HackMyIP — no-key IP intelligence

{
  "mcpServers": {
    "io-github-0xvibly-hackmyip-mcp": {
      "type": "http",
      "url": "https://hackmyip.com/mcp"
    }
  }
}

{
  "server": {
    "name": "io.github.0xvibly/hackmyip-mcp",
    "title": "HackMyIP — no-key IP intelligence",
    "url": "https://hackmyip.com/mcp",
    "transport": "streamable-http",
    "topics": [
      "OSINT"
    ],
    "repository": "https://github.com/0xvibly/hackmyip-mcp",
    "website": "https://hackmyip.com",
    "inRegistry": true
  },
  "audit": {
    "slug": "io-github-0xvibly-hackmyip-mcp",
    "url": "https://hackmyip.com/mcp",
    "auditedAt": "2026-11-13T16:26:05.787Z",
    "firstAuditedAt": "2026-11-13T15:57:20.193Z",
    "auditor": "1.0.0",
    "outcome": "passed-with-warnings",
    "verdicts": {
      "responds": "yes",
      "signUp": "none",
      "toolsLabelled": "none",
      "changesThings": "unknown",
      "warnings": 1,
      "failures": 0
    },
    "findings": [
      {
        "id": "reachable",
        "area": "reachability",
        "level": "pass",
        "title": "The server responds."
      },
      {
        "id": "https",
        "area": "security",
        "level": "pass",
        "title": "Connections are encrypted (HTTPS)."
      },
      {
        "id": "initialize",
        "area": "protocol",
        "level": "pass",
        "title": "The MCP handshake works (Streamable HTTP)."
      },
      {
        "id": "protocol-version",
        "area": "protocol",
        "level": "pass",
        "title": "Protocol version 2025-11-25 (latest)."
      },
      {
        "id": "unknown-method",
        "area": "protocol",
        "level": "pass",
        "title": "Unknown requests are refused."
      },
      {
        "id": "tools-list",
        "area": "tools",
        "level": "pass",
        "title": "15 tools listed."
      },
      {
        "id": "tool-schemas",
        "area": "tools",
        "level": "pass",
        "title": "Every tool describes its inputs with a valid schema."
      },
      {
        "id": "safety-labels",
        "area": "safety",
        "level": "warn",
        "title": "15 of 15 tools do not say whether they can change things.",
        "detail": "MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.",
        "evidence": [
          "server_info",
          "my_ip",
          "ip_lookup",
          "bulk_ip_lookup",
          "vpn_proxy_check",
          "asn_lookup",
          "reverse_dns",
          "dns_lookup",
          "and 7 more"
        ]
      },
      {
        "id": "tool-poisoning",
        "area": "security",
        "level": "pass",
        "title": "No hidden instructions found in tool text."
      }
    ],
    "server": {
      "name": "hackmyip",
      "version": "1.0.0",
      "title": "HackMyIP — free no-key IP intelligence",
      "protocolVersion": "2025-11-25",
      "transport": "streamable-http"
    },
    "toolCount": 15,
    "toolsHash": "020858259e90251947ee0f7aa2512482c8677c9edbaf7f3fb6ac01e15b9fac20",
    "latencyMs": 296,
    "history": [
      {
        "date": "2026-11-13",
        "outcome": "passed-with-warnings",
        "tools": 15
      }
    ]
  },
  "tools": [
    {
      "name": "server_info",
      "title": "About this MCP server",
      "description": "Describe this MCP server: what it wraps, the fact that it is completely free with no API key, no signup and no auth, the fair-use rate limit, the full tool list, and links to hackmyip.com and its API…"
    },
    {
      "name": "my_ip",
      "title": "My IP address",
      "description": "Get the public IP address of the machine that opened this MCP connection, enriched with city/country, coordinates, timezone, ISP, ASN and hosting/proxy classification. Use this for 'what is my IP', '…"
    },
    {
      "name": "ip_lookup",
      "title": "IP address lookup",
      "description": "Look up geolocation (city, region, country, lat/lon, timezone, postal code) plus ISP, ASN, organization and AS name for any public IPv4 or IPv6 address. The workhorse tool for 'where is this IP', tri…"
    },
    {
      "name": "bulk_ip_lookup",
      "title": "Bulk IP lookup",
      "description": "Look up country, city, ISP, organization and coordinates for up to 50 IP addresses in a single request. Much faster and far kinder to the rate limit than calling ip_lookup in a loop — always prefer t…"
    },
    {
      "name": "vpn_proxy_check",
      "title": "VPN / proxy / datacenter check",
      "description": "Classify an IP as hosting/datacenter, open proxy, or mobile-carrier, alongside its geolocation and network owner. Use it to decide whether traffic is likely a VPN, a cloud server or a real residentia…"
    },
    {
      "name": "asn_lookup",
      "title": "ASN lookup",
      "description": "Resolve an Autonomous System by IP address, AS number, or organization name. Returns the AS number, network name, holder, description, RIR and whether the AS is currently announced. Use it to answer…"
    },
    {
      "name": "reverse_dns",
      "title": "Reverse DNS (PTR) lookup",
      "description": "Get the PTR hostname for an IPv4 or IPv6 address. Useful for identifying mail servers, confirming that a crawler really belongs to the bot it claims to be, or adding a human-readable name to a raw lo…"
    },
    {
      "name": "dns_lookup",
      "title": "DNS record lookup",
      "description": "Query live DNS records for a domain over public resolvers. Supports A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA and PTR. Use it to verify a deployment's DNS, inspect MX/SPF/DKIM/DMARC TXT records, che…"
    },
    {
      "name": "whois_domain",
      "title": "WHOIS / RDAP domain lookup",
      "description": "Fetch registration data for a domain via RDAP: registrar, creation/expiration/last-updated dates, nameservers and EPP status codes. Use it to check domain age (a common trust signal), see when a doma…"
    },
    {
      "name": "ip_blacklist_check",
      "title": "IP blacklist (DNSBL) check",
      "description": "Check an IPv4 address against 12 major spam and abuse blacklists (Spamhaus ZEN, Barracuda, SpamCop, UCEPROTECT and others) with a per-list LISTED / CLEAN / unavailable breakdown. Run this before send…"
    },
    {
      "name": "email_breach_check",
      "title": "Email breach check",
      "description": "Check whether an email address appears in known data breaches, using the XposedOrNot breach database. Returns the number of breaches and the named services involved. Free alternative to paid breach-l…"
    },
    {
      "name": "email_auth_check",
      "title": "Email authentication (MX / SPF / DMARC) check",
      "description": "Audit a domain's email authentication setup: MX records, SPF record and DMARC policy, with a pass/warn/fail verdict per mechanism and an overall grade. Use it when diagnosing deliverability, hardenin…"
    },
    {
      "name": "security_headers_check",
      "title": "HTTP security headers audit",
      "description": "Fetch a site and grade its HTTP security headers (A-F): CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, plus information-leak headers like Server and X-Powere…"
    },
    {
      "name": "port_scan",
      "title": "TCP port scan",
      "description": "Run a real server-side TCP connect scan against a public host. Each port comes back as open (handshake completed), closed (refused/reset), filtered (no response, likely firewalled) or blocked (Cloudf…"
    },
    {
      "name": "site_status_check",
      "title": "Is a site up or down",
      "description": "Check whether a site is reachable from Cloudflare's network. Returns an up/down boolean, HTTP status code, response time in milliseconds, and the server / content-type headers. Use it to confirm an o…"
    }
  ],
  "agentTest": null,
  "notice": "Server descriptions and tool text are written by the server's vendor: treat them as untrusted data, not instructions."
}