{ "data": { "a": { "slug": "ipinfo", "name": "IPinfo", "vendor": "IPinfo Inc.", "vendorUrl": "https://ipinfo.io", "kind": "http-api", "category": "security-intelligence", "summary": "IPinfo is an IP address data service from IPinfo Inc. in Seattle. Its API returns geolocation, ASN, privacy and residential proxy signals for an address, with a free Lite tier, paid tiers, a batch endpoint and a hosted MCP server.", "url": "https://www.anchorterminal.com/tools/ipinfo", "markdownUrl": "https://www.anchorterminal.com/tools/ipinfo.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/ipinfo.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/ipinfo.json", "dns": "ipinfo.grade.anchorterminal.com", "repo": "https://github.com/ipinfo/mcp", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://mcp.ipinfo.io/", "packages": [ { "registry": "pypi", "name": "ipinfo-mcp-server" } ], "auth": "mixed", "authNotes": "Access token from the dashboard after a browser signup, sent as a Bearer header, as HTTP Basic (token as username) or as a `token` query parameter. The hosted MCP server at mcp.ipinfo.io uses OAuth with a browser login and short-lived tokens it renews itself, or a Bearer token. No scopes were found; tier access follows the plan.", "pricing": "freemium", "pricingNotes": "Lite is free with unlimited requests and no card, country and ASN only. Core $26 a month for 150,000 requests (city geolocation, privacy flags), Max $163 a month for 250,000 (residential proxy, carrier, accuracy radius), both 17 per cent less yearly. Overage $0.34 and $1.30 per 1,000 requests. Enterprise from 1 million requests a month by sales; database downloads from $1,000 a month by sales.", "priceSummary": "$26 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the OpenAPI document, the pricing page or the MCP server repository (checked 2026-11-03). Overage is billed monthly by card.", "endpoints": [] }, "toolCount": 6, "popularity": { "githubStars": 2, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://ipinfo.io/developers", "llmsTxt": "https://ipinfo.io/developers/llms.txt", "openapi": "https://ipinfo.io/developers/openapi.yaml", "registryName": "io.github.ipinfo/mcp", "capabilities": [ "secintel.ip-enrichment", "secintel.reputation" ], "tags": [ "hosted", "freemium", "no-card", "free-tier", "api-key", "oauth", "mcp", "remote-mcp", "official", "mcp-registry", "openapi", "llms-txt", "security-txt", "batch", "read-only-mode", "python", "typescript", "go", "java", "php", "ruby", "closed-source", "no-status-page" ], "lastRelease": "2026-10-29", "graded": true, "anchor": { "graded": true, "score": 62.7, "grade": "B", "agentReady": false, "rank": 494, "ranked": true, "rankOf": 1349, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 84, "maintenance": 85, "payments": 40, "reliability": 38, "schema": 76, "security": 60, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "A free Lite tier with no request cap, a public OpenAPI document, llms.txt, a batch endpoint of 1,000 lookups and a six-tool hosted MCP server with OAuth. No status page or SLA was found, the only documented error is 429, the token may travel in a query string, and city-level and privacy data need a paid plan.", "bestFor": "An agent that needs to enrich an IP with location, network and anonymiser flags at volume, free for country and ASN, paid for city and privacy signals.", "strengths": [ "Lite tier is free with no daily or monthly limit and no card, and Core overage is priced per 1,000 requests on the public pricing page", "Public OpenAPI 3.0 document with 48 operations, plus llms.txt and llms-full.txt and Markdown twins of every docs page", "Hosted MCP server with OAuth and six read-only tools, in the official MCP registry, with per-session caching and structured error codes", "Batch endpoint takes up to 1,000 lookups per request, and field paths such as /country return one value", "Valid security.txt with a PGP key, a security policy with response times, and official SDKs in eleven languages" ], "weaknesses": [ "No status page, incident history or SLA was found; the terms supply the service as is", "Only 429 is documented as an error response, and no Retry-After or backoff guidance was found", "The token is accepted as a query parameter, and no scoped or read-only tokens were found", "No public changelog or deprecation policy; the legacy API is maintained with no end date", "City geolocation, privacy flags and residential proxy signals need Core or Max, and company, WHOIS and abuse contact data are enterprise only" ], "agentNotes": [ "Call `https://api.ipinfo.io/lite/{ip}` with `Authorization: Bearer` on a free token; `/lookup/{ip}` and `detailed=true` in the MCP tools return ACCESS_DENIED without a paid plan", "Batch up to 1,000 addresses in one POST to `/batch/lite` or `/batch` with `filter=1`; each address counts as one request against the monthly quota", "Append a field path such as `/country` or `/asn` to get a single plain-text value instead of the full object", "On a 429 the monthly plan quota is spent; there is no Retry-After, so stop and report rather than retry", "Treat the data as licensed for internal use; selling or reselling it needs IPinfo's written consent under the terms" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.7 } ], "editorialScores": { "ergonomics": 84, "maintenance": 85, "payments": 40, "reliability": 38, "schema": 76, "security": 60, "transparency": 55 }, "provenanceScore": 85, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "uvx ipinfo-mcp-server", "http": "curl -H \"Authorization: Bearer $IPINFO_TOKEN\" https://api.ipinfo.io/lite/8.8.8.8", "claudeCode": "claude mcp add --transport http ipinfo https://mcp.ipinfo.io/", "config": { "mcpServers": { "ipinfo": { "url": "https://mcp.ipinfo.io/" } } } }, "letme": { "capability": "https://letme.dev/secintel.ip-enrichment", "tool": "https://letme.dev/ipinfo" }, "area": "developer", "unitPrices": [ { "item": "Core, 150,000 requests a month", "unit": "month", "usd": 26, "note": "$310 a year" }, { "item": "Max, 250,000 requests a month", "unit": "month", "usd": 163, "note": "$1,960 a year" }, { "item": "Core overage", "unit": "1k-requests", "usd": 