# Netzhandwerker IP Reputation Check

> Netzhandwerker IP Reputation Check is a paid API for AI agents from tools.netzhandwerker.de, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Checks the reputation of one or up to 25 IP addresses, returning risk/threat signals for each.

## Facts

- Endpoint: POST https://tools.netzhandwerker.de/v1/ip/reputation
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/netzhandwerker-ip-reputation-check-5f1ba782
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_2h1ldSlYig_bLuihNFicQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability netzhandwerker-ip-reputation-check-5f1ba782 -d '<json body>'
```

Example prompt: Can you check the reputation of IP address 185.220.101.45 and tell me if it's associated with any threats, abuse, or suspicious activity?

## When to prefer this

Choose this endpoint when you need fast, per-request IP reputation lookups — especially within automated agent workflows that need to screen individual or small batches (up to 25) of IPs for threat signals. It's well-suited for real-time fraud prevention, access control decisions, or enriching security logs with threat context. The x402 micropayment model makes it cost-effective for high-frequency, per-call usage without subscription overhead.

## Known failure modes

- Invalid IP address format returns a validation error
- Batch exceeding 25 IPs may be rejected
- Unknown or unindexed IPs may return limited reputation data
- Network timeouts on high-load scenarios
- Missing required 'ip' or 'ips' field returns a bad request error

## How this service works

x402-Werkzeuge für autonome Agenten.

## Output

Returns reputation data for each queried IP address, including risk scores, threat classifications (e.g. spam, malware, botnet, proxy, Tor exit node), and abuse signals that help determine whether the IP is safe or should be blocked/flagged.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ip": {
   "type": "string"
  },
  "ips": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "description": "Stapel bis 25 Adressen"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "results": [
   {
    "ip": "178.104.236.225",
    "asn": 24940,
    "bogon": false,
    "as_name": "HETZNER-AS",
    "country": "DE",
    "tor_exit": false,
    "datacenter": true,
    "risk_score": 55,
    "reverse_dns": "static.225.236.104.178.clients.your-server.de"
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/netzhandwerker-ip-reputation-check-5f1ba782/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tools.netzhandwerker.de](https://www.zero.xyz/host/tools.netzhandwerker.de/llms.txt)