NestDaddy

isIPsafe

com.isipsafe/isipsafe · v1.0.1

Check whether an IP address or network is malicious and report abusive IPs to isIPsafe.

Connect Remote server

Terminal
claude mcp add --transport http isipsafe https://isipsafe.com/mcp --header "X-API-Key: <X_API_KEY>"
~/.cursor/mcp.json
{
  "mcpServers": {
    "isipsafe": {
      "url": "https://isipsafe.com/mcp",
      "headers": {
        "X-API-Key": "<X_API_KEY>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "isipsafe": {
      "type": "http",
      "url": "https://isipsafe.com/mcp",
      "headers": {
        "X-API-Key": "<X_API_KEY>"
      }
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://isipsafe.com/mcp

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools 12 found in our last check

  • check_ip

    Reputation of one IPv4 or IPv6 address: abuse confidence score (0-100, 75+ is on the blocklist), number of reports and distinct reporters, attack categories, country, network owner (ASN), Tor exit status and a link to its page. Set verbose to include the latest reports with thei…

  • get_reports

    The individual abuse reports filed against one address, newest first, with time, categories, comment (usually log lines) and reporter. Paginated.

  • check_network

    Every reported address inside a CIDR block (IPv4 up to /16, IPv6 up to /48), with score, report count and last report time, plus the network's owner. Use it to judge a whole hosting range or subnet.

  • report_ip

    File an abuse report against an address that attacked a system you run. Needs an API key. Use category codes from list_categories (e.g. ssh,brute-force) and put the evidence (log lines, never personal data) in the comment. Each reporter can report the same address once per 15 mi…

  • get_blocklist

    The highest-confidence abusive addresses right now, best first, with score, country and categories. Needs an API key and counts as one blocklist download. For a firewall-ready file, point the firewall at the blocklist URL instead (see the integrations).

  • list_categories

    All attack categories with their code, numeric ID, group and when to use them. Use the codes with report_ip.

  • get_statistics

    What the database sees right now: reports in the last 24 hours, addresses on the blocklist, and over the last 30 days the top attack categories, countries, networks and highest-scoring addresses.

  • get_today_news

    Today's threat news from the last 24 hours: the countries the most reported attacks come from, the networks (ASNs) behind them, the attack techniques (categories) reported most, and the top 10 malicious IP addresses reported today, highest score first. Use it for a daily briefin…

  • analyze_logs

    Find malicious traffic in logs. Pass raw log lines from any source (nginx/Apache/IIS access logs, sshd/auth.log, syslog, firewall such as iptables/UFW/pfSense/ASA, mail servers, Windows events as text, CEF, JSON lines from a SIEM or cloud, CSV); every IPv4/IPv6 address is extrac…

  • get_country_report

    How many addresses in a country were reported in the last 30 days, how many are on the blocklist, the most reported addresses there, and the networks and attack categories behind them.

  • get_network_report

    Abuse reported against one autonomous system in the last 30 days: number of reported and blocklisted addresses, the worst addresses, attack categories and countries. Useful to judge a hosting provider or ISP.

  • about_isipsafe

    Explains isIPsafe itself. Use it for any question about the product rather than guessing: what it is and who it is for, its mission and aims, how reports and the confidence score work, plans, pricing and limits, how to get started, how to get an address delisted, privacy, and wh…

Headers

NameDescription
X-API-Key
Optional, secret
isIPsafe API key. Optional for lookups, needed to report IPs. Get one at https://isipsafe.com/account

Details

Endpointhttps://isipsafe.com/mcp (Streamable HTTP)
First published3 Nov 2026
Last updated3 Nov 2026
Registry namecom.isipsafe/isipsafe

More data and analytics servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.