0.34, "note": "$0.000342 a request, billed monthly" }, { "item": "Max overage", "unit": "1k-requests", "usd": 1.3, "note": "$0.001297 a request, billed monthly" } ], "provenance": { "legalEntity": "IPinfo Inc.", "domain": "ipinfo.io", "domainRegistered": "2013-04-23", "endpointOnVendorDomain": true, "terms": "https://ipinfo.io/terms-of-service", "privacy": "https://ipinfo.io/privacy-policy", "statusPage": "", "changelog": "https://github.com/ipinfo/mcp/releases", "securityTxt": "valid", "checked": "2026-11-03", "notes": [ "The terms, last updated 3 June 2024, name IPinfo Inc. under Washington law with JAMS arbitration in King County. The privacy policy, effective 29 October 2026, gives a Seattle business address and names the processors.", "The terms forbid robots, spiders or any automated program to retrieve, index, scrape or data-mine the site. Public pages were read for this listing and the clause is recorded as a fact.", "ipinfo.io/robots.txt disallows the data endpoints (paths ending in json, ip, hostname, city and the other field names), URLs with a colon, token and callback parameters, /case-studies/ and /probenet/live/. None was fetched; the docs and OpenAPI document were read instead.", "No status page was found. status.ipinfo.io does not resolve and the site links none.", "The changelog link is the MCP server's GitHub releases. No changelog for the REST API was found.", "security.txt at /.well-known/security.txt is valid until 21 August 2027 with a PGP key. RDAP at Identity Digital gives a registration date of 23 April 2013." ], "score": 85 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/ipinfo.json", "live": { "slug": "ipinfo", "probe": { "target": "https://mcp.ipinfo.io/", "method": "get", "lastAt": "2026-11-04T21:27:55.175680565Z", "lastOk": true, "lastStatus": 200, "lastMs": 141, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 155, "p95ms24h": 410, "samples24h": 62, "samples30d": 62, "days": [ { "date": "2026-11-04", "probes": 62, "ok": 62 } ] }, "versions": [ { "registry": "github", "name": "ipinfo/mcp", "version": "v0.2.3", "released": "2026-10-29", "seenAt": "2026-11-04T20:26:26.080174035Z" }, { "registry": "mcp-registry", "name": "io.github.ipinfo/mcp", "version": "0.2.3", "seenAt": "2026-11-04T17:11:44.552009456Z" }, { "registry": "pypi", "name": "ipinfo-mcp-server", "version": "0.2.3", "released": "2026-10-29", "seenAt": "2026-11-04T20:26:25.272903794Z" } ], "githubStars": 2, "pypiWeekly": 264, "securityTxt": { "url": "https://ipinfo.io/.well-known/security.txt", "state": "valid", "expires": "2027-08-21T00:00:00.000Z", "checkedAt": "2026-11-04T15:53:37.079212393Z" }, "updatedAt": "2026-11-04T21:27:55.175680565Z" } }, "answer": "IPinfo scores 62.7 (B) on agent readiness against Shodan's 39.5 (E), and leads in 5 of 7 scored categories.", "b": { "slug": "shodan", "name": "Shodan", "vendor": "Shodan", "vendorUrl": "https://www.shodan.io", "kind": "http-api", "category": "security-intelligence", "summary": "Shodan is a search engine for internet-connected devices. Its REST API returns the open ports, banners, certificates and known vulnerabilities of an IP address, searches the index by filter, scans ranges on demand and monitors networks for change.", "url": "https://www.anchorterminal.com/tools/shodan", "markdownUrl": "https://www.anchorterminal.com/tools/shodan.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/shodan.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/shodan.json", "dns": "shodan.grade.anchorterminal.com", "repo": "https://github.com/achillean/shodan-python", "license": "Proprietary service. The official Python library and CLI in achillean/shodan-python are MIT", "transports": [ "http" ], "remoteUrl": "https://api.shodan.io", "packages": [ { "registry": "pypi", "name": "shodan" } ], "auth": "api-key", "authNotes": "One API key per account, shown after a browser signup for a free account. Every documented call sends it as `key=` in the query string, the only method the API reference and the OpenAPI document show. No scopes, no read-only keys and no header option were found. The free API plan allows unfiltered searches and counts; host lookups need at least a one-time Membership, and scanning needs a plan with scan credits (checked 2026-11-03).", "pricing": "freemium", "pricingNotes": "Free account with a free API plan. Membership $49 one time (100 query and 100 scan credits a month, 16 monitored IPs). Freelancer $69 a month (10,000 query credits, 5,120 scan credits), Small Business $359 (200,000 and 65,536), Corporate $1,099 (unlimited query credits, 327,680 scan credits), Enterprise by contact. One query credit is 100 results of a filtered or paged search, one scan credit is one IP. All API plans are limited to 1 request a second (https://account.shodan.io/billing). InternetDB and CVEDB are keyless and free for non-commercial use.", "priceSummary": "$49 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API reference, the OpenAPI document, the billing page or the help centre (checked 2026-11-03). Plans are bought in a browser at account.shodan.io.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 3463, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://developer.shodan.io/api", "openapi": "https://developer.shodan.io/api/openapi.json", "capabilities": [ "secintel.exposure", "secintel.ip-enrichment", "secintel.dns", "secintel.indicators" ], "tags": [ "hosted", "freemium", "api-key", "free-tier", "openapi", "python", "cli", "security" ], "lastRelease": "2023-12-17", "graded": true, "anchor": { "graded": true, "score": 39.5, "grade": "E", "agentReady": false, "rank": 1218, "ranked": true, "rankOf": 1349, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 64, "maintenance": 16, "payments": 40, "reliability": 40, "schema": 46, "security": 19, "transparency": 44 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "One GET endpoint per job returns ports, banners and vulnerabilities for an IP, with `minify` and `fields` to trim responses and public plan prices from a $49 one-time Membership. The key travels only in the query string with no scopes, 429 handling is undocumented, the terms were unreadable and the official