# ShieldAPI – IP Reputation & Blacklist Check

> ShieldAPI – IP Reputation & Blacklist Check is a paid API for AI agents from shield.vainplex.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-27).

Checks an IP address against real-time reputation databases and blacklists to determine if it is malicious, suspicious, or safe

## Facts

- Endpoint: GET https://shield.vainplex.dev/api/check-ip?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-27
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/shieldapi-ip-reputation-blacklist-check-152ddbb1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_dj0yuk6csWxWbm9kyih07

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability shieldapi-ip-reputation-blacklist-check-152ddbb1
```

Example prompt: Can you check if the IP address 192.168.1.100 is on any blacklists or has a bad reputation — I want to know if it's safe to trust before allowing it access?

## When to prefer this

Use this endpoint when you need to quickly assess whether an IP address is trustworthy before accepting connections, processing requests, or authorizing actions. Prefer this over manual blacklist checks when you need real-time, aggregated reputation data from multiple threat intelligence sources in a single call.

## Known failure modes

- Invalid or malformed IP address input returns a 400 error
- IP not found in reputation databases returns unknown/clean status
- Rate limiting or quota exceeded returns 429
- Payment not processed (x402 payment required) returns 402
- Demo mode may return incomplete or throttled results

## How this service works

IP reputation & blacklist check

## Output

Returns the IP address reputation score, whether the IP appears on known blacklists, threat classifications (e.g. spam, botnet, proxy, malware), and risk indicators. In demo mode, results are limited.

## Example request

```json
{
 "demo": true,
 "hash": "da39a3ee5e6b4b0d3255bfef95601890afd80709"
}
```

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "required": [
    "method"
   ],
   "properties": {
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/shieldapi-ip-reputation-blacklist-check-152ddbb1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shield.vainplex.dev](https://www.zero.xyz/host/shield.vainplex.dev/llms.txt)