dead-drop
Security
Ephemeral zero-knowledge encrypted data sharing
IpQuery is a versatile API that provides essential information about an IP address, including geolocation data and VPN detection capabilities. It is designed for developers, enabling them to filter and utilize data points critical for enhancing application security and personalization.
Verified today: 100% uptime
API key
Unconfirmed
HTTPS
Supported
Browser calls
Yes, CORS enabled
Status
Live · 98/100
IP Address API provides programmatic access to ipquery is a versatile api that provides essential information about an ip address, including geolocation data and vpn detection capabilities. it is designed for developers, enabling them to filter and utilize data points critical for enhancing application security and personalization. Delivered over secure HTTPS protocols, it exposes structured endpoints designed to integrate cleanly into modern frontend frameworks, backend microservices, and automated data pipelines without requiring local database provisioning.
Engineers building web dashboards, mobile applications, CLI utilities, or background cron workers in need of reliable security data feeds.
Consuming IP Address API removes the operational overhead of running custom scrapers, orchestrating headless browser fleets, or manually seeding and maintaining a local database. Instead of reverse-engineering volatile DOM layouts or dealing with anti-bot IP blocks, your application connects directly to a standardized JSON interface that supports client-side browser execution out of the box. Dedicated authentication ensures rate quotas and credential tracking per project environment.
Last checked 2026-10-24. Measured independently, not self-reported by the provider.
Practical real-world patterns for integrating IP Address API into software systems.
Embed data and functionality from IP Address API directly into application onboarding, profile enrichment, or reporting dashboards.
Periodically extract updates from IP Address API to generate daily digests, analytics reports, or Slack notifications.
Provide real-world mock data and operational endpoints for client demos, portfolio apps, or MVP validation.
Production-ready starting templates with error handling for IP Address API.
// Authentication requirement is unconfirmed. Check the documentation before relying on this.
// Modern native fetch with error handling
async function callApi() {
try {
const response = await fetch('https://ipquery.io/api/v1/resource', {
method: 'GET',
headers: {
'Authorization': 'Bearer YOUR_TOKEN',
Accept: 'application/json',
},
});
if (!response.ok) {
throw new Error(`HTTP ${response.status}: ${response.statusText}`);
}
const data = await response.json();
console.log('Response payload:', data);
return data;
} catch (error) {
console.error('API request failed:', error);
throw error;
}
}
// callApi();Inspect the expected JSON structure returned by IP Address API.
Authentic sample payload structure to evaluate schema attributes before integration.
{
"status": 200,
"api": "IP Address API",
"endpoint": "/ip-address-api",
"data": {
"id": 101,
"title": "IP Address API Sample Payload",
"description": "IpQuery is a versatile API that provides essential information about an IP address, including geolocation data and VPN detection capabilities. It is designed for developers, enabling them to filter and utilize data points critical for enhancing application security and personalization.",
"verified": true,
"category": "Security",
"updated_at": "2026-10-24T07:39:28.042Z"
},
"meta": {
"response_time_ms": 1685,
"cached": false
}
}Technical factors to keep in mind when integrating IP Address API into production environments.
Avoid triggering rate limits on public feeds by caching response payloads in Redis, Vercel KV, or standard HTTP Cache-Control headers with a 5-to-15 minute TTL.
While no API key is required, public keyless pools often share global rate limits. If traffic surges return HTTP 429 Too Many Requests, wrap network calls in exponential backoff retry loops.
CORS headers are validated and present on responses. You can safely call this endpoint directly from frontend React, Vue, or static HTML pages without an intermediary proxy server.
Always inspect response.ok before executing response.json(). Upstream services returning 4xx or 502 Bad Gateway often serve HTML error pages, which cause syntax errors when parsed as JSON.
Aggregated from one public source (freepublicapis), then normalised and checked by us.
Report an issue with this listing ↗Security
Ephemeral zero-knowledge encrypted data sharing
Security
Check IP addresses against 140+ public threat intelligence blocklists
Security
Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)
Security
U.S. National Vulnerability Database
Security
Security and developer utility API -- malware, vulnerability, and domain checks, no signup
Security
FishFish is an automated service designed to quickly detect and mitigate phishing threats before they can be exploited for malicious purposes. It provides a streamlined solution for identifying harmful resources efficiently.
Answered from what our own scheduled checks found, not from the provider's marketing.
IP Address API is listed in our free catalogue, but it requires some form of authentication, so you will need to register before your first call. Providers frequently reserve higher limits and commercial use for paid plans.
IP Address API requires some form of authentication. Check the provider's documentation for which scheme it expects.
Yes. IP Address API returned CORS headers when we checked it, so a browser will let your page read the response. You can fetch it directly from client-side JavaScript with no proxy and no backend.
Yes, as of 2026-10-24. Our automated check reached IP Address API and recorded a 100% reliability score with a median response time of 1685 ms. We re-check on a schedule, and this page updates with the result.
Yes. IP Address API serves over HTTPS, so you can call it from a secure page without triggering a mixed-content block.