English Français العربية

HackMyIP — no-key IP intelligence

Official registry Search and web

Free no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http hackmyip-no-key-ip-intelligence 'https://hackmyip.com/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "hackmyip-no-key-ip-intelligence": {
            "type": "http",
            "url": "https://hackmyip.com/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. hackmyip-mcp
  2. Install
  3. Tools
  4. Fair use
  5. Privacy
  6. Run it yourself
  7. Links
  8. License

hackmyip-mcp

The no-key IP intelligence MCP — paste one URL, no signup.

https://hackmyip.com/mcp

That's the whole setup. No API key. No account. No OAuth dance. No credit card. Point any MCP client at that URL and your agent can immediately look up IPs, geolocate addresses, classify VPN/datacenter traffic, query DNS, run WHOIS, check spam blacklists, audit security headers, scan ports and test email authentication.

It's a thin, stateless wrapper around the free HackMyIP public REST API (docs) running on Cloudflare Workers at the edge. Every tool passes the API's JSON straight back to your agent — nothing is cached, rewritten, or invented.

Install

Claude Code
claude mcp add --transport http hackmyip https://hackmyip.com/mcp
Claude Desktop

Settings → Connectors → Add custom connector, then paste:

https://hackmyip.com/mcp

Or edit claude_desktop_config.json directly

{
  "mcpServers": {
    "hackmyip": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://hackmyip.com/mcp"]
    }
  }
}

mcp-remote is only needed on older Desktop builds that lack native remote-MCP support.

Cursor

~/.cursor/mcp.json (global) or .cursor/mcp.json (per project):

{
  "mcpServers": {
    "hackmyip": {
      "url": "https://hackmyip.com/mcp"
    }
  }
}
Codex CLI

~/.codex/config.toml:

[mcp_servers.hackmyip]
url = "https://hackmyip.com/mcp"

Restart Codex. No codex mcp login step — this server is authless.

VS Code / GitHub Copilot

.vscode/mcp.json:

{
  "servers": {
    "hackmyip": {
      "type": "http",
      "url": "https://hackmyip.com/mcp"
    }
  }
}
Anything else

Any client that speaks MCP Streamable HTTP works. Endpoint: https://hackmyip.com/mcp (mirror: https://hackmyip-mcp.shitcoinape.workers.dev/mcp). Both the 2025-06-18 and 2026-07-28 protocol revisions are served.

Tools

ToolWhat it does
my_ipPublic IP of the machine that opened the MCP connection, with geo, ISP, ASN and hosting/proxy flags
ip_lookupGeolocation, ISP, ASN, org and AS name for any IPv4/IPv6
bulk_ip_lookupUp to 50 IPs in one request — use this instead of looping ip_lookup
vpn_proxy_checkDatacenter / proxy / mobile-carrier classification for an IP (or your own)
asn_lookupASN details by IP, AS number, or organization name
reverse_dnsPTR hostname for an IP
dns_lookupA, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA, PTR records
whois_domainRDAP registration data: registrar, creation/expiry dates, nameservers, EPP status
ip_blacklist_check12 major spam/abuse DNSBLs with a per-list LISTED / CLEAN / unavailable breakdown
email_breach_checkWhether an email appears in known breaches (XposedOrNot database)
email_auth_checkMX / SPF / DMARC posture for a domain with a pass-warn-fail verdict per mechanism
security_headers_checkGraded (A–F) HTTP security header audit: CSP, HSTS, XFO, Referrer-Policy and more
port_scanReal server-side TCP connect scan — open / closed / filtered / blocked per port
site_status_checkIs a site up or down, with status code and response time
server_infoDescribes this server, its free/no-key nature, and the fair-use limits
Things worth knowing
  • my_ip reports the IP the MCP request arrived from. If your client runs on your laptop, that's your real public IP — which is exactly what makes "is my VPN actually working?" answerable. If it runs on a remote host or behind a corporate proxy, you get that egress IP instead. The tool says so in its response.
  • ip_blacklist_check never fakes a clean result. Lists that refuse public queries come back as unavailable, so read total_checked next to listed_count.
  • port_scan is a real scan from Cloudflare's network. Only point it at hosts you're authorized to test. Private and reserved ranges are rejected upstream.
  • whois_domain depends on third-party RDAP registries which occasionally 5xx. A failure there is upstream, not a malformed query — retry.

Fair use

The upstream API allows 60 requests/minute per client IP (20/min for port_scan and security_headers_check), resetting every 60 seconds. There is no paid tier to upgrade to and no key that lifts it — it exists so the service stays free for everyone. If you hit it, tools return the upstream 429 message and you should back off.

Prefer bulk_ip_lookup over a loop of ip_lookup calls.

Privacy

This server stores nothing. It holds no session state, writes no logs of your queries, and requires no identity. Each tool call is a stateless pass-through to https://hackmyip.com/api/*.

Run it yourself

git clone https://github.com/0xvibly/hackmyip-mcp
cd hackmyip-mcp
npm install
npm run dev          # local dev server at http://localhost:8787/mcp
npm run deploy       # deploy to your own Cloudflare account

Built with @modelcontextprotocol/server and Cloudflare's agents createMcpHandler — stateless, no Durable Objects, no database.

License

MIT

Frequently asked questions

What is HackMyIP — no-key IP intelligence?

Free no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks

How do I install HackMyIP — no-key IP intelligence?

It runs as a remote server. In Claude Code: claude mcp add --transport http hackmyip-no-key-ip-intelligence 'https://hackmyip.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does HackMyIP — no-key IP intelligence need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is HackMyIP — no-key IP intelligence open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains HackMyIP — no-key IP intelligence?

It is published by 0xvibly. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.