IP.LS — IP Lookup Service

1. Tool surface changed

   2026-09-28 19:27 UTC · 11 d ago

   Changed the definition of "ip_summary"

   ip_summarychanged

   description

   AggregateSummarize a large batch of up to 5000 IPv4/IPv6 addresses (or up to 100 hostnames, each resolved server-side)IPs into deterministic distributions by country, continent, ASN/operator and network prefix, each bucket carryingwith a bounded sample so theof resultaddresses. canUse beinstead spot-checkedof withoutip_lookup re-runningonce the batch. Counting, grouping and sampling happen server-side andinput areis exactlyin reproducible:the bucketshundreds sortor bythousands count— descip_lookup thenreturns keyevery ascrow, samples are the lowest addresses inwhich theno bucket,context andwindow theholds. sameUp inputto set5000 alwaysaddresses yieldsor the100 samehostnames. outputCounts regardlessare ofper order.occurrence; Nothingnothing is dropped silently — inputs that fail are counted(failed in→ `errors`, addresses with no database record in→ `no_data`, andunlisted buckets beyond the listing in that dimension's `tail`. Invariants: counted + no_data.n =→ addresses`tail`), and each by_* dimension sums to counted withthe itssame remainderinput asset `tail`.always Countsreturns arethe persame occurrencenumbers, so a repeated address counts each time. Use this instead of ip_lookup onceand the inputresult is in the hundreds or thousands — ip_lookup returns every row, which no context window can hold. Results are facts only: — no datacenter/residential classification, no score, no verdict. Data source: DB-IP Lite (CC BY 4.0).

   213 words differ · removed · added

   inputSchema

    ⟨3 unchanged words⟩ "ips":{"anyOf":[{"description":"Addresses/hostnames separated by whitespaceWhitespace- or commas — thecomma-separated \"(paste a column from a log\"log form.column).","type":"string"},{"description":"e.g. [\"8.8.8.8\",\"1.1.1.1\",\"example.com\"].","items":{"type":"string"},"maxItems":5000,"type":"array"}],"description":"IPv4/IPv6 addresses and/or hostnames. Each hostname contributes all of its A/AAAA addresses. Items that are invalid or unresolvable are reported in `errors`, they never fail the batch."},"prefix4":{"default":24,"description" ⟨10 unchanged words⟩ {"default":48,"description":"IPv6 grouping prefix. /24 is meaningless for IPv6;prefix; /48 is one end-site, /64= one subnet.end-site.","maximum":64,"minimum":16,"type ⟨16 unchanged words⟩ ":{"default":10,"description":"Buckets listed per dimension, count desc.

2. TLS

   2026-09-25 20:30 UTC · 14 d ago

   Certificate recorded, valid to 2026-12-15

3. Authorization

   2026-09-25 20:29 UTC · 14 d ago

   Authorization not required

4. Tool surface changed

   2026-09-25 20:29 UTC · 14 d ago

   Added "ip_summary" (5 tools before, 6 now)

   ip_summaryadded

   Summarize a batch of IPs (country / continent / ASN / network) — Aggregate a batch of up to 5000 IPv4/IPv6 addresses (or up to 100 hostnames, each resolved server-side) into deterministic distributions by country, continent, ASN/operator and network prefix, each bucket carrying a bounded sample so the result can be spot-checked without re-running the batch. Counting, grouping and sampling happen server-side and are exactly reproducible: buckets sort by count desc then key asc, samples are the lowest addresses in the bucket, and the same input set always yields the same output regardless of order. Nothing is dropped silently — inputs that fail are counted i…

5. Status

   2026-09-25 01:28 UTC · 15 d ago

   Unknown → Live

6. Tool surface

   2026-09-25 01:26 UTC · 15 d ago

   First tool surface recorded: 5 tools (server version 1.3.0)

7. Endpoint

   2026-09-25 00:20 UTC · 15 d ago

   https://ip.ls/mcp (mcp_streamable_http) — from mcp_registry, with the record

Showing the latest 7 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed