FernTool IP Lookup

Measured conclusion: Alive, not deep-tested. L2 outcome: not_attempted.

IP lookup with VPN/Tor/datacenter flags, batch lookup, WHOIS (RDAP), DNS, reverse DNS, subnet math.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "FernTool IP Lookup": {
      "url": "https://www.ferntool.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (24)

• get_my_ip

  Return the public IP address (and ISP, ASN, location, timezone) of the caller as seen by FernTool. Note: for remote agents this is the IP of the machine calling the MCP server.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• lookup_ip

  Validate an IPv4/IPv6 address and return its version, scope (public/private/loopback/...), country, ASN and network owner (DB-IP Lite + IPtoASN data).

  Parameters:

  • ip (required) — string — IPv4 or IPv6 address

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• validate_ip

  Check whether a string is a valid IPv4 or IPv6 address and classify it.

  Parameters:

  • ip (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• batch_lookup_ip

  Look up 1-100 IPv4/IPv6 addresses at once. Each result has version, scope, country, timezone, ASN, network owner and flags (is_tor, is_datacenter, provider).

  Parameters:

  • ips (required) — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• whois_lookup

  WHOIS via RDAP for a domain (registrar, created/expiry dates, status, nameservers, DNSSEC), an IP address (network name, range, owner org, country, abuse contact) or an ASN like AS13335.

  Parameters:

  • query (required) — string — Domain, IPv4/IPv6 address, or ASN (e.g. AS13335)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• dns_lookup

  Resolve DNS records for a domain via Cloudflare 1.1.1.1 DNS-over-HTTPS. Types: A, AAAA, MX, TXT, NS, CNAME, SOA (default: all).

  Parameters:

  • domain (required) — string
  • types — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• reverse_dns

  Reverse DNS (PTR) lookup for an IPv4/IPv6 address, with forward-confirmation check.

  Parameters:

  • ip (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• subnet_calc

  IPv4/IPv6 CIDR subnet calculator: network, netmask, wildcard, broadcast, first/last usable host, total and usable addresses, block type.

  Parameters:

  • cidr (required) — string — e.g. 192.168.1.0/24 or 2001:db8::/48

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• estimate_ai_cost

  Estimate token count and USD API cost of a text across major AI models (OpenAI GPT, Anthropic Claude, Google Gemini), and whether it fits each context window. Token counts are approximate. Pass text, or tokens directly.

  Parameters:

  • text — string
  • tokens — integer
  • output_tokens — integer — Expected reply length in tokens (default: same as input)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• make_qr_code

  Create a static QR code (never expires) for a URL, Wi-Fi string (WIFI:T:WPA;S:name;P:pass;;), mailto:, tel: or any text up to 2000 characters. Returns an SVG string plus a ferntool.com image URL that renders the same code.

  Parameters:

  • text (required) — string
  • ecc — string — Error correction (default M)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• count_words

  Exactly count words, characters (with and without spaces), sentences and paragraphs in a text, with reading/speaking time and the most repeated words. Use this instead of estimating counts yourself.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_current_time

  Get the exact current date and time (you cannot know it otherwise). Returns Unix seconds and milliseconds, ISO 8601 in UTC and in the requested IANA time zone, weekday, ISO week and day of year.

  Parameters:

  • timezone — string — IANA time zone, e.g. Africa/Johannesburg or America/New_York (default UTC)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• convert_timestamp

  Convert a Unix timestamp (seconds, milliseconds, microseconds or nanoseconds, auto-detected) to a readable date, or a date/time string (e.g. 2026-12-25 09:00, read in the given time zone unless it has its own offset) to a Unix timestamp. Also returns weekday, ISO week and how long ago or until.

  Parameters:

  • value (required) — string — Timestamp like 1760000000 or a date like 2026-12-25T09:00
  • timezone — string — IANA time zone for display and for dates without an offset (default UTC)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• date_calc

  Exact calendar maths. With end: days between two dates (plus weeks, months+days, weekdays Mon-Fri, weekend days). With add_days/add_weeks/add_months/add_years (negative to subtract): the resulting date and weekday; business_days=true skips weekends. Use this instead of counting days yourself.

  Parameters:

  • end — string — YYYY-MM-DD
  • start — string — YYYY-MM-DD (default: today in timezone)
  • add_days — integer
  • timezone — string — IANA zone used for today when start is omitted (default UTC)
  • add_weeks — integer
  • add_years — integer
  • add_months — integer
  • include_end — boolean — Count the end date too (default false)
  • business_days — boolean — add_days counts Monday-Friday only

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• convert_timezone

  Convert a time between time zones with daylight saving applied (you cannot do this reliably yourself). from/to accept IANA zones (Africa/Johannesburg), common abbreviations (SAST, EST, PST, GMT, CET, IST=India, CST=US Central) or big cities. Omit time for now. Returns each local date, time, UTC offset, abbreviation, hour difference and whether it is the next/previous day.

