Security & Testing

ipto.to

Provides IP geolocation, ASN, and threat intelligence data including VPN/Tor detection and abuse scoring for single or bulk IPv4 addresses.

1 endpoint14 known toolsFirst detected July 27, 2026Last detected September 9, 2026

ENDPOINT 1

https://ipto.to/mcp

No auth detected

MCP server metadata

Name: ipto-to
Version: 1.0.0

Capabilities

tools

Server instructions

Every tool except bulk_ip_lookup works with no auth, capped at 1,000/day per client IP: ip_lookup, asn_lookup, country_lookup, reverse_dns_lookup, user_agent_parse, phone_lookup, email_lookup, fraud_score, language_detect, currency_convert, weather_lookup, trademark_lookup, patent_lookup. Pass an ipto.to API key via ?api_key= to raise that limit or use bulk_ip_lookup (Pro/Enterprise only). phone_lookup also draws against its own smaller daily budget on top of the general one. Get a free key at https://ipto.to/v1/keys.

Known tools 14

ip_lookup

Look up geolocation, ASN/ISP, and threat intelligence (VPN, Tor, abuse scoring) for a single IPv4 or IPv6 address.

Inferred read-only

bulk_ip_lookup

Look up geolocation, ASN/ISP, and threat intelligence for up to 100 IPv4 addresses in one call.

Inferred read-only

asn_lookup

Look up Autonomous System (ASN) metadata: organization name, country, and announced IP range count.

Inferred read-only

country_lookup

Look up IP range count and ASN count for a country.

Inferred read-only

reverse_dns_lookup

Perform a live PTR (reverse DNS) lookup for an IP address.

Inferred read-only

user_agent_parse

Parse a User-Agent string into browser, OS, device type, and bot detection.

Inferred read-only

phone_lookup

Validate and format a phone number: region, line type, and E.164/national/international formatting.

Inferred read-only

email_lookup

Email syntax validation, a live MX-record check, and disposable/temporary-domain detection.

Potential side effects

fraud_score

Combine whichever of IP, email, phone, and User-Agent are provided into one 0-100 fraud/risk score.

Potential side effects

language_detect

Identify the language of a piece of text via local trigram-frequency analysis.

Inferred read-only

currency_convert

Convert an amount between two currencies (154 supported) using a daily reference-rate feed.

Inferred read-only

weather_lookup

Current weather conditions for any place name, postal code, or "lat,lon" pair.

Inferred read-only

trademark_lookup

Live USPTO TSDR case status for a US trademark by 8-digit serial number: mark, filing/registration dates, status, owner, goods/services.

Inferred read-only

patent_lookup

Live USPTO Patent File Wrapper grant status for a US utility patent by 7-8 digit patent number: filing date, status, inventors, attorney.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.ipto-to]
url = "https://ipto.to/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "ipto-to": {
      "type": "http",
      "url": "https://ipto.to/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: ipto-to
Remote MCP URL: https://ipto.to/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "ipto-to": {
      "url": "https://ipto.to/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "ipto-to": {
      "type": "http",
      "url": "https://ipto.to/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "ipto-to",
  "transport": "streamable-http",
  "url": "https://ipto.to/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for ipto.to was fetched 2026-08-01T08:51:32.836Z and is being refreshed.

Trust status Neutral

ipto.to is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.