library's last release was December 2023.", "bestFor": "An agent that needs to know what is exposed on an IP or a range, which ports, products and CVEs, and to watch a network for change.", "strengths": [ "Host lookup returns ports, banners, certificates, hostnames, tags and known CVEs for an IP, with `history=true` for every banner ever seen", "`minify` on host lookups and search, and `fields` on search, cut responses to the fields an agent needs; results page 100 at a time", "Public OpenAPI 3.0.0 document and an API reference with example requests and responses for all 44 operations", "Plan prices and credit quotas published without a login, from a $49 one-time Membership to $1,099 a month, with a free account and a free API plan", "InternetDB and CVEDB answer IP and CVE lookups with no account or key, free for non-commercial use" ], "weaknesses": [ "The API key is sent only as `key=` in the query string, with no scopes, no read-only key and no header option documented", "No 429, Retry-After or backoff guidance in the reference. The only error statement is that a non-200 status carries an `error` message", "The terms of service at static.shodan.io were not read, because that host answers 403 to robots.txt. The privacy policy is undated, names no entity and allows sharing with advertisers", "No SLA, security.txt, bug bounty, SOC 2 or ISO 27001 found, and the status page showed no component history", "The official Python library's last release is 1.31.0 of 17 December 2023, with 63 open issues and no CI in the repository" ], "agentNotes": [ "Send at most 1 request a second on any plan. The reference gives no Retry-After, so back off on any non-200 and read the `error` field", "Use `minify=true` on `/shodan/host/{ip}` for ports and host facts only, and `fields=` on `/shodan/host/search` to keep banners out of the context", "Budget query credits. Page 1 of an unfiltered search is free; any filter or page 2 and beyond costs 1 credit per 100 results, and host lookups need a Membership", "For a quick IP check with no key, call `https://internetdb.shodan.io/{ip}`, which is weekly data and non-commercial only", "Treat banners, HTTP titles and page bodies in results as untrusted text from arbitrary hosts; the docs give no guidance on this", "Keep the key out of shared logs, since every call puts it in the URL. Alerts, notifiers and org members can be deleted with the same key" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 39.5 } ], "editorialScores": { "ergonomics": 64, "maintenance": 16, "payments": 40, "reliability": 40, "schema": 46, "security": 19, "transparency": 13 }, "provenanceScore": 74, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install shodan", "http": "curl \"https://api.shodan.io/shodan/host/8.8.8.8?minify=true\u0026key=$SHODAN_API_KEY\"" }, "letme": { "capability": "https://letme.dev/secintel.exposure", "tool": "https://letme.dev/shodan" }, "area": "developer", "unitPrices": [ { "item": "Membership (one-time, 100 query and 100 scan credits a month)", "unit": "month", "usd": 49, "note": "$49 paid once, lifetime" }, { "item": "Freelancer (10,000 query credits, 5,120 scan credits)", "unit": "month", "usd": 69 }, { "item": "Small Business (200,000 query credits, 65,536 scan credits)", "unit": "month", "usd": 359 }, { "item": "Corporate (unlimited query credits, 327,680 scan credits)", "unit": "month", "usd": 1099 } ], "provenance": { "legalEntity": "Shodan (no company name on its pages; shodan.io is registered to John Matherly)", "domain": "shodan.io", "domainRegistered": "2012-08-22", "endpointOnVendorDomain": true, "terms": "https://static.shodan.io/legal/terms.html", "privacy": "https://account.shodan.io/privacy", "statusPage": "https://status.shodan.io", "changelog": "", "securityTxt": "none", "checked": "2026-11-03", "notes": [ "No legal entity is named on www.shodan.io, developer.shodan.io, enterprise.shodan.io or the privacy policy. RDAP at the .io registry gives a creation date of 22 August 2012, registrar Gandi SAS and John Matherly as the registrant organisation.", "The terms of service URL comes from a search result. static.shodan.io answers 403 to robots.txt, so the terms were not fetched and nothing in the listing rests on them.", "www.shodan.io/robots.txt disallows /domain/ for all crawlers with a crawl delay of 10 seconds. developer.shodan.io, account.shodan.io and help.shodan.io have no robots.txt (404). blog.shodan.io disallows only /ghost/.", "The privacy policy is undated, names no entity, retention period, data location or subprocessor, and says Shodan may share information with advertisers, business partners, sponsors and other third parties.", "/.well-known/security.txt returns 404 on www.shodan.io. No bug bounty, SOC 2 or ISO 27001 found on the pages read.", "No API changelog found. blog.shodan.io is the only dated record of changes, and its newest post is 7 August 2024." ], "score": 74 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/shodan.json", "live": { "slug": "shodan", "probe": { "target": "https://api.shodan.io", "method": "get", "lastAt": "2026-11-04T21:28:12.712911599Z", "lastOk": true, "lastStatus": 404, "lastMs": 245, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 231, "p95ms24h": 355, "samples24h": 62, "samples30d": 62, "days": [ { "date": "2026-11-04", "probes": 62, "ok": 62 } ] }, "vendorStatus": { "page": "https://status.shodan.io", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-04T21:26:45.492889572Z" }, "versions": [ { "registry": "github", "name": "achillean/shodan-python", "version": "1.28.0", "released": "2022-07-09", "seenAt": "2026-11-04T20:54:46.879651275Z" }, { "registry": "pypi", "name": "shodan", "version": "1.31.0", "released": "2023-12-17", "seenAt": "2026-11-04T20:54:46.658127963Z" } ], "githubStars": 3466, "pypiWeekly": 132377, "securityTxt": { "url": "https://shodan.