# IP Intelligence Lookup

> IP Intelligence Lookup is a paid API for AI agents from the-stall.intuitek.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-11).

Returns intelligence and enrichment data for a given IP address, including geolocation, threat signals, and network metadata.

## Facts

- Endpoint: GET https://the-stall.intuitek.ai/cap/ip-intel?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ip-intelligence-lookup-8de7ce60
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0kopauCNs5S-Sqb4uaOKk

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ip-intelligence-lookup-8de7ce60
```

Example prompt: What can you tell me about the IP address 203.0.113.42 — where is it located, who owns it, and is it associated with any threats?

## When to prefer this

Choose this endpoint when you need lightweight, pay-per-call IP intelligence with no account setup — ideal for ad-hoc IP lookups, security investigations, or enriching logs with geolocation and threat data using USDC micropayments on Base mainnet.

## Known failure modes

- Invalid or malformed IP address returns an error response
- Private/reserved IP ranges (e.g. 192.168.x.x) may return limited or no data
- Payment failure via x402/USDC on Base mainnet blocks the request
- Rate limits or quota exhaustion may result in 429 errors
- Incomplete properties parameter may return partial data

## How this service works

Geolocation and network intelligence for IP addresses or domain names. Returns country, region, city, coordinates, ISP, organization, ASN, reverse DNS, and proxy/VPN/mobile/hosting flags. Accepts IPv4, IPv6, or domain names (auto-resolved to IP). Useful for infrastructure audits, fraud detection, blockchain node geography, and origin enrichment.

## Output

Returns enriched intelligence for the queried IP address, potentially including geolocation (country, region, city), ASN/ISP details, hostname, and threat/risk signals such as whether the IP is a known proxy, VPN, Tor exit node, or malicious actor.

## Example request

```json
{
 "target": "8.8.8.8",
 "properties": "geolocation,threat_signals,network_metadata"
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ip-intelligence-lookup-8de7ce60/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from the-stall.intuitek.ai](https://www.zero.xyz/host/the-stall.intuitek.ai/llms.txt)