whois_ip

MCP tool from Osint MCP Server by badchars

RDAP IP lookup — network name, CIDR, country, entities

How to use it

whois_ip is exposed by the Osint MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the whois_ip tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Osint MCP Server

$npx osint-mcp-server

FULL OSINT MCP SERVER LISTING

Other tools in Osint MCP Server (36)

ASN details + all announced IPv4/IPv6 prefixes

IP prefix/ASN routing lookup with RIR allocation

Prefix details + announcing ASNs

censys_certificates

Certificate search by domain, fingerprint, issuer

censys_host_details

Single host full details with all services

Host search — IPs, services, ports, location, ASN

Search CT logs via crt.sh — subdomain discovery + certificate details

dns_email_security

SPF + DMARC + DKIM analysis with risk scoring and recommendations

Resolve A, AAAA, MX, TXT, NS, SOA, CNAME, SRV records

Reverse DNS (PTR) lookup for an IP address

Recursive SPF include chain resolution with service detection

dns_srv_discover

SRV + CNAME service discovery (Autodiscover, LDAP, SIP, Kerberos, etc.)

dns_wildcard_check

Wildcard DNS detection via random subdomain probe

Batch IP geolocation (up to 100 IPs at once)

IP geolocation: country, city, ISP, ASN, proxy/hosting/VPN detection

hackertarget_aslookup

ASN information lookup

hackertarget_hostsearch

Host/subdomain discovery with resolved IPs

hackertarget_reverseip

Reverse IP lookup — find all domains on an IP

Discover M365 tenant ID, region, and OpenID configuration

Detect auth type (Managed/Federated), federation brand, auth endpoints

osint_domain_recon

Quick recon combining all free sources (DNS + WHOIS + crt.sh + HackerTarget + email security)

osint_list_sources

List all OSINT sources, API key status, and tool counts

shodan_dns_resolve

Bulk hostname-to-IP resolution via Shodan

shodan_exploits

Search public exploit database (PoC, Metasploit modules)

IP details: open ports, services, banners, vulnerabilities, OS, ASN

Search Shodan query language (e.g. apache port:443 country:US)

Historical DNS records with first/last seen dates

Subdomain enumeration (returns FQDNs)

Enhanced WHOIS with registrant/admin/technical contacts

Domain reputation, detection stats, categories, DNS records

IP reputation, detection stats, ASN, network

Subdomain enumeration via VirusTotal

URL scan + malware/phishing analysis

wayback_snapshots

Snapshot history with timestamps and direct archive links

Archived URL discovery — find old endpoints, hidden paths, removed content

RDAP domain lookup — registrar, dates, nameservers, contacts