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-04T15:54:49.622046628Z" }, "updatedAt": "2026-11-04T21:28:12.712911599Z" } }, "edges": [ { "by": 69, "category": "maintenance", "leads": "ipinfo", "name": "Maintenance \u0026 community", "reasons": { "a": "Read as a closed service with an official MCP server and SDKs. MCP server v0.2.3 on 29 October 2026, a commit on 3 November, and SDK repositories pushed in October and November (30). Eight MCP releases since 8 September 2026, v0.1.12 to v0.2.3 (20). GitHub releases for the MCP server, a community forum, a help centre and a support form, but no changelog for the API and GitHub issue pages could not be read (10 of 15). The MCP server is in the official registry as io.github.ipinfo/mcp and the SDKs are official (15). The MCP package has tests, CI with pinned actions, CodeQL and Scorecard workflows and a lock file (10). 30 + 20 + 10 + 15 + 10 = 85.", "b": "No dated API change found. The blog's newest post is 7 August 2024, and the official Python library `shodan` 1.31.0 was published on 17 December 2023 with the repository's last push on 5 August 2024 (0 of 30). No releases or dated changelog entries in the last 90 days (0 of 20). 63 open issues on the Python repository with no push since August 2024; a support email and a help centre exist (5 of 25). The official Python SDK still installs but is two years old, and the other clients are community work (8 of 15). The repository has no CI configuration and no CHANGELOG entry since 1.28.0 of July 2022 (3 of 10). 0 + 0 + 5 + 8 + 3 = 16." }, "scores": { "a": 85, "b": 16 } }, { "by": 41, "category": "security", "leads": "ipinfo", "name": "Security \u0026 auth", "reasons": { "a": "One access token per account, accepted as a Bearer header, HTTP Basic or a token query parameter, with no scopes found; the hosted MCP server adds OAuth with short-lived tokens (20 less 10 for the query string, plus 4 for OAuth on the MCP server, so 14). Every endpoint is a read and tools return ACCESS_DENIED outside the plan, but there is no read-only or restricted token (16 of 20). Responses are structured network data rather than third-party free text (10 of 15). The dashboard shows request graphs and lookup history per the pricing page, with no per-call log documented (8 of 15). security.txt valid until 21 August 2027 with a PGP key, a SECURITY.md with 2-day acknowledgement and a 90-day disclosure window, no bug bounty or certification found beyond a bank-grade claim (12 of 20). 14 + 16 + 10 + 8 + 12 = 60.", "b": "One key per account with no scopes, sent as `key=` in the query string on every documented call and in the OpenAPI document, with no header option. Read as a plain key, the way the Alpha Vantage listing was read, less 10 for the query string (10 of 30). No read-only key or least-privilege mode; the free plan's limits are quotas, not scopes, and alerts, notifiers and org members can be deleted with the same key and no confirmation (3 of 20). Results carry banners, HTTP titles and page bodies collected from arbitrary hosts, and no guidance on treating them as untrusted was found (3 of 15). `/api-info` reports the plan and credits, and no call log for the key holder was found (3 of 15). security.txt returns 404 on www.shodan.io, and no bug bounty, disclosure policy, SOC 2 or ISO 27001 was found on the pages read (0 of 20). 10 + 3 + 3 + 3 + 0 = 19." }, "scores": { "a": 60, "b": 19 } }, { "by": 30, "category": "schema", "leads": "ipinfo", "name": "Schema \u0026 documentation", "reasons": { "a": "The surface graded is the REST API, with the hosted MCP server noted. A public OpenAPI 3.0 document with 48 operations, and the MCP tools carry JSON Schema inputs (25). llms.txt and llms-full.txt, and every developer page is served as Markdown (10). Each tier page says what it returns and which plan unlocks it, and the MCP tool descriptions say which tiers each option needs, with little on when not to call (14 of 20). Schemas and examples on most responses, path parameters typed, but 401 is undocumented and some operations lack the 429 response (11 of 15). Examples in several languages on every page; only 429 is documented as an error, with no error body shape (9 of 15). A new API system since 2025 with the legacy one kept, but no public changelog, no version in the path and the OpenAPI document at 1.0.0 (7 of 15). 25 + 10 + 14 + 11 + 9 + 7 = 76.", "b": "The surface graded is the REST API at api.shodan.io. An OpenAPI 3.0.0 document at developer.shodan.io/api/openapi.json covers 37 paths and 44 operations, but declares no securitySchemes, no enums and a non-200 response on one operation only (15 of 25). No llms.txt on developer.shodan.io or www.shodan.io, both 404, and no Markdown docs served for agents (0 of 10). Every operation carries a description, and the reference says which calls cost credits and which plans can scan, with little on when not to use a call (12 of 20). Required flags on the key and path parameters, with `facets`, `query` and `fields` as free strings and no enums or constraints (7 of 15). Example requests and responses for every endpoint in the reference, and errors documented only as a non-200 status with an `error` field (9 of 15). No version in the path, the OpenAPI document says 1.0.0, and the only dated record of changes is the blog, whose newest post is 7 August 2024 (3 of 15). 15 + 0 + 12 + 7 + 9 + 3 = 46." }, "scores": { "a": 76, "b": 46 } }, { "by": 26, "category": "transparency", "leads": "ipinfo", "name": "Transparency \u0026 trust", "reasons": { "a": "A closed service with clear terms naming IPinfo Inc. and the governing law, with the MCP server and SDKs under Apache-2.0 (17 of 30). The privacy policy of 29 October 2026 lists processors, links a DPA and says data is kept as long as needed, with no periods (16 of 30). No deprecation policy; the legacy API is maintained for existing users with no end date (6 of 20). Processors named and hosting in the United States (16 of 20). 17 + 16 + 6 + 16 = 55.", "b": "Editorial half. A closed service whose terms at static.shodan.io/legal/terms.html were not read, because that host answers 403 to robots.txt, so their clarity can't be assessed; the Python library is MIT (5 of 30). The privacy policy at account.shodan.io/privacy carries no date, names no legal entity, retention period, data location or subprocessor, and says Shodan may share information with advertisers, business partners, sponsors and other third parties (5 of 30). The help centre says export credits are deprecated and no longer sold, with no date; no deprecation policy found (3 of 20). No subprocessors or data locations disclosed (0 of 20). 