# agosint Network Intelligence: IP and ASN Lookup

> agosint Network Intelligence: IP and ASN Lookup is a paid API for AI agents from agosint.shveik.dev, paid per call via x402, $0.015/call, status unknown (last checked 2026-10-14).

Looks up IP address or ASN network intelligence including RPKI status, announced prefixes, abuse contacts, and RIR allocation details

## Facts

- Endpoint: POST https://agosint.shveik.dev/v1/mpp/network?utm_source=zero.xyz
- Price: $0.015/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agosint-network-intelligence-ip-and-asn-lookup-65a26cff
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_gjVQVpAIftkEbzDbNAhrh

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agosint-network-intelligence-ip-and-asn-lookup-65a26cff -d '<json body>'
```

Example prompt: Can you look up the network details for IP 185.220.101.5 — I need to know who owns it, the ASN, RPKI status, any abuse contacts, and what prefixes it announces?

## When to prefer this

Use this endpoint when you need structured, signed network intelligence for a specific IP address or ASN as part of automated due diligence, security triage, or vendor vetting workflows — especially when you need RPKI validation, abuse contacts, and RIR allocation details in one call without managing API credentials. Prefer it over manual WHOIS lookups when the result needs to be machine-readable and verifiable (signed), and when pay-per-call stablecoin billing suits your agent's usage pattern.

## Known failure modes

- Invalid IP format returns validation error
- ASN not found in RIR databases returns empty or null record
- Unreachable RIPEstat upstream causes timeout or 503
- Malformed ASN string (e.g. missing 'AS' prefix) may return error
- Payment failure in x402 flow causes 402 response before lookup occurs

## How this service works

Company and domain due diligence for AI agents: official registers, sanctions lists and domain records, signed. Pay per call in stablecoins, no account.

## Output

Returns a signed JSON record containing the ASN identifier, holder name, RPKI status object, announced prefixes list and total count, abuse contact list, authoritative RIR, allocation block and note, source (RIPEstat), source URL, resource type, retrieval timestamp, and a payment receipt confirming the x402 microtransaction.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ip": {
   "type": "string",
   "maxLength": 45
  },
  "asn": {
   "type": "string",
   "maxLength": 12
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "asn": "AS3333",
  "note": "Public r…",
  "rpki": {},
  "holder": "RIPE-NCC…",
  "schema": "agosint.…",
  "source": "RIPEstat…",
  "receipt": {},
  "announced": true,
  "source_url": "https://…",
  "retrieved_at": "2026-10-…",
  "resource_type": "asn",
  "abuse_contacts": [],
  "allocation_note": "Assigned…",
  "allocation_block": "IANA 16-…",
  "authoritative_rir": "ripe",
  "announced_prefixes": [],
  "announced_prefixes_total": 8
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agosint-network-intelligence-ip-and-asn-lookup-65a26cff/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agosint.shveik.dev](https://www.zero.xyz/host/agosint.shveik.dev/llms.txt)