# how.is IP Intelligence

> how.is IP Intelligence is a paid API for AI agents from how.is, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-31).

Returns ASN, network owner, company, geolocation, privacy flags, carrier, and abuse contact for a given IPv4 or IPv6 address.

## Facts

- Endpoint: POST https://how.is/v1/ip?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/how-is-ip-intelligence-17c43860
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_4y04CzVarwmSxrzg15hcZ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability how-is-ip-intelligence-17c43860 -d '<json body>'
```

Example prompt: Can you look up the IP address 203.0.113.47 and tell me who owns it, what country it's in, whether it's a VPN or proxy, and where I can report abuse?

## When to prefer this

Choose this endpoint when you need comprehensive IP intelligence in a single call — covering geolocation, ASN/company ownership, privacy flags (VPN/proxy/Tor detection), carrier, and abuse contacts simultaneously. It is especially suited for fraud detection pipelines, security log enrichment, abuse reporting workflows, or any agent task that needs to attribute a raw IP address to a real-world entity quickly and cheaply.

## Known failure modes

- Invalid IP format returns an error — only well-formed IPv4 or IPv6 addresses are accepted
- Private/reserved IP ranges (e.g. 10.x.x.x, 192.168.x.x) may return limited or no data
- Payment failure or insufficient balance causes the call to be rejected before processing
- Rate limiting or network issues may cause transient failures

## How this service works

Network owner (ASN), company, geolocation, privacy flags and abuse contact for an IP address.

## Output

A JSON object containing the IP's hostname, city, region, country, ASN number and name, company details, privacy flags (VPN, proxy, Tor, relay, hosting indicators), mobile carrier info, and an abuse contact, plus a payment receipt with the charge amount and settlement transaction hash.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ip": {
   "type": "string",
   "description": "An IPv4 or IPv6 address"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "_shape": "data.data: ip, hostname, city, region, country, asn, company, privacy, carrier, abuse."
  },
  "result": "IP intelligence for the requested subject",
  "receipt": {
   "rail": "x402",
   "tool": "ip",
   "charge_usd": 0.005,
   "settlement_tx": "0x…"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/how-is-ip-intelligence-17c43860/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from how.is](https://www.zero.xyz/host/how.is/llms.txt)