# IPinfo MCP for AI Agents AI Agent Connect

> IPinfo lets your AI agent perform deep IP intelligence lookups to identify geographic locations, network owners, and security risks. It pulls real-time data on ASNs, WHOIS records, and enterprise details like VPN or proxy flags. Use it to enrich logs, investigate threats, or map out network infrastructure instantly.

## Overview
- **Category:** security-compliance
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_zXvkqU5YiXOWDPq3agB3Xh7iE3kefn6eO1K9zqnx/ai-agent-connect
- **Tags:** ip-lookup, geolocation, asn, whois, threat-intelligence

## Description

Connect IPinfo to your AI agent to perform deep IP intelligence lookups. If you're investigating security threats, analyzing web traffic, or managing network infrastructure, this Connector provides instant access to industry-leading IP data. You can ask your agent to identify precise city and region data, find the owner of an Autonomous System, or pull full WHOIS records for a network. It handles the heavy lifting of mapping out which domains are hosted on specific IPs and provides advanced intelligence like VPN, Proxy, and Tor flags. When you're dealing with large datasets, the batch processing tools let you enrich up to 1,000 addresses in one go. Having this available in your Vinkius catalog means you can stop jumping between different tabs and start getting context directly in your chat. It turns a list of numbers into a clear picture of where your traffic is actually coming from and who owns the infrastructure behind it.

## Tools

### get_enterprise_ip
Fetch advanced data like privacy flags and abuse contacts. This identifies VPN, Proxy, and Tor usage.

### get_lite_ip
Get basic IPinfo Lite data for a specific IP address. Use this for quick, high-level lookups.

### get_lookup_ip
Get Core, Plus, or Max data for a specific IP address. This provides the most detailed records available.

### get_ranges
Get all IP ranges associated with a specific domain. This helps you map out an organization's network footprint.

### get_whois_net
Get IP WHOIS data for a specific network. This is useful for verifying network ownership and registration.

### get_whois_org
Get IP WHOIS data for a specific organization. This identifies the point of contact and owner of a network.

### get_whois_poc
Get IP WHOIS data for a specific point of contact. This provides direct information on network administration.

### get_asn
Retrieve details about an Autonomous System using a number or prefix. This helps you identify the network owner.

### batch_enrich_ips
Enrich up to 1,000 IP addresses in a single request. This is perfect for high-volume data cleaning.

### get_hosted_domains
List domains hosted on a specific IP with pagination support. Use this for reverse IP lookups.

## Prompt Examples

**Prompt:** 
```
Is 8.8.8.8 a VPN or a proxy?
```

**Response:** 
```
I've checked the data for 8.8.8.8. Here are the details:

| Feature | Data |
| :--- | :--- |
| **Location** | Mountain View, California, USA |
| **ISP** | Google LLC |
| **VPN/Proxy/Tor** | No |
| **ASN** | AS15169 |

This IP appears to be a standard Google public DNS address and is not flagged as a VPN or proxy.
```

**Prompt:** 
```
What domains are hosted on 1.1.1.1?
```

**Response:** 
```
I found several domains hosted on 1.1.1.1. Here are the first few:

* one.one.one.one
* cloudflare-dns.com
* cloudflare.com

There are more results available. Would you like me to show the next page?
```

**Prompt:** 
```
Get the IP ranges for microsoft.com.
```

**Response:** 
```
I've retrieved the IP ranges for microsoft.com. They are associated with **Microsoft Corporation (AS8075)**:

* 20.112.52.0/24
* 20.103.85.0/24
* 40.71.64.0/20

These are the primary ranges currently associated with the domain.
```

## Capabilities

### Get geographic data for any IP
Retrieve precise city, region, country, and postal code data for any IP address.

### Identify the owner of an ASN
Get details about an Autonomous System using a number or prefix.

### Find domains hosted on a specific IP
List the domains hosted on a specific IP address with pagination support.

### Check for VPN, Proxy, or Tor usage
Fetch advanced privacy flags and carrier details for an IP address.

### Pull WHOIS records for networks
Get IP WHOIS data for a network, organization, or point of contact.

### Process 1,000 IPs in one request
Enrich a large batch of IP addresses in a single operation for high-scale analysis.

## Use Cases

### Threat Hunting
A security analyst asks the agent to check if a suspicious IP is a Tor exit node or a known VPN using `get_enterprise_ip`.

### Log Cleaning
A data analyst uses `batch_enrich_ips` to add city and country data to a CSV of 500 web hits for a marketing report.

### Infrastructure Audit
A DevOps engineer asks for the ASN and owner of a new server's IP using `get_asn` to ensure it's in the correct region.

### Domain Mapping
A researcher wants to see all domains hosted on a specific IP using `get_hosted_domains` to find related web properties.

## Benefits

- Get geographic data instantly using `get_lookup_ip` to see exactly where a user is located.
- Identify malicious actors faster with `get_enterprise_ip` to check for VPN or Proxy usage.
- Map out hosting environments by using `get_hosted_domains` to see every site on a single IP.
- Automate large scale audits by using `batch_enrich_ips` to process 1,000 IPs at once.
- Verify network ownership using `get_whois_org` to get point of contact and organization details.
- Discover IP ranges for specific domains using `get_ranges` to understand infrastructure footprints.

## How It Works

The bottom line is you get instant geographic and network context for any IP address without leaving your AI client.

1. Get your IPinfo Access Token from your account dashboard.
2. Add your token to the Connector configuration settings.
3. Ask your agent to look up an IP address or a list of addresses.

## Frequently Asked Questions

**Does IPinfo MCP show me the city and country for an IP?**
Yes, it provides precise geographic data including the city, region, and country for any IP address you look up.

**Can I check if an IP is a VPN or a Proxy?**
Yes, the Connector can identify privacy flags to tell you if a connection is coming from a VPN, Proxy, or Tor node.

**How many IPs can I check at once with IPinfo MCP?**
You can process up to 1,000 IP addresses in a single batch request, making it easy to handle large datasets.

**Can IPinfo MCP tell me who owns a specific IP?**
Yes, it pulls WHOIS data which includes organization names, network details, and point of contact information.

**Can I find out which domains are hosted on one IP?**
Yes, you can list all domains associated with a specific IP address, including support for paginated results.

**Does IPinfo MCP work for ASN lookups?**
Yes, it retrieves details about Autonomous Systems using either the ASN number or the prefix.

**How can I get the most detailed data available for an IP, including WHOIS and company info?**
Use the `get_enterprise_ip` tool. It retrieves the full enterprise dataset, including WHOIS records, company details, abuse contacts, and hosted domains for the target IP.

**Is it possible to check which websites are sharing the same IP address?**
Yes! The `get_hosted_domains` tool performs a Reverse IP lookup, returning a list of domains hosted on the specified IP address.

**Can I process a large list of IP addresses at once?**
Absolutely. Use the `batch_enrich_ips` action to enrich up to 1,000 IP addresses in a single API call, which is much more efficient than individual lookups.