IPinfo
by ipinfo · remote · local (pypi) · no sign-in to list tools · v0.2.0 · published by GitHub user ipinfo
Official IPinfo MCP Server - IP intelligence tools for AI assistants
6 tools: 3 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http ipinfo https://mcp.ipinfo.io/ --header 'Authorization: <your-authorization>'Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
6 tools
Changes things 3Claude Code: ask
ipinfo_check_privacyCheck whether IP addresses are using privacy or anonymity services.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Check whether IP addresses are using privacy or anonymity services. Returns privacy flags for each IP: whether it is anonymous, using a VPN, proxy, relay, or Tor, and whether it is an anycast, hosting, mobile, or satellite address. Requires a paid API token. Results are paginated. If the API reports an error for specific IPs, those IPs are listed in errors with the reason and left out of results. Do not treat a missing result as "no privacy services detected": check errors. Results are cached in memory for the session, so repeat checks of the same IP are served from cache without consuming API quota. You do not need to maintain your own cache or deduplicate IPs before calling this tool. The _meta field reports api_calls_made and from_cache counts.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
ipinfo_check_residential_proxyCheck whether IP addresses are known residential proxies.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Check whether IP addresses are known residential proxies. Returns whether each IP is a residential proxy and, if so, the proxy service name, the date it was last seen, and the percentage of days the IP was observed as a proxy. Requires a paid API token with residential proxy access. Results are paginated. If the API reports an error for specific IPs, those IPs are listed in errors with the reason and left out of results. Do not treat a missing result as "not a residential proxy": check errors. Results are cached in memory for the session, so repeat checks of the same IP are served from cache without consuming API quota. You do not need to maintain your own cache or deduplicate IPs before calling this tool. The _meta field reports api_calls_made and from_cache counts.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
ipinfo_quotaCheck your IPinfo API usage and remaining quota.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Check your IPinfo API usage and remaining quota. Returns daily and monthly request counts, the plan limit, and how many requests remain.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
Only reads 3Claude Code: allow
ipinfo_asnGet autonomous system (network ownership) information for IP addresses.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get autonomous system (network ownership) information for IP addresses. By default queries the IPinfo Lite endpoint, which returns ASN, name, and domain. Set detailed=True to query the full lookup endpoint, which also includes the network type (e.g. isp, hosting, business, education). Results are paginated. If the API reports an error for specific IPs, those IPs are listed in errors with the reason and left out of results. Results are cached in memory for the session, so repeat lookups of the same IP are served from cache without consuming API quota. You do not need to maintain your own cache or deduplicate IPs before calling this tool. The _meta field reports api_calls_made and from_cache counts.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
ipinfo_geolocateGet geographic location data for one or more IP addresses.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get geographic location data for one or more IP addresses. By default queries the IPinfo Lite endpoint, which returns country and continent. Set detailed=True to query the full lookup endpoint, which adds city, region, coordinates, timezone, and postal code. Results are paginated. If the API reports an error for specific IPs, those IPs are listed in errors with the reason and left out of results. Results are cached in memory for the session, so repeat lookups of the same IP are served from cache without consuming API quota. You do not need to maintain your own cache or deduplicate IPs before calling this tool. The _meta field reports api_calls_made and from_cache counts.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
ipinfo_lookupLook up geolocation, network, and metadata for one or more IP addresses.No findings
Why it is in this group
- The name "ipinfo_lookup" says "lookup": a word for reading.
Description, as the server wrote it Look up geolocation, network, and metadata for one or more IP addresses. By default queries the IPinfo Lite endpoint, which returns country, continent, and ASN info. Set detailed=True to query the full lookup endpoint, which adds city-level geolocation, privacy flags (VPN, proxy, Tor, hosting, anycast), and richer AS data. Results are paginated. Use page and page_size to control which slice is returned. If the API reports an error for specific IPs, those IPs are listed in errors with the reason and left out of results. Results are cached in memory for the session, so repeat lookups of the same IP are served from cache without consuming API quota. You do not need to maintain your own cache or deduplicate IPs before calling this tool. The _meta field reports api_calls_made and from_cache counts.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.2.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http ipinfo https://mcp.ipinfo.io/ --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__ipinfo__ipinfo_lookup",
"mcp__ipinfo__ipinfo_geolocate",
"mcp__ipinfo__ipinfo_asn"
],
"ask": [
"mcp__ipinfo__ipinfo_check_privacy",
"mcp__ipinfo__ipinfo_check_residential_proxy",
"mcp__ipinfo__ipinfo_quota"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as ipinfo. Review it before you use it.