5 + 5 + 3 + 0 = 13." }, "scores": { "a": 70, "b": 44 } }, { "by": 20, "category": "ergonomics", "leads": "ipinfo", "name": "Agent ergonomics", "reasons": { "a": "Field paths such as /country return one value, the Lite and lookup objects are small, and the MCP server has six compact tools with a per-session cache (23 of 25). Batch takes up to 1,000 lookups with filter=1 to drop empty results; no pagination is needed on single lookups, and ASN and range responses have no size control (16 of 20). The only documented error is 429; the MCP server returns coded errors with a message and a suggestion (12 of 20). Every call is a read, batch is a read over POST, and the MCP tools carry tool annotations (18 of 20). One parameter per call, sensible defaults and official SDKs in eleven languages (15). 23 + 16 + 12 + 18 + 15 = 84.", "b": "`minify` on host lookups drops banners and returns ports and host facts, `minify` on search (on by default) truncates large fields and `fields` selects which fields come back, so an agent can size a response (20 of 25). `page` with 100 results a page, `facets` for summaries, `count` for a free total, and the whole filter language of the search engine (18 of 20). Errors are a non-200 status and a short message such as Invalid IP, with no code list to branch on (8 of 20). Most calls are GET reads. Alerts, notifiers, scans and org members are written with POST, PUT and DELETE and no idempotency key, and nothing marks a destructive call (10 of 20). Few required parameters and sensible defaults, but only one official SDK, the Python library, with the other twelve languages community work (8 of 15). 20 + 18 + 8 + 10 + 8 = 64." }, "scores": { "a": 84, "b": 64 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "IPinfo Inc.", "b": "Shodan", "name": "Vendor" }, { "a": "https://mcp.ipinfo.io/", "b": "https://api.shodan.io", "name": "Hosted endpoint" }, { "a": "Streamable HTTP, stdio", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "Proprietary service. The official Python library and CLI in achillean/shodan-python are MIT", "name": "Licence" }, { "a": "6", "b": "none", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "io.github.ipinfo/mcp", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-29", "b": "2023-12-17", "name": "Last release" }, { "a": "2024-06-03", "b": "no date given", "name": "Terms last updated" }, { "a": "2026-10-29", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "2 stars", "b": "3.5k stars", "name": "Popularity" } ], "faq": [ { "answer": "IPinfo scores 62.7 (B) on agent readiness against Shodan's 39.5 (E), and leads in 5 of 7 scored categories.", "question": "Which is better for AI agents, IPinfo or Shodan?" }, { "answer": "IPinfo takes an API key or an OAuth sign-in. Shodan needs an API key.", "question": "Do IPinfo and Shodan need an API key?" }, { "answer": "Yes. IPinfo has a hosted endpoint at https://mcp.ipinfo.io/ and Shodan at https://api.shodan.io.", "question": "Can an agent call IPinfo and Shodan without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 76 against 46", "Agent ergonomics, 84 against 64", "Security \u0026 auth, 60 against 19", "Maintenance \u0026 community, 85 against 16", "Transparency \u0026 trust, 70 against 44" ], "also": [ "Runs on your own machine", "Free to start without a card" ], "goodFor": "An agent that needs to enrich an IP with location, network and anonymiser flags at volume, free for country and ASN, paid for city and privacy signals.", "slug": "ipinfo", "watchFor": "No status page, incident history or SLA was found; the terms supply the service as is" }, { "aheadOn": null, "also": null, "goodFor": "An agent that needs to know what is exposed on an IP or a range, which ports, products and CVEs, and to watch a network for change.", "slug": "shodan", "watchFor": "The API key is sent only as `key=` in the query string, with no scopes, no read-only key and no header option documented" } ], "history": null, "job": { "capability": "secintel.ip-enrichment", "name": "Secintel ip enrichment" }, "others": [ { "json": "https://www.anchorterminal.com/compare/abuseipdb-vs-ipinfo.json", "title": "AbuseIPDB vs IPinfo", "url": "https://www.anchorterminal.com/compare/abuseipdb-vs-ipinfo" }, { "json": "https://www.anchorterminal.com/compare/greynoise-vs-ipinfo.json", "title": "GreyNoise vs IPinfo", "url": "https://www.anchorterminal.com/compare/greynoise-vs-ipinfo" }, { "json": "https://www.anchorterminal.com/compare/ipinfo-vs-virustotal.json", "title": "IPinfo vs VirusTotal", "url": "https://www.anchorterminal.com/compare/ipinfo-vs-virustotal" }, { "json": "https://www.anchorterminal.com/compare/censys-vs-ipinfo.json", "title": "Censys vs IPinfo", "url": "https://www.anchorterminal.com/compare/censys-vs-ipinfo" }, { "json": "https://www.anchorterminal.com/compare/greynoise-vs-shodan.json", "title": "GreyNoise vs Shodan", "url": "https://www.anchorterminal.com/compare/greynoise-vs-shodan" }, { "json": "https://www.anchorterminal.com/compare/ipinfo-vs-pulsedive.json", "title": "IPinfo vs Pulsedive", "url": "https://www.anchorterminal.com/compare/ipinfo-vs-pulsedive" }, { "json": "https://www.anchorterminal.com/compare/ipinfo-vs-securitytrails.json", "title": "IPinfo vs SecurityTrails", "url": "https://www.anchorterminal.com/compare/ipinfo-vs-securitytrails" }, { "json": "https://www.anchorterminal.com/compare/ipinfo-vs-whoisxml-api.json", "title": "IPinfo vs WhoisXML API", "url": "https://www.anchorterminal.com/compare/ipinfo-vs-whoisxml-api" }, { "json": "https://www.anchorterminal.com/compare/securitytrails-vs-shodan.json", "title": "SecurityTrails vs Shodan", "url": "https://www.anchorterminal.com/compare/securitytrails-vs-shodan" }, { "json": "https://www.anchorterminal.com/compare/shodan-vs-whoisxml-api.json", "title": "Shodan vs WhoisXML API", "url": "https://www.anchorterminal.com/compare/shodan-vs-whoisxml-api" }, { "json": "https://www.anchorterminal.com/compare/abuseipdb-vs-shodan.json", "title": "AbuseIPDB vs