HackMyIP — no-key IP intelligence MCP Server

by 0xvibly Your server? Claim it

answering

HackMyIP — no-key IP intelligence is answering right now. Last checked 13 min ago. It exposes 15 tools. Last commit 7 Aug 2026.

Free no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks

Uptime history 91 days of history · worst day 95%

91 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

310 ms

Response time

average over 24h

Stars

last commit 7 Aug 2026

Nothing serious here today

Today is the operative word: we check HackMyIP — no-key IP intelligence every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 13 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add hackmyip-mcp --transport http https://hackmyip.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://hackmyip.com/mcp

~/.codex/config.toml

[mcp_servers.hackmyip-mcp]
url = "https://hackmyip.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "hackmyip-mcp": {
      "url": "https://hackmyip.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "hackmyip-mcp": {
      "type": "http",
      "url": "https://hackmyip.com/mcp"
    }
  }
}

Available tools 15

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

email_auth_check

Audit a domain's email authentication setup: MX records, SPF record and DMARC policy, with a pass/warn/fail verdict per mechanism and an overall grade. Use it when diagnosing deliverability, hardening a domain against spoofing, or reviewing a vendor's email posture.

email_breach_check

Check whether an email address appears in known data breaches, using the XposedOrNot breach database. Returns the number of breaches and the named services involved. Free alternative to paid breach-lookup APIs. The address is partially masked in the response.

asn

asn_lookup

Resolve an Autonomous System by IP address, AS number, or organization name. Returns the AS number, network name, holder, description, RIR and whether the AS is currently announced. Use it to answer 'which network is this IP on', 'who is AS15169', or to find the ASNs belonging to a company.

blacklist

ip_blacklist_check

Check an IPv4 address against 12 major spam and abuse blacklists (Spamhaus ZEN, Barracuda, SpamCop, UCEPROTECT and others) with a per-list LISTED / CLEAN / unavailable breakdown. Run this before sending bulk email from a new IP, or when mail is being rejected. Lists that refuse public queries are reported as 'unavailable' rather than falsely clean, so read total_checked alongside listed_count.

bulk

bulk_ip_lookup

Look up country, city, ISP, organization and coordinates for up to 50 IP addresses in a single request. Much faster and far kinder to the rate limit than calling ip_lookup in a loop — always prefer this when you have more than a couple of addresses (e.g. a list from access logs or a firewall export).

dns

dns_lookup

Query live DNS records for a domain over public resolvers. Supports A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA and PTR. Use it to verify a deployment's DNS, inspect MX/SPF/DKIM/DMARC TXT records, check nameserver delegation, or confirm propagation after a change.

lookup

ip_lookup

Look up geolocation (city, region, country, lat/lon, timezone, postal code) plus ISP, ASN, organization and AS name for any public IPv4 or IPv6 address. The workhorse tool for 'where is this IP', triaging a log entry, or identifying who owns an address.

my_ip

Get the public IP address of the machine that opened this MCP connection, enriched with city/country, coordinates, timezone, ISP, ASN and hosting/proxy classification. Use this for 'what is my IP', 'where does the internet think I am', or a quick sanity check that a VPN is actually routing traffic. Note: this reflects the IP the MCP request arrived from, so if the client sits behind a corporate proxy or remote host, it reports that egress IP.

port

port_scan

Run a real server-side TCP connect scan against a public host. Each port comes back as open (handshake completed), closed (refused/reset), filtered (no response, likely firewalled) or blocked (Cloudflare blocks outbound to that port, e.g. 25/SMTP). With no `ports` argument a curated common-port catalog is scanned. Private, reserved and internal addresses are rejected. Only scan hosts you are authorized to test. Rate limited to 20 requests/minute and can take 20+ seconds.

reverse

reverse_dns

Get the PTR hostname for an IPv4 or IPv6 address. Useful for identifying mail servers, confirming that a crawler really belongs to the bot it claims to be, or adding a human-readable name to a raw log IP.

security

security_headers_check

Fetch a site and grade its HTTP security headers (A-F): CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, plus information-leak headers like Server and X-Powered-By. Each check comes back with the actual header value and an explanation. Use it for a quick security review of your own site or a third party's. Rate limited to 20 requests/minute.

server

server_info

Describe this MCP server: what it wraps, the fact that it is completely free with no API key, no signup and no auth, the fair-use rate limit, the full tool list, and links to hackmyip.com and its API docs. Call this when the user asks what this server can do, whether it costs anything, or where the data comes from.

site

site_status_check

Check whether a site is reachable from Cloudflare's network. Returns an up/down boolean, HTTP status code, response time in milliseconds, and the server / content-type headers. Use it to confirm an outage is real rather than local, or to verify a deployment is serving.

vpn

vpn_proxy_check

Classify an IP as hosting/datacenter, open proxy, or mobile-carrier, alongside its geolocation and network owner. Use it to decide whether traffic is likely a VPN, a cloud server or a real residential/mobile user — for fraud triage, abuse review, or checking whether your own VPN is being detected. Omit `ip` to check the connection this MCP request came from.

whois

whois_domain

Fetch registration data for a domain via RDAP: registrar, creation/expiration/last-updated dates, nameservers and EPP status codes. Use it to check domain age (a common trust signal), see when a domain expires, or find who it is registered through. Note that RDAP is a third-party registry service and can be temporarily unavailable — a failure here is upstream, not a bad query.

Endpoints

URL	Transport	State	Latency	Checked
https://hackmyip.com/mcp	streamable-http	answering	379 ms	13 min ago

Alternatives to HackMyIP — no-key IP intelligence

same job, measured the same way

IP99 IP risk & geolocation

by ip99

Free IP risk and geolocation lookup: proxy, VPN and datacenter detection. No API key.

1 tools answering

Domain Intelligence MCP Server

by thenextgennexus

DNS, WHOIS, IP geolocation and SSL checks as agent tools.

4 tools answering

ipv4.fr Network Tools

by ipv4

DNS, WHOIS, SSL, IP geolocation, email validation, DNSBL blacklist, HTTP headers, subnet calc.

9 tools answering

NetIntel - IP + Domain Intelligence | WHOIS DNS Geo Port

by anshumanatrey

NetIntel - IP & Domain Intelligence | WHOIS DNS Geo Bulk

answering

Freegeoip MCP

by mrfentmen

IP geolocation from FreeGeoIP. No key required.

61 installs/wk local only

DB IP MCP

by mrfentmen

IP geolocation from DB-IP. No key required.

133 installs/wk local only

Ipapi MCP

by mrfentmen

IP geolocation from ipapi.co. No key required.

64 installs/wk local only

Opencellid

by pipeworx-io

OpenCellID MCP — cell tower geolocation database (free with key)

364 installs/wk 46 tools answering

HackMyIP — no-key IP intelligence — questions

Answers built from our own checks of this server.

What can HackMyIP — no-key IP intelligence do?

It exposes 15 tools, read directly from the server on our last check. Among them: asn_lookup, bulk_ip_lookup, dns_lookup, email_auth_check, email_breach_check, ip_blacklist_check and 9 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is HackMyIP — no-key IP intelligence working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 310 ms. The bar chart above shows every period we have measured.

How do I connect HackMyIP — no-key IP intelligence?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does HackMyIP — no-key IP intelligence need an API key?

No. HackMyIP — no-key IP intelligence completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 15 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is HackMyIP — no-key IP intelligence?

It answers our handshake in 310 ms on average, which is faster than 45% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is HackMyIP — no-key IP intelligence open source?

The code is open source: it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at hackmyip.com, which runs on its operator's own terms.