"Tor Browser" matching MCP tools:

• ip_reputationA

  LiveDataLinkB

  Risk profile for an IP address: geolocation and network (ASN/ISP/org) plus two abuse signals - whether it is a known Tor exit node, and whether it appears on the abuse.ch Feodo botnet command-and-control blocklist. For fraud, abuse, and security screening. Keyless.

  ConnectorNo auth

• ip.intelligence.bulkA

  apibaseB

  Look up multiple IP addresses in one call (max 100) — country, city, VPN/Tor/proxy flags, ASN, and organization for each IP (ipapi.is)

  ConnectorNo auth

• security.ipqs.ip_checkA

  apibaseB

  Check any IP address for fraud signals — proxy, VPN, Tor, bot, crawler detection with fraud score (0-100). Returns geolocation (country, city, ISP, ASN), abuse velocity, connection type, and 9+ risk indicators. Essential for e-commerce fraud prevention (IPQualityScore)

  ConnectorNo auth

• updown_list_nodesA

  updown-ioA

  List updown.io's monitoring/webhook servers keyed by location code (lan, mia, tor, rbx, fra, cap, hel, sin, tok, syd) with IPv4, IPv6, city, country and coordinates. Public — no API key needed. updown: GET /api/nodes.

  ConnectorNo auth

• shieldapi.check_ipA

  ShieldAPI MCPA

  Check IP reputation: blacklists, Tor exit node detection, reverse DNS.

  ConnectorNo auth

• styx_beaconA

  styxA

  Ping STYX — return liveness and the current Tor exit identity.

  ConnectorNo auth

• lookup_vpn_detectA

  botoi-mcpB

  Check if an IP address is a VPN, proxy, or Tor exit node. Use when assessing connection trustworthiness or flagging suspicious traffic. Returns detection type and provider details.

  ConnectorNo auth

• score_ipA

  LayerCallA

  Risk-score an IPv4 or IPv6 address. Detects commercial VPNs (naming the provider where its own published list confirms it), proxies, Tor exit nodes and datacenter hosting, and returns geolocation, ASN and a 0-100 risk score with an allow/review/block verdict.

  ConnectorNo auth

• ipstack_lookupA

  IPStack MCP AdapterA

  Get geolocation and security details (country, region, city, timezone, latitude, longitude, ISP, currency, connection type, IP routing type, proxy/tor/threat flags) for a single IP address.

  ConnectorAPI key

• ip_lookupA

  1LookupA

  Look up an IP address: geolocation, connection type, and proxy/VPN/Tor/datacenter flags with a fraud/risk score. Spends 1 credit.

  ConnectorOAuth

• ip_blocklist_checkA

  mcpB

  Check an IP address against IPsum, FireHOL, Tor exit node lists, C2 indicators, Roskomnadzor (Russia), and other threat intelligence feeds. Returns which lists the IP appears on and threat scores.

  ConnectorNo auth

• get_metrics_snapshotA

  CryptoDecentral Sovereign MCPB

  Educational public network metrics snapshot (mempool fees in sat/vB, difficulty, Tor, Nostr sample). No asset prices or trading signals. Educational only. Not financial advice. Not an FSP/CASP. DYOR. Listings and tools are not buy, sell, custody, or swap recommendations.

  ConnectorNo auth

• get_metrics_snapshotA

  CryptoDecentral Sovereign MCPA

  Educational public network metrics snapshot (mempool fees in sat/vB, difficulty, Tor, Nostr sample). No asset prices or trading signals. Educational only. Not financial advice. Not an FSP/CASP. DYOR. Listings and tools are not buy, sell, custody, or swap recommendations.

  ConnectorNo auth

• ipstack_bulk_lookupA

  IPStack MCP AdapterA

  Get geolocation and security details (country, region, city, timezone, latitude, longitude, ISP, currency, connection type, IP routing type, proxy/tor/threat flags) for multiple IPv4 or IPv6 addresses in one request. Useful for analyzing lists of IPs, grouping by country/region, or flagging suspicious origins. Requires a plan that supports bulk lookups.

  ConnectorAPI key

• ip_lookup_maxA

  LookipA

  Full IP intelligence: precise geolocation, network and ASN data, VPN / proxy / Tor / hosting detection and threat data. Needs a free key. Example: ip="1.1.1.1" returns Brisbane, AU plus the privacy and hosting flags.

  ConnectorNo auth

• ip_threat_intelA

  mcpB

  Combined threat intelligence: DNSBL listings, IPsum score, FireHOL lists, bad ASN flag, Tor exit status. Comprehensive threat assessment for an IP address.

  ConnectorNo auth

• ip_intelA

  DeriveAI x402 APIsB

  IP address threat intelligence. Geolocation, ASN/ISP, reverse DNS, blacklist status (8 DNSBLs), VPN/proxy/Tor detection, abuse history. Cross-referenced risk score (0-100).

  ConnectorNo auth

• deep-auditA

  SYNTHORA x402 Intelligence MeshC

  Deep OSINT audit of a person / company / domain / username using >=3 tools of the SYNTHORA self-hosted OSINT mesh (username footprint, passive domain scan, sanctions/PEP matching, Tor crawler, phone scan, own metasearch) + web search, synthesized into a signed verdict with real citations. sha256 + firma SYNTHORA. 0.50 USDC via x402 on Base. [x402: 0.5 USDC per call on Base]

  ConnectorNo auth

• whisper_lookupTorRelayA

  WhisperB

  Look up Tor relay metadata for an address. Answers without an API key. Example call: {"skill":"lookupTorRelay","input":"185.220.101.1"}

  ConnectorNo auth

• ip.intelligence.lookupB

  apibaseB

  Look up any IP address — geolocation (country, city, coordinates), 9 security flags (VPN, Tor, proxy, datacenter, abuser, crawler, bogon, mobile, satellite), ASN, company info, abuse contacts (ipapi.is)

  ConnectorNo auth

• styx_fetchB

  styxA

  Fetch a URL through the Tor network. Requires a paid STYX key (1 credit).

  ConnectorNo auth