# IP Intel — x402 IP Intelligence (Batch)

> IP Intel — x402 IP Intelligence (Batch) is a paid API for AI agents from ip.netzhandwerker.de, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-14).

Batch-enriches up to 200 IP addresses with geolocation, ASN, Tor exit node detection, blocklist status, and fraud risk labels for fraud prevention and access control.

## Facts

- Endpoint: POST https://ip.netzhandwerker.de/ip/batch
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ip-intel-x402-ip-intelligence-batch-f0405ea6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_RNofxlWzJ0ZTZSxdGGWUR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ip-intel-x402-ip-intelligence-batch-f0405ea6 -d '<json body>'
```

Example prompt: Can you check these 50 IP addresses from our recent signups and tell me which ones are Tor exit nodes, on any blocklists, or flagged as high-risk? Here's the list: [203.0.113.1, 198.51.100.45, ...]

## When to prefer this

Choose this endpoint when you need to enrich multiple IP addresses in a single call (up to 200) with a comprehensive set of fraud and risk signals including Tor detection, DNS blocklists, geolocation, and ASN — especially when you want to pay per-call via USDC/x402 without a subscription. Prefer it over single-IP lookup APIs when processing batches of signups, transactions, or access logs.

## Known failure modes

- Invalid IP addresses in the batch return an error field set to 'ip_invalid' and valid=false for that entry
- Tor exit list unavailable returns null for tor_exit field
- Blocklist sources unavailable return null for listed field
- Batch exceeds 200 IPs may be rejected or partially processed
- Payment verification failure results in no data returned
- Malformed JSON body returns a 4xx error

## How this service works

Local IP intelligence for fraud prevention, moderation and access control.

## Output

Returns an array of per-IP enrichment objects covering: country (ISO 3166-1 alpha-2), region, ASN, IP version, whether the address is reserved/private, Tor exit node status, DNS blocklist membership and which lists it appears on, a risk label, cache timestamp, and a validity flag. Also includes batch-level counts of valid/invalid addresses, a cache status summary, and a payment settlement receipt with transaction hash and USDC amount.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ips": {
   "type": "array",
   "items": {
    "type": "string",
    "description": "IPv4 or IPv6 address."
   },
   "maxItems": 200,
   "minItems": 1
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ip-intel-x402-ip-intelligence-batch-f0405ea6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.netzhandwerker.de](https://www.zero.xyz/host/ip.netzhandwerker.de/llms.txt)