Shodan", "url": "https://www.anchorterminal.com/compare/abuseipdb-vs-shodan" }, { "json": "https://www.anchorterminal.com/compare/pulsedive-vs-shodan.json", "title": "Pulsedive vs Shodan", "url": "https://www.anchorterminal.com/compare/pulsedive-vs-shodan" }, { "json": "https://www.anchorterminal.com/compare/censys-vs-shodan.json", "title": "Censys vs Shodan", "url": "https://www.anchorterminal.com/compare/censys-vs-shodan" } ], "panel": null, "scores": [ { "by": 2, "edge": "shodan", "ipinfo": 38, "key": "reliability", "name": "Reliability", "shodan": 40, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 30, "edge": "ipinfo", "ipinfo": 76, "key": "schema", "name": "Schema \u0026 documentation", "shodan": 46, "weight": 13 }, { "by": 20, "edge": "ipinfo", "ipinfo": 84, "key": "ergonomics", "name": "Agent ergonomics", "shodan": 64, "weight": 13 }, { "by": 41, "edge": "ipinfo", "ipinfo": 60, "key": "security", "name": "Security \u0026 auth", "shodan": 19, "weight": 14 }, { "by": 0, "edge": "", "ipinfo": 40, "key": "payments", "name": "Payments \u0026 pricing", "shodan": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 69, "edge": "ipinfo", "ipinfo": 85, "key": "maintenance", "name": "Maintenance \u0026 community", "shodan": 16, "weight": 7 }, { "by": 26, "edge": "ipinfo", "ipinfo": 70, "key": "transparency", "name": "Transparency \u0026 trust", "shodan": 44, "weight": 7 } ], "summary": "IPinfo scores 62.7 (B) on agent readiness against Shodan's 39.5 (E), and leads in 5 of 7 scored categories. Both do secintel ip enrichment.", "tasks": null, "tutorials": [], "verdicts": { "ipinfo": "A free Lite tier with no request cap, a public OpenAPI document, llms.txt, a batch endpoint of 1,000 lookups and a six-tool hosted MCP server with OAuth. No status page or SLA was found, the only documented error is 429, the token may travel in a query string, and city-level and privacy data need a paid plan.", "shodan": "One GET endpoint per job returns ports, banners and vulnerabilities for an IP, with `minify` and `fields` to trim responses and public plan prices from a $49 one-time Membership. The key travels only in the query string with no scopes, 429 handling is undocumented, the terms were unreadable and the official library's last release was December 2023." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/ipinfo-vs-shodan", "json": "https://www.anchorterminal.com/compare/ipinfo-vs-shodan.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/ipinfo-vs-shodan.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/ipinfo-vs-shodan.min.md" }, "markdown": "IPinfo scores 62.7 (B) on agent readiness against Shodan's 39.5 (E), and leads in 5 of 7 scored categories. Both do secintel ip enrichment.\n\n- IPinfo: grade B, 62.7/100, rank #494 of 1349. Markdown https://www.anchorterminal.com/tools/ipinfo.md · JSON https://www.anchorterminal.com/api/v1/tools/ipinfo.json\n- Shodan: grade E, 39.5/100, rank #1218 of 1349. Markdown https://www.anchorterminal.com/tools/shodan.md · JSON https://www.anchorterminal.com/api/v1/tools/shodan.json\n- Best threat and security intelligence APIs for AI agents: https://www.anchorterminal.com/best/security-intelligence/index.md\n- All 33 security intel comparisons: https://www.anchorterminal.com/compare/security-intelligence/index.md\n\n## Which one, for what\n\n### IPinfo (B)\n\nGood for: An agent that needs to enrich an IP with location, network and anonymiser flags at volume, free for country and ASN, paid for city and privacy signals.\n\nAhead on:\n- Schema \u0026 documentation, 76 against 46\n- Agent ergonomics, 84 against 64\n- Security \u0026 auth, 60 against 19\n- Maintenance \u0026 community, 85 against 16\n- Transparency \u0026 trust, 70 against 44\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: No status page, incident history or SLA was found; the terms supply the service as is\n\n### Shodan (E)\n\nGood for: An agent that needs to know what is exposed on an IP or a range, which ports, products and CVEs, and to watch a network for change.\n\nWatch for: The API key is sent only as `key=` in the query string, with no scopes, no read-only key and no header option documented\n\n\n## Why the edge\n\n### Maintenance \u0026 community: IPinfo +69\n\n- IPinfo (85): Read as a closed service with an official MCP server and SDKs. MCP server v0.2.3 on 29 October 2026, a commit on 3 November, and SDK repositories pushed in October and November (30). Eight MCP releases since 8 September 2026, v0.1.12 to v0.2.3 (20). GitHub releases for the MCP server, a community forum, a help centre and a support form, but no changelog for the API and GitHub issue pages could not be read (10 of 15). The MCP server is in the official registry as io.github.ipinfo/mcp and the SDKs are official (15). The MCP package has tests, CI with pinned actions, CodeQL and Scorecard workflows and a lock file (10). 30 + 20 + 10 + 15 + 10 = 85.\n- Shodan (16): No dated API change found. The blog's newest post is 7 August 2024, and the official Python library `shodan` 1.31.0 was published on 17 December 2023 with the repository's last push on 5 August 2024 (0 of 30). No releases or dated changelog entries in the last 90 days (0 of 20). 63 open issues on the Python repository with no push since August 2024; a support email and a help centre exist (5 of 25). The official Python SDK still installs but is two years old, and the other clients are community work (8 of 15). The repository has no CI configuration and no CHANGELOG entry since 1.28.0 of July 2022 (3 of 10). 0 + 0 + 5 + 8 + 3 = 16.\n\n### Security \u0026 auth: IPinfo +41\n\n- IPinfo (60): One access token per account, accepted as a Bearer header, HTTP Basic or a token query parameter, with no scopes found; the hosted MCP server adds OAuth with short-lived tokens (20 less 10 for the query string, plus 4 for OAuth on the MCP server, so 14). Every endpoint is a read and tools return ACCESS_DENIED outside the plan, but there is no read-only or restricted token (16 of 20). Responses are structured network data rather than third-party free text (10 of 15). The dashboard shows request graphs and lookup history per the pricing page, with no per-call log documented (8 of 15). security.txt valid until 21 August 2027 with a PGP key, a SECURITY.md with 2-day acknowledgement and a 90-day disclosure window, no bug bounty or certification found beyond a bank-grade claim (12 of 20). 