  Parameters:

  • to (required) — array — Target zones
  • from — string — Source zone (default UTC)
  • time — string — e.g. 2026-12-25 09:00, 14:30 or 2:30pm (today in from); omit for now

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• random_number

  Fair, cryptographically secure random integers (you cannot produce real randomness yourself). min and max are inclusive. unique=true for no repeats (raffles, lotto, picking winners). For a coin flip use min 0, max 1; for dice use min 1, max 6.

  Parameters:

  • max — integer — default 100
  • min — integer — default 1
  • sort — string
  • count — integer — default 1
  • unique — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• pick_random

  Fairly pick random winners from a list, shuffle a list, or split people into random even teams, using a cryptographically secure generator (you cannot choose fairly at random yourself). Use for giveaways, raffles, "who goes first", random order or team splits. An item listed twice has twice the chance unless dedupe=true.

  Parameters:

  • items (required) — array — The names or items
  • mode — string — default pick
  • count — integer — How many winners for mode=pick (default 1, never repeats an entry)
  • teams — integer — Number of teams for mode=teams (default 2)
  • dedupe — boolean — Remove duplicate entries first (case-insensitive)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_dns_propagation

  Check whether a DNS change has spread: asks the domain's own authoritative name server (when reachable) and 8 big public resolvers (Cloudflare, Google, OpenDNS, AdGuard, NextDNS, Control D, CleanBrowsing, AliDNS) over DoH, marks which are up to date, and gives the remaining cache time (TTL) of stale answers.

  Parameters:

  • domain (required) — string
  • type — string — default A

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_email_security

  Can someone fake (spoof) email from a domain? Reads SPF (counts the 10 DNS-lookup limit, follows includes), DMARC (policy, pct, reports, inherited from the parent domain) and DKIM keys (common selectors, or the one given), detects the email provider from MX, and returns a plain verdict (protected / partial / unprotected) plus the exact TXT records to add.

  Parameters:

  • domain (required) — string — Domain or email address, e.g. example.com or [email protected]
  • selector — string — Optional DKIM selector, e.g. google or selector1

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_website_status

  Is a website down? Resolves its DNS and loads the URL once (10 s timeout) from FernTool's Cloudflare edge, then returns verdict (up/down), reason (ok, blocked_bot, page_not_found, server_error, timeout, tls, dns_nxdomain...), HTTP status, response time, final URL after redirects and server country/network. One vantage point only; results cached 30 s.

  Parameters:

  • url (required) — string — Website address, e.g. example.com or https://example.com/page

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• trace_redirects

  Where does a link really go? Follows a URL (short links like bit.ly, tracking links, QR code links) hop by hop without a browser: every redirect with status code (301/302/307/308/meta refresh), final URL and page title, plus warning signs (ends on a different site, domain registered < 30 days ago, punycode look-alike name, bare IP, no HTTPS, loops, long chains) and a copy of the final URL with tracking parameters removed. Does not scan pages for malware. Max 10 hops; cached 60 s.

  Parameters:

  • url (required) — string — The link to check, e.g. bit.ly/abc123 or https://example.com/page

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_website_legit

  Is this website legit or a scam? Follows the URL (redirects included) and returns plain-language warning signs: domain age from RDAP (scam shops are usually days or weeks old), look-alike brand names (banks, SARS, couriers, Takealot, PayPal, Apple…), risky domain endings and scam words, look-alike letters, HTTPS, whether the domain receives email and has DMARC. verdict: no_signs, mostly_ok, caution or likely_scam. Warning signs only; not a malware scan.

  Parameters:

  • url (required) — string — Website or link, e.g. example-shop.co.za or https://bit.ly/abc

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• generate_spf_record

  Build one valid SPF TXT record for a domain from the services that send its email (e.g. microsoft365, google, mailchimp, sendgrid, website). Optionally reads the domain's current SPF record and MX first (keeps unknown entries, warns about services it would drop), adds extra IPs/includes, and counts DNS lookups live against the 10-lookup limit. Returns the record, DNS name, lookup count, notes and a starter DMARC record. Service ids: microsoft365, google, zoho, proton, fastmail, icloud, mimecast_za, mimecast, website, mx, shopify, mailchimp, mandrill, brevo, mailerlite, constantcontact, campaignmonitor, mailjet, sendpulse, sendgrid, mailgun, amazonses, postmark, zendesk, freshdesk, helpscout, salesforce.

  Parameters:

  • ips — array
  • domain — string — Optional domain to read the current record from
  • strict — boolean — true = -all, default ~all
  • includes — array
  • services — array — Service ids

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ai_service_status

  Live status of AI services (ChatGPT/OpenAI, Claude, Gemini API, GitHub Copilot, Perplexity, Cohere) read from their official status pages, cached ~60s. level is up, degraded, down or unknown.

  Parameters:

  • service — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.