Tool detail

fraud-ip-reputation

Scores a public IPv4 address's fraud/abuse risk: ASN, hosting/Tor/Spamhaus flags and a reasoned risk score.

Categories: Domains IP

Use when

screen a public IP address for fraud or abuse risk
check if an IP is a Tor exit node, datacenter or on a DROP list

Not for

IPv4 only per the schema description

Inputs

GET query params: ip (string, required, public IPv4), country (string, optional, 2-letter, for geo-mismatch check)

Admitted input schema

{
  "type": "object",
  "properties": {
    "country": {
      "type": "string",
      "minLength": 0,
      "maxLength": 4096,
      "description": "Optional 2-letter country the caller claims the IP is in, for a geo-mismatch check"
    },
    "ip": {
      "type": "string",
      "minLength": 0,
      "maxLength": 4096,
      "description": "Public IPv4 address to screen"
    }
  },
  "required": [
    "ip"
  ],
  "additionalProperties": false
}

Endpoint

Method: GET
URL: https://api.agentstools.dev/fraud/ip

Payment

Protocol: x402
Listed price: $0.005 USDC per call on Base
Payment method: exact
Network: eip155:8453
Asset: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Listed terms are catalog metadata. The caller supplies inputs and calls the tool outside Onelayer. If payment is required, the caller uses a compatible wallet to pay.

Source

Directory: Coinbase x402 Bazaar
Record: GET https://api.agentstools.dev/fraud/ip
Retrieved: 2026-09-30T20:37:07.382Z
Catalog file SHA-256: 6837ccddf886f0007cf3727ea9d27faaa5047b51b4f425345c554ce1c271a524
Catalog built: 2026-09-30T22:31:58.034Z