mention alternatives, but the context is sufficient for an agent to decide.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_manyA

Run the live IP/domain reputation check on several targets at once (e.g. a list of IPs from your logs). Returns one concise verdict per target. Useful for batch-vetting traffic or a blocklist candidate set.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetsYesList of IP addresses and/or domain names to check.

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description reveals that checks are 'live' and returns 'concise verdict per target'. It does not disclose authorization needs, rate limits, or whether it is read-only (but reasonable to infer for a check). Could be more thorough but adequate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, front-loaded with the core action ('run the live IP/domain reputation check'). Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description explains the return format ('one concise verdict per target') but lacks details on verdict structure, error handling, or behavior with invalid targets. Without an output schema, more could be said, but it covers the essential outcome.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for the single parameter 'targets', which already documents its type and meaning. The description adds example usage ('from your logs') but no additional syntax or constraints, so it meets baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool runs live reputation checks on multiple IPs/domains at once and returns a verdict per target. It distinguishes from the sibling check_ip by explicitly indicating batch operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides usage context ('batch-vetting traffic', 'blocklist candidate set') and implies when to use this over check_ip (for multiple targets). However, it does not explicitly state when not to use it or mention alternative tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updatesv0.1.0
    • First observedcheck_ip
    • First observedcheck_many

TDQS

A4.2/5.0

Scored across 2 tools

Disambiguation5/5

The two tools are clearly distinct: check_ip handles single targets while check_many handles batch processing. Descriptions explicitly differentiate the use cases.

Naming Consistency5/5

Both tools follow a consistent verb_noun pattern: 'check' + target type (ip or many). Simple and predictable.

Tool Count3/5

Only 2 tools for IP/domain reputation checking feels thin. While the core functionality is covered, the server would benefit from additional tools for advanced features like whitelist management or historical queries.

Completeness4/5

The tool set covers the primary use case of live reputation checking for single and multiple targets. Minor gaps exist (e.g., no tool for checking URLs or managing blocklists), but the domain is simple and adequately served.

Maintenance

ActivityMaintained
ResponsivenessSyncing

Related MCP Connectors

Related MCP Servers

  • A
    license
    D
    quality
    D
    maintenance
    A comprehensive MCP server providing tools for IP, domain, email, and image-based open-source intelligence. It integrates services like Shodan, VirusTotal, and HaveIBeenPwned to facilitate advanced security research and data gathering.
    56
    82 npm
    ISC
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for DNS lookups, reverse DNS, WHOIS, and domain checks. Zero auth, zero config.
    5
    32 npm
    3
    MIT
  • F
    license
    Not graded
    quality
    Not graded
    maintenance
    An MCP server for domain availability checks, WHOIS lookups, and domain suggestions using RDAP and TCP port 43. It allows users to perform bulk checks and retrieve registration details across multiple TLDs without requiring an API key.
    121 npm
    -