FindIP MCP server
io.github.findip-net/findip-mcp·v0.1.1IP intelligence lookups and FindIP Shield visitor risk signals for AI assistants.
0 stars363 downloads/wk
Reviews
Write oneNobody has reviewed FindIP yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
FindIP tools (5)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
explain_eventExplains one Shield event in plain language: where it came from, which risk signals fired, the score and recommendation,
list_shield_sitesLists the FindIP Shield sites on your account: ID, name, domain, status, last event time and today's event and risky-event counts.
lookup_ipIP intelligence for one IPv4 or IPv6 address from FindIP: country, city, ISP and ASN, connection type,
recent_risky_eventsRecent events on one Shield site at or above a risk score, newest first: event name, page, IP, country, network,
verify_sessionServer-side risk check for one FindIP Shield session: risk score, recommendation (allow, monitor, challenge, block),
Public scan report
scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it
- Code scan9 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How FindIP compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,255 servers
- Tools
- 5
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 363
- more than 84% of 12,191 servers with a package
What its tools let an agent do: 5 read
Install FindIP in Claude Code, Cursor or VS Code
Runs npx -y @findip/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add findip-mcp -- npx -y @findip/mcp
What the publisher says
From the FindIP repository's README, as published. We do not edit it. Read it on GitHub
FindIP MCP server
Ask your assistant about an IP address or a risky session, and get the answer from FindIP.
@findip/mcp is a Model Context Protocol server for FindIP. It gives Claude, Cursor and other MCP clients IP intelligence and FindIP Shield risk signals. It runs locally over stdio and only reads data.
Tools
All five tools are read-only. docs/BACKEND.md lists the FindIP endpoint behind each one.
Setup
You need Node.js 18.17 or later and a FindIP API key. Keys are free at findip.net.
Claude Code
claude mcp add findip --env FINDIP_API_KEY=your_api_key -- npx -y @findip/mcpClaude Desktop
Add this to claudedesktopconfig.json (Settings, Developer, Edit Config), then restart Claude Desktop:
{
"mcpServers": {
"findip": {
"command": "npx",
"args": ["-y", "@findip/mcp"],
"env": {
"FINDIP_API_KEY": "your_api_key"
}
}
}
}Cursor
Add this to ~/.cursor/mcp.json, or to .cursor/mcp.json in a project:
{
"mcpServers": {
"findip": {
"command": "npx",
"args": ["-y", "@findip/mcp"],
"env": {
"FINDIP_API_KEY": "your_api_key"
}
}
}
}Configuration
The Shield account tools allow 60 requests per account per minute. Repeated requests with a wrong key are blocked for 10 minutes.
Keys are read from the environment only. They are never accepted as tool arguments and never appear in tool output or error messages.
Examples
- "Look up 203.0.113.9. Is it a VPN or a hosting provider?"
- "Verify Shield session sess_8f2c and tell me why it was flagged."
- "What risky traffic hit my signup form this week?"
- "Explain event 5b1e... on shop.example. Should I worry?"
How to read the results
FindIP reports risk signals. A VPN, a hosting network or a high score tells you about the connection, not about the person behind it. Use the signals to decide who gets a closer look, an extra step or a manual review.
The Shield browser SDK collects signals and can add friction in the page, but a browser can be scripted or bypassed, so it is not a security boundary. Decisions that matter belong on your server: call server verification (the endpoint verifysession uses) from your backend before you allow, challenge or block. A session with riskstatus: "unknown" had no IP intelligence; treat it as unknown, not as safe.
Privacy
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
FindIP: common questions
- Is FindIP MCP server safe?
- Mostly: it is graded B (82/100). Read the FindIP safety report
- How do I install FindIP?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does FindIP need an API key?
- Yes. The registry entry asks for
FINDIP_API_KEY,FINDIP_SHIELD_SECRET_KEY. - Is FindIP maintained?
- The last commit was 24 days ago (2026-10-11). The latest release is v0.1.1.
- How does FindIP compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.