ip-doctor
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ip-doctorCheck the reputation of 8.8.8.8"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ip-doctor 🩺
Live reputation, network type & abuse score for any IP or domain — from real DNS lookups, no API key.
ip-doctor is both:
an MCP server (
npx -y ip-doctor-mcp) you add to Claude, Cursor or any agent, anda pay-per-call HTTP API gated by x402 (USDC on Base) — no sign-up, no key.
Give it an IP address or a domain and get back a CLEAN / LOW_RISK / ELEVATED / HIGH_RISK verdict with a 0–100 risk score and explained findings.
Why an MCP server?
An LLM can reason about an IP, but it cannot run live DNS, DNSBL or reverse-DNS lookups by itself. ip-doctor does exactly that on demand — the moat is the live network access, not the reasoning.
Related MCP server: mcp-server-dns
What it returns
Signal | Source (key-less) |
🌍 Geolocation (RIR country) + ASN + organisation + BGP prefix | Team Cymru DNS IP-to-ASN |
🏷️ Network type — datacenter/hosting, VPN/proxy, Tor exit, mobile/carrier, residential ISP | deduced from ASN org + PTR + Tor list |
🔁 Reverse DNS (PTR) |
|
🚫 DNS blocklist (DNSBL) membership | DroneBL, blocklist.de, s5h, SORBS, UCEPROTECT, Barracuda, Spamhaus ZEN |
🧅 Tor exit node | Tor DNS exit list ( |
📊 0–100 abuse/risk score + verdict | derived from the above |
Honesty: geolocation is the coarse RIR-allocation country, not city-level GeoIP. The network type is a deduction from org/PTR signals, not an authoritative paid label. Blocklist zones that don't answer from a public resolver are reported as inconclusive, never silently "clean".
Use it as an MCP server (free)
{
"mcpServers": {
"ip-doctor": { "command": "npx", "args": ["-y", "ip-doctor-mcp"] }
}
}Tools:
check_ip—{ target: "8.8.8.8" | "example.com", deep?: boolean }check_many—{ targets: ["1.1.1.1", "evil.example", ...] }
Or connect over HTTP at POST /mcp (stateless JSON-RPC).
Use it as an HTTP API
Free tier (rate-limited, 40/h/IP):
GET https://ip-doctor.vercel.app/check?target=8.8.8.8
GET https://ip-doctor.vercel.app/check?target=example.com&deep=true
GET https://ip-doctor.vercel.app/check_many?targets=1.1.1.1,8.8.8.8,9.9.9.9Pay-per-call (x402, $0.02 USDC on Base, DEEP tier — more blocklists + listing reasons, no rate limit):
GET https://ip-doctor.vercel.app/pro/check?target=<ip|domain>
GET https://ip-doctor.vercel.app/pro/check_many?targets=...Your agent's x402-aware HTTP client pays automatically on the 402 challenge. The server holds no private key — payTo is a public receiving address only.
Typical uses
Vet inbound traffic / API callers (datacenter or Tor → step-up auth).
Validate sign-ups & registrations (block known-abusive or proxy IPs).
Moderate user-supplied IPs/domains in a pipeline.
Enrich logs with ASN/org/type/blocklist context.
Local dev
npm install
npm run build
npm run test:engine # live DNS smoke tests
npm run dev:http # local HTTP server on :8080 (payments OFF by default unless env set)
npm run dev:mcp # stdio MCP serverNotes
Read-only. No code is executed; nothing is written. All lookups are DNS/DNSBL/reverse-DNS.
Private/reserved addresses (RFC1918, loopback, CGNAT, link-local) are detected and skipped — no meaningless public lookups.
IPv6 is supported for ASN/PTR/geo; most DNSBLs are IPv4-only and are reported as not-applicable for IPv6.
MIT licensed. Source: https://github.com/Baneado98/ip-doctor
Available Tools
2 toolscheck_ipA
Run a LIVE network & abuse reputation check on an IP address or a domain name. Performs real DNS / DNSBL / reverse-DNS lookups (something an LLM cannot do on its own) and returns: geolocation (RIR country) + ASN/organisation + BGP prefix, reverse DNS (PTR), a network-TYPE deduction (datacenter/hosting, VPN/proxy, Tor exit, mobile/carrier, or residential ISP), DNS blocklist (DNSBL) membership, Tor-exit status, and a 0–100 abuse/risk score with a CLEAN / LOW_RISK / ELEVATED / HIGH_RISK verdict and explained findings. Use this to vet inbound traffic, validate signups/registrations, decide whether to challenge a request, or moderate user-supplied IPs/domains. Pass deep=true for more blocklists and richer reasons.
