# IPdata MCP for AI Agents AI Agent Connect > IPdata lets you pull geolocation, ASN ownership, and threat intelligence data into your AI agent. Instead of jumping between tabs to see where an IP is coming from or if it's a known VPN, you just ask your agent. It handles the heavy lifting of identifying malicious actors and network routes in real-time. ## Overview - **Category:** security-compliance - **Price:** Free - **Endpoint:** https://edge.vinkius.com/vk_preview_007v1A8liXpAz4JJy6yW7NkJZkXqYH27Yt1VIMl5/ai-agent-connect - **Tags:** ip-lookup, geolocation, threat-intelligence, asn-lookup, cybersecurity ## Description IPdata lets you pull geolocation, ASN ownership, and threat intelligence data into your AI agent. Instead of jumping between tabs to see where an IP is coming from or if it's a known VPN, you just ask your agent. It handles the heavy lifting of identifying malicious actors and network routes in real-time. Imagine you're looking at a list of login attempts and need to know if they're coming from a residential ISP or a known proxy. Usually, this means copying IPs into a browser, waiting for a page to load, and then manually logging that data into a sheet. With this Connector, you just ask your agent to check the source. It pulls the city, country, and threat profile instantly. If you're trying to figure out who owns a specific network range, the agent can grab those ASN details without you having to dig through registration databases. It's about getting the context of a connection without the friction of manual lookups. You'll find this is a huge time-saver when you're triaging security alerts or cleaning up large datasets that need geographic labels. Vinkius makes it easy to get this connected so your agent becomes a much more capable research partner. You get the data you need to make decisions, not just a list of numbers. ## Tools ### lookup_asn IPdata lets you get the ownership and routing details for a specific Autonomous System Number. It helps you see which organization manages a network range. ### lookup_ip IPdata lets you retrieve the geolocation and threat profile for any IPv4 or IPv6 address. This is your go-to for identifying the source of a connection. ### lookup_own_ip IPdata lets you check the location and security status of your current connection. It's the fastest way to see if your own network is flagged as a VPN or proxy. ## Prompt Examples **Prompt:** ``` Check if the IP 1.2.3.4 is a proxy or a VPN. ``` **Response:** ``` I've analyzed 1.2.3.4. It's a residential connection in Chicago, IL. It's not flagged as a VPN or proxy, so it's likely a standard home user. ``` **Prompt:** ``` What's the owner of ASN 15169? ``` **Response:** ``` ASN 15169 is registered to **Google LLC**. They manage a massive global network with primary domains like google.com. ``` **Prompt:** ``` Where is my current connection coming from? ``` **Response:** ``` Your connection is currently originating from **Berlin, Germany**. It's a standard ISP connection and shows no signs of being a proxy or Tor node. ``` ## Capabilities ### Identify geographic locations IPdata identifies the city, region, and country for any IPv4 or IPv6 address. ### Spot proxies and VPNs IPdata detects if a connection is coming from a known VPN, proxy, or Tor node. ### Get ASN ownership details IPdata retrieves network ownership and routing information for specific Autonomous System Numbers. ### Check own connection health IPdata verifies the location and threat profile of your current network connection. ### Pull company data IPdata provides organizational context for specific IP ranges. ### Verify malicious actors IPdata flags known malicious actors in real-time during your analysis. ## Use Cases ### Triage suspicious login attempts An analyst sees a spike in traffic and asks the agent to check if the IPs are from known Tor exit nodes using lookup_ip. ### Batch enrich geographic logs A developer wants to group users by country and asks the agent to run lookup_ip on a list of 50 addresses to get city labels. ### Debug network routing paths A dev is troubleshooting a routing issue and asks the agent to find the owner of a specific ASN using lookup_asn. ### Verify personal VPN status A user wants to know if their current ISP is masking their location and asks the agent to check their own IP using lookup_own_ip. ## Benefits - Speed up security triaging by using lookup_ip to instantly flag malicious actors or VPNs in your chat. - Stop manual data entry for geographic labels by letting your agent use lookup_ip to enrich your logs. - Get instant network ownership data with lookup_asn to understand how traffic is routed across different providers. - Verify your own network health and privacy status quickly using lookup_own_ip without opening a browser. - Save time on research by having your agent pull company data and coordinates for any IP range automatically. ## How It Works The bottom line is you get instant network context for any IP address without leaving your chat interface. 1. Subscribe to the IPdata MCP on Vinkius. 2. Enter your IPdata API key into your AI client's configuration. 3. Ask your agent to analyze any IP or ASN you're working with. ## Frequently Asked Questions **Can IPdata help me identify malicious IP addresses?** Yes, it checks if an IP is a known malicious actor, a proxy, or a VPN node. This helps you quickly see if a connection is high-risk. **Does IPdata provide real-time geolocation?** It gives you the city, region, and country for any IPv4 or IPv6 address instantly. You can use this to see exactly where traffic is coming from. **Can I use IPdata to find out who owns a network?** Yes, it looks up ASN details to show you the organization and routing information. This is great for understanding network ownership. **Is IPdata good for triaging security alerts?** It's a great fit because it lets you quickly see if a login attempt is coming from a high-risk location or a known proxy without leaving your agent. **Can I check my own IP's threat profile?** You can ask the agent to check your current connection to see if it's flagged as a VPN or proxy. It's a fast way to verify your own network's status. **Does IPdata support IPv6?** Yes, it handles both IPv4 and IPv6 addresses for lookups, providing consistent data across different network types. **Can I check the reputation or threat level of a specific IP address?** Yes! Use the `lookup_ip` tool. It returns a comprehensive threat profile including flags for VPNs, proxies, Tor exit nodes, and known attackers. **How do I find information about a network provider using an ASN?** Simply provide the ASN (e.g., '15169') to the `lookup_asn` tool. The agent will retrieve the organization name, domain, and network routes associated with that number. **Can I see the details of my own current connection?** Yes, the `lookup_own_ip` tool allows you to fetch the location and threat profile of the IP address currently making the request.