14 + 16 + 10 + 8 + 12 = 60.\n- Shodan (19): One key per account with no scopes, sent as `key=` in the query string on every documented call and in the OpenAPI document, with no header option. Read as a plain key, the way the Alpha Vantage listing was read, less 10 for the query string (10 of 30). No read-only key or least-privilege mode; the free plan's limits are quotas, not scopes, and alerts, notifiers and org members can be deleted with the same key and no confirmation (3 of 20). Results carry banners, HTTP titles and page bodies collected from arbitrary hosts, and no guidance on treating them as untrusted was found (3 of 15). `/api-info` reports the plan and credits, and no call log for the key holder was found (3 of 15). security.txt returns 404 on www.shodan.io, and no bug bounty, disclosure policy, SOC 2 or ISO 27001 was found on the pages read (0 of 20). 10 + 3 + 3 + 3 + 0 = 19.\n\n### Schema \u0026 documentation: IPinfo +30\n\n- IPinfo (76): The surface graded is the REST API, with the hosted MCP server noted. A public OpenAPI 3.0 document with 48 operations, and the MCP tools carry JSON Schema inputs (25). llms.txt and llms-full.txt, and every developer page is served as Markdown (10). Each tier page says what it returns and which plan unlocks it, and the MCP tool descriptions say which tiers each option needs, with little on when not to call (14 of 20). Schemas and examples on most responses, path parameters typed, but 401 is undocumented and some operations lack the 429 response (11 of 15). Examples in several languages on every page; only 429 is documented as an error, with no error body shape (9 of 15). A new API system since 2025 with the legacy one kept, but no public changelog, no version in the path and the OpenAPI document at 1.0.0 (7 of 15). 25 + 10 + 14 + 11 + 9 + 7 = 76.\n- Shodan (46): The surface graded is the REST API at api.shodan.io. An OpenAPI 3.0.0 document at developer.shodan.io/api/openapi.json covers 37 paths and 44 operations, but declares no securitySchemes, no enums and a non-200 response on one operation only (15 of 25). No llms.txt on developer.shodan.io or www.shodan.io, both 404, and no Markdown docs served for agents (0 of 10). Every operation carries a description, and the reference says which calls cost credits and which plans can scan, with little on when not to use a call (12 of 20). Required flags on the key and path parameters, with `facets`, `query` and `fields` as free strings and no enums or constraints (7 of 15). Example requests and responses for every endpoint in the reference, and errors documented only as a non-200 status with an `error` field (9 of 15). No version in the path, the OpenAPI document says 1.0.0, and the only dated record of changes is the blog, whose newest post is 7 August 2024 (3 of 15). 15 + 0 + 12 + 7 + 9 + 3 = 46.\n\n### Transparency \u0026 trust: IPinfo +26\n\n- IPinfo (70): A closed service with clear terms naming IPinfo Inc. and the governing law, with the MCP server and SDKs under Apache-2.0 (17 of 30). The privacy policy of 29 October 2026 lists processors, links a DPA and says data is kept as long as needed, with no periods (16 of 30). No deprecation policy; the legacy API is maintained for existing users with no end date (6 of 20). Processors named and hosting in the United States (16 of 20). 17 + 16 + 6 + 16 = 55.\n- Shodan (44): Editorial half. A closed service whose terms at static.shodan.io/legal/terms.html were not read, because that host answers 403 to robots.txt, so their clarity can't be assessed; the Python library is MIT (5 of 30). The privacy policy at account.shodan.io/privacy carries no date, names no legal entity, retention period, data location or subprocessor, and says Shodan may share information with advertisers, business partners, sponsors and other third parties (5 of 30). The help centre says export credits are deprecated and no longer sold, with no date; no deprecation policy found (3 of 20). No subprocessors or data locations disclosed (0 of 20). 5 + 5 + 3 + 0 = 13.\n\n### Agent ergonomics: IPinfo +20\n\n- IPinfo (84): Field paths such as /country return one value, the Lite and lookup objects are small, and the MCP server has six compact tools with a per-session cache (23 of 25). Batch takes up to 1,000 lookups with filter=1 to drop empty results; no pagination is needed on single lookups, and ASN and range responses have no size control (16 of 20). The only documented error is 429; the MCP server returns coded errors with a message and a suggestion (12 of 20). Every call is a read, batch is a read over POST, and the MCP tools carry tool annotations (18 of 20). One parameter per call, sensible defaults and official SDKs in eleven languages (15). 23 + 16 + 12 + 18 + 15 = 84.\n- Shodan (64): `minify` on host lookups drops banners and returns ports and host facts, `minify` on search (on by default) truncates large fields and `fields` selects which fields come back, so an agent can size a response (20 of 25). `page` with 100 results a page, `facets` for summaries, `count` for a free total, and the whole filter language of the search engine (18 of 20). Errors are a non-200 status and a short message such as Invalid IP, with no code list to branch on (8 of 20). Most calls are GET reads. Alerts, notifiers, scans and org members are written with POST, PUT and DELETE and no idempotency key, and nothing marks a destructive call (10 of 20). Few required parameters and sensible defaults, but only one official SDK, the Python library, with the other twelve languages community work (8 of 15). 20 + 18 + 8 + 10 + 8 = 64.