IPIPAI MCP Server
com.ipipai/ipipai-mcpipipai.comstreamable-httpv2.0.0Scanned
IP intelligence, network diagnostics, and AI service availability tools for AI agents.
12 tools: 1 do something that can't be undone, 6 change things and 5 only read.
- Reads private data · 1
- Reads text others write · 0
- Can send data out · 0
- No findings
Anlyon alternative
7 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
12 tools
Can't be undone 1Claude Code: ask
ping_hostSend ICMP ping packets to a host and measure latency.No findings
Why it is in this group
- The name "ping_host" says "ping": a word for reading.
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Send ICMP ping packets to a host and measure latency. Returns min/avg/max latency and packet loss percentage.
Changes things 6Claude Code: ask
check_ip_reputationCheck IP reputation: proxy/VPN detection, Tor exit node, blacklist status, hosting/datacenter classification.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check IP reputation: proxy/VPN detection, Tor exit node, blacklist status, hosting/datacenter classification. Returns a verdict (Safe / Low / Medium / High / Critical Risk) with pass/fail checks.
check_service_accessCheck if a specific service (ChatGPT, Claude, Netflix, Disney+, etc.) is accessible from a given IP location.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check if a specific service (ChatGPT, Claude, Netflix, Disney+, etc.) is accessible from a given IP location. Useful for diagnosing "why can't I access X?" questions.
check_website_availabilityCheck if major websites (Google, GitHub, YouTube, Wikipedia, etc.) are accessible from the server location.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check if major websites (Google, GitHub, YouTube, Wikipedia, etc.) are accessible from the server location. Useful for censorship and network restriction detection.
rate_ip_nodeComprehensive rating for VPS, proxy nodes, and datacenter IPs.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Comprehensive rating for VPS, proxy nodes, and datacenter IPs. Returns overall score (0-100), grade (A+ to D), 5-star ratings for AI/streaming/stability/security/network, recommended use cases, and warnings.
score_ip_nodeScore the quality and reliability of an IP/node using IP intelligence and network signals.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Score the quality and reliability of an IP/node using IP intelligence and network signals. Returns overall score (0-100), grade (A+ to D), 5-star ratings for AI/streaming/stability/security/network, recommended use cases, and warnings. Use this tool when the user asks whether an IP/node is high quality, clean, stable, or suitable for a specific network use case.
trace_routeTrace the network path from the server to a target host.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Trace the network path from the server to a target host. Returns hop-by-hop IP, hostname, and latency for each hop.
Only reads 5Show 5 read-only tools
lookup_domain_whoisQuery WHOIS registration info for a domain name or IP address.No findings
Why it is in this group
- The name "lookup_domain_whois" says "lookup": a word for reading.
Description, as the server wrote it Query WHOIS registration info for a domain name or IP address. Returns registrar, creation date, expiry date, nameservers, and registrant info (if public).
lookup_ipQuery complete IP intelligence: geolocation, ISP, ASN, IP type (residential/datacenter/mobile/VPN/proxy/Tor), risk score, and IPIPAI composite score (0-100 with grade A+ to D).No findings
Why it is in this group
- The name "lookup_ip" says "lookup": a word for reading.
Description, as the server wrote it Query complete IP intelligence: geolocation, ISP, ASN, IP type (residential/datacenter/mobile/VPN/proxy/Tor), risk score, and IPIPAI composite score (0-100 with grade A+ to D). This is the primary tool for IP analysis.
lookup_ip_locationQuick IP geolocation lookup via OpenIPAPI.No findings
Why it is in this group
- The name "lookup_ip_location" says "lookup": a word for reading.
Description, as the server wrote it Quick IP geolocation lookup via OpenIPAPI. Returns country and city for an IP address. Lightweight and fast — no API key required.
lookup_mac_vendorIdentify the manufacturer of a network device by its MAC address using the OUI database.Reads private dataNo findings
Why it is in this group
- The name "lookup_mac_vendor" says "lookup": a word for reading.
What it can reach
- private-dataThe description's first sentence says "database": it reads databases.
Description, as the server wrote it Identify the manufacturer of a network device by its MAC address using the OUI database.
resolve_dnsResolve a domain name to its A (IPv4) and AAAA (IPv6) DNS records.No findings
Why it is in this group
- The name "resolve_dns" says "resolve": a word for reading.
Description, as the server wrote it Resolve a domain name to its A (IPv4) and AAAA (IPv6) DNS records.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input or outbound.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 2.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http ipipai https://ipipai.com/mcp-9f3k7xclaude mcp add --transport http ipipai https://ipipai.com/mcp-9f3k7xRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__ipipai__lookup_ip",
"mcp__ipipai__lookup_ip_location",
"mcp__ipipai__resolve_dns",
"mcp__ipipai__lookup_domain_whois",
"mcp__ipipai__lookup_mac_vendor"
],
"ask": [
"mcp__ipipai__check_ip_reputation",
"mcp__ipipai__check_service_access",
"mcp__ipipai__rate_ip_node",
"mcp__ipipai__score_ip_node",
"mcp__ipipai__ping_host",
"mcp__ipipai__trace_route",
"mcp__ipipai__check_website_availability"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as ipipai. Review it before you use it.
Capability tags behind 1 rule
- mcp__ipipai__lookup_mac_vendor private-data
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.ipipai/ipipai-mcp/verify?hash=67294894d61f117efaefe7542a5a91d9e41ebb073758c91afdc9c2b4dce01442" | jq -e '.changed == false'Pinned hash 67294894d61f, from Oct 31, 2026, 08:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.ipipai/ipipai-mcp/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.ipipai/ipipai-mcp)Source: MCP Registry · repository. Synced Oct 31, 2026, 08:17 UTC.