ipinfo

v0.1.0Verified publisher

Looks up an IP address in IPinfo: host name, location, time zone, network owner and ASN, and whether it is anycast

Run

TerminalAgent

Through ot mcp, an agent calls run_tool with this; ot asks you before anything that goes online or touches a target. Set it up: ot mcp install claude (or cursor, vscode, codex, gemini).

{"tool":"osintverse-community/ipinfo","target":"8.8.8.8","input_type":"ip"}

Or just say: "Run osintverse-community/ipinfo on 8.8.8.8 with OTInstaller." The registry's read-only MCP server at api.otinstaller.com/mcp can find tools without installing anything.

ot run osintverse-community/ipinfo ip:8.8.8.8 --format table

ot install osintverse-community/ipinfo

Docker image in a read-only container · talks to ipinfo.io · no key · up to 1 min. The first ot run installs the tool after asking once. The example value is the registry's own test input, so this command has run. Drop --format table for JSON.

Don't have ot? Install it in one line

macOS / LinuxWindows

curl -fsSL https://get.otinstaller.com/ot | sh

What this script does

Downloads the latest ot release for your machine from GitHub Releases.
Checks its SHA-256 against checksums.txt, and the Ed25519 signature on that file against the key built into the script.
Puts ot in /usr/local/bin or ~/.local/bin. Nothing else is written. Read the script.

irm https://get.otinstaller.com/ot.ps1 | iex

What this script does

Downloads the latest ot release for your machine from GitHub Releases.
Checks its SHA-256 against checksums.txt, and the Ed25519 signature on that file against the key built into the script.
Puts ot in %LOCALAPPDATA%\Programs\ot, and adds it to your PATH. Nothing else is written. Read the script.

Evidence

Security tab →

Pinnedimage sha256:b6d9c720…bca973. The same bytes on every install; ot pulls by digest, never by tag.
Signedby https://github.com/osintverse-community/ipinfo/.github/workflows/otinstaller-release.yml@refs/heads/main via token.actions.githubusercontent.com, verified by the registry on 24 Oct 2026. ot checks the same identity before every install and refuses another signer.
Scanned24 Oct 2026: 0 critical, 44 high, 63 medium, 62 low vulnerabilities; 0 embedded secrets, 0 malware heuristics; SBOM with 105 packages.
Workssmoke test passed on 24 Oct 2026 (exit 0 in 3.3 s, offline sandbox); the nightly health check has not run yet.
Backed upa copy of this image is on the registry's mirror. If the original registry refuses it, ot pulls the same digest from the mirror and checks the same signature.
Reviewedosintverse-community is a verified publisher: the registry confirmed who runs it, and a person reviewed its first release against the acceptable-use rules.

From the community

Issues →

Not health-checked yet; 0.1.0 came out today; nobody has said yet whether it works.

0.1.0 is in its first week. Nobody has said whether it works yet.

Used 0.1.0?It's broken for me

What you get back

Result envelope →

{
  "envelope": 1,
  "tool": "osintverse-community/ipinfo@0.1.0",
  "runtime": "docker",
  "input": {
    "ip": "8.8.8.8"
  },
  "started_at": "2026-10-24T17:00:29Z",
  "exit_code": 0,
  "entities": [
    {
      "type": "ip",
      "value": "8.8.8.8",
      "source": "ipinfo",
      "confidence": "high",
      "attrs": {
        "hostname": "dns.google",
        "asn": "AS15169",
        "network_owner": "Google LLC",
        "location": "Mountain View, California, United States",
        "timezone": "America/Los_Angeles",
        "anycast": true,
        "link": "https://ipinfo.io/8.8.8.8"
      }
    },
    {
      "type": "domain",
      "value": "dns.google",
      "source": "ipinfo",
      "confidence": "medium",
      "attrs": {
        "relation