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | An IPv4/IPv6 address (e.g. 8.8.8.8) or a domain name (e.g. example.com). Domains are resolved to their A record and that IP is analysed. | |
| deep | No | When true, queries additional DNSBL zones (incl. Spamhaus/Barracuda/UCEPROTECT), fetches TXT listing reasons, and expands all of a domain's addresses. Slower but more thorough. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full responsibility for transparency. It thoroughly explains the tool's behavior: real-time DNS lookups, DNSBL checks, Tor-exit status, abuse score calculation, and the effect of the deep parameter. It also notes that domains are resolved to their A record.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single paragraph but is well-organized and front-loaded with the main purpose. It uses clear language and avoids redundancy. Breaking into bullet points could improve readability, but it remains concise and effective.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has only 2 parameters, no output schema, and no nested objects, the description is remarkably complete. It explains both parameters, the entire output (including verdict levels like CLEAN, LOW_RISK, etc.), and the tool's mechanism. No critical information is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds value by explaining that domains are resolved to IPs, and that deep=true queries additional DNSBL zones and fetches TXT listing reasons. This goes beyond the schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs a live network and abuse reputation check on an IP or domain. It lists specific lookups (DNS, DNSBL, reverse-DNS) and return values (geolocation, ASN, BGP prefix, etc.). The purpose is distinct from the sibling tool check_many, which suggests batch operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear use cases: vetting inbound traffic, validating signups, moderating user-supplied IPs/domains. It does not explicitly state when not to use it or mention alternatives, but the context is sufficient for an agent to decide.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_manyA
Run the live IP/domain reputation check on several targets at once (e.g. a list of IPs from your logs). Returns one concise verdict per target. Useful for batch-vetting traffic or a blocklist candidate set.
| Name | Required | Description | Default |
|---|---|---|---|
| targets | Yes | List of IP addresses and/or domain names to check. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description reveals that checks are 'live' and returns 'concise verdict per target'. It does not disclose authorization needs, rate limits, or whether it is read-only (but reasonable to infer for a check). Could be more thorough but adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler, front-loaded with the core action ('run the live IP/domain reputation check'). Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains the return format ('one concise verdict per target') but lacks details on verdict structure, error handling, or behavior with invalid targets. Without an output schema, more could be said, but it covers the essential outcome.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single parameter 'targets', which already documents its type and meaning. The description adds example usage ('from your logs') but no additional syntax or constraints, so it meets baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs live reputation checks on multiple IPs/domains at once and returns a verdict per target. It distinguishes from the sibling check_ip by explicitly indicating batch operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides usage context ('batch-vetting traffic', 'blocklist candidate set') and implies when to use this over check_ip (for multiple targets). However, it does not explicitly state when not to use it or mention alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
v0.1.0- First observed
check_ip - First observed
check_many
TDQS
Scored across 2 tools
The two tools are clearly distinct: check_ip handles single targets while check_many handles batch processing. Descriptions explicitly differentiate the use cases.
Both tools follow a consistent verb_noun pattern: 'check' + target type (ip or many). Simple and predictable.
Only 2 tools for IP/domain reputation checking feels thin. While the core functionality is covered, the server would benefit from additional tools for advanced features like whitelist management or historical queries.
The tool set covers the primary use case of live reputation checking for single and multiple targets. Minor gaps exist (e.g., no tool for checking URLs or managing blocklists), but the domain is simple and adequately served.
Maintenance
Related MCP Connectors
Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.
Free MCP server: 32 security & developer API tools -- WHOIS, DNS, CVE checks, IP reputation.
MCP server for ScanMalware.com URL scanning, malware detection, and analysis.
Scores any MCP server before you trust it: free quick check, full paid report, 2-5 way compare.
Related MCP Servers
- AlicenseDqualityDmaintenanceA comprehensive MCP server providing tools for IP, domain, email, and image-based open-source intelligence. It integrates services like Shodan, VirusTotal, and HaveIBeenPwned to facilitate advanced security research and data gathering.5682 npmISC
- AlicenseAqualityDmaintenanceMCP server for DNS lookups, reverse DNS, WHOIS, and domain checks. Zero auth, zero config.532 npm3MIT
- FlicenseNot gradedqualityNot gradedmaintenanceAn MCP server for domain availability checks, WHOIS lookups, and domain suggestions using RDAP and TCP port 43. It allows users to perform bulk checks and retrieve registration details across multiple TLDs without requiring an API key.121 npm-
- AlicenseAqualityDmaintenanceMCP server providing DNS resolution, reverse DNS, RDAP-based WHOIS, and IP geolocation lookups. No API keys required , and all upstreams are public.4MIT