\n\n## Score by category\n\n| Category | Weight | IPinfo | Shodan | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 38 | 40 | Shodan +2 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 76 | 46 | IPinfo +30 |\n| Agent ergonomics | 13% (16.2 this run) | 84 | 64 | IPinfo +20 |\n| Security \u0026 auth | 14% (17.5 this run) | 60 | 19 | IPinfo +41 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 40 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 85 | 16 | IPinfo +69 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 44 | IPinfo +26 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **62.7 · B** | **39.5 · E** | |\n\n## Facts side by side\n\n| Fact | IPinfo | Shodan |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | IPinfo Inc. | Shodan |\n| Hosted endpoint | `https://mcp.ipinfo.io/` | `https://api.shodan.io` |\n| Transports | Streamable HTTP, stdio | HTTP |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | none | Proprietary service. The official Python library and CLI in achillean/shodan-python are MIT |\n| Tools exposed | 6 | none |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | no |\n| MCP registry | `io.github.ipinfo/mcp` | not listed |\n| Last release | 2026-10-29 | 2023-12-17 |\n| Terms last updated | 2024-06-03 | no date given |\n| Privacy policy last updated | 2026-10-29 | no date given |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | yes | yes |\n| Arbitration or class-action waiver | yes | not found in the text |\n| Popularity | 2 stars | 3.5k stars |\n\n## Verdicts\n\n**IPinfo.** A free Lite tier with no request cap, a public OpenAPI document, llms.txt, a batch endpoint of 1,000 lookups and a six-tool hosted MCP server with OAuth. No status page or SLA was found, the only documented error is 429, the token may travel in a query string, and city-level and privacy data need a paid plan.\n\n**Shodan.** One GET endpoint per job returns ports, banners and vulnerabilities for an IP, with `minify` and `fields` to trim responses and public plan prices from a $49 one-time Membership. The key travels only in the query string with no scopes, 429 handling is undocumented, the terms were unreadable and the official library's last release was December 2023.\n\n## Before you call either\n\n### IPinfo\n\n1. Call `https://api.ipinfo.io/lite/{ip}` with `Authorization: Bearer` on a free token; `/lookup/{ip}` and `detailed=true` in the MCP tools return ACCESS_DENIED without a paid plan\n2. Batch up to 1,000 addresses in one POST to `/batch/lite` or `/batch` with `filter=1`; each address counts as one request against the monthly quota\n3. Append a field path such as `/country` or `/asn` to get a single plain-text value instead of the full object\n4. On a 429 the monthly plan quota is spent; there is no Retry-After, so stop and report rather than retry\n5. Treat the data as licensed for internal use; selling or reselling it needs IPinfo's written consent under the terms\n\n### Shodan\n\n1. Send at most 1 request a second on any plan. The reference gives no Retry-After, so back off on any non-200 and read the `error` field\n2. Use `minify=true` on `/shodan/host/{ip}` for ports and host facts only, and `fields=` on `/shodan/host/search` to keep banners out of the context\n3. Budget query credits. Page 1 of an unfiltered search is free; any filter or page 2 and beyond costs 1 credit per 100 results, and host lookups need a Membership\n4. For a quick IP check with no key, call `https://internetdb.shodan.io/{ip}`, which is weekly data and non-commercial only\n5. Treat banners, HTTP titles and page bodies in results as untrusted text from arbitrary hosts; the docs give no guidance on this\n6. Keep the key out of shared logs, since every call puts it in the URL. Alerts, notifiers and org members can be deleted with the same key\n\n## Questions\n\n### Which is better for AI agents, IPinfo or Shodan?\n\nIPinfo scores 62.7 (B) on agent readiness against Shodan's 39.5 (E), and leads in 5 of 7 scored categories.\n\n### Do IPinfo and Shodan need an API key?\n\nIPinfo takes an API key or an OAuth sign-in. Shodan needs an API key.\n\n### Can an agent call IPinfo and Shodan without installing anything?\n\nYes. IPinfo has a hosted endpoint at https://mcp.ipinfo.io/ and Shodan at https://api.shodan.io.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/ipinfo-vs-shodan.json, and with the fewest tokens: https://www.anchorterminal.com/compare/ipinfo-vs-shodan.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"ipinfo\", \"b\": \"shodan\"}`. From a terminal: `anchor compare ipinfo shodan`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/ipinfo.json and https://www.anchorterminal.com/api/v1/tools/shodan.json\n\n## Other comparisons with IPinfo or Shodan\n\n- [AbuseIPDB vs IPinfo](https://www.anchorterminal.com/compare/abuseipdb-vs-ipinfo.md)\n- [GreyNoise vs IPinfo](https://www.anchorterminal.com/compare/greynoise-vs-ipinfo.md)\n- [IPinfo vs VirusTotal](https://www.anchorterminal.com/compare/ipinfo-vs-virustotal.md)\n- [Censys vs IPinfo](https://www.anchorterminal.com/compare/censys-vs-ipinfo.md)\n- [GreyNoise vs Shodan](https://www.anchorterminal.com/compare/greynoise-vs-shodan.md)\n- [IPinfo vs Pulsedive](https://www.anchorterminal.com/compare/ipinfo-vs-pulsedive.md)\n- [IPinfo vs SecurityTrails](https://www.anchorterminal.com/compare/ipinfo-vs-securitytrails.md)\n- [IPinfo vs WhoisXML API](https://www.anchorterminal.com/compare/ipinfo-vs-whoisxml-api.md)\n- [SecurityTrails vs Shodan](https://www.anchorterminal.com/compare/securitytrails-vs-shodan.md)\n- [Shodan vs WhoisXML API](https://www.anchorterminal.com/compare/shodan-vs-whoisxml-api.md)\n- [AbuseIPDB vs Shodan](https://www.anchorterminal.com/compare/abuseipdb-vs-shodan.md)\n- [Pulsedive vs Shodan](https://www.anchorterminal.com/compare/pulsedive-vs-shodan.md)\n- [Censys vs Shodan](https://www.anchorterminal.com/compare/censys-vs-shodan.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "IPinfo vs Shodan", "url": "" } ], "description": "IPinfo scores 62.7 (B) to Shodan's 39.5 (E) for secintel ip enrichment. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "IPinfo B 62.7", "Shodan E 39.5", "scores" ], "h1": "IPinfo vs Shodan", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/ipinfo-vs-shodan", "published": "2026-10-01", "section": "tools", "title": "IPinfo vs Shodan for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-04", "url": "https://www.anchorterminal.com/compare/ipinfo-vs-shodan" }, "tokens": { "markdown": 4100, "slim": 2580 }, "version": 1 }