# IP Intel — x402 IP Intelligence

> IP Intel — x402 IP Intelligence is a paid API for AI agents from ip.netzhandwerker.de, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Looks up geolocation, ASN, risk score, Tor exit node status, and DNS blocklist results for a given IPv4 or IPv6 address to support fraud prevention, moderation, and access control.

## Facts

- Endpoint: POST https://ip.netzhandwerker.de/ip
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ip-intel-x402-ip-intelligence-93b9bf5f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-YoHVSaHhs2ln5u3vXx_W

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ip-intel-x402-ip-intelligence-93b9bf5f -d '<json body>'
```

Example prompt: Can you check the risk score and Tor exit node status for IP address 203.0.113.47, and tell me if it's listed on any DNS blocklists?

## When to prefer this

Choose this endpoint when you need a single low-latency call that combines IP geolocation, ASN lookup, risk scoring, Tor exit detection, and DNS blocklist checks in one response — especially in fraud prevention, user moderation, or access control pipelines where you need a composite risk signal rather than raw geolocation alone. Particularly useful when operating in a pay-per-call agent context via x402, avoiding subscription overhead.

## Known failure modes

- Invalid IP address input returns valid=false and error='ip_invalid'
- Tor exit node list unavailable returns tor_exit=null
- Some or all DNS blocklists unavailable returns blocklists.listed=null and reduced available_count
- Cached data may be stale (check cached_at timestamp)
- Payment verification failure may prevent response delivery

## How this service works

Local IP intelligence for fraud prevention, moderation and access control.

## Output

Returns a JSON object with the submitted IP address, its validity flag, IP version (4 or 6), country (ISO 3166-1 alpha-2), region, ASN, AS operator name, whether the IP is in a reserved range, whether it is a known Tor exit node, a heuristic risk score (0–100), a risk label (low/moderate/elevated/high), DNS blocklist check results (listed flag, list names, available check count), cache status and timestamps, and a payment settlement receipt.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ip": {
   "type": "string",
   "description": "IPv4 or IPv6 address."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ip-intel-x402-ip-intelligence-93b9bf5f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.netzhandwerker.de](https://www.zero.xyz/host/ip.netzhandwerker.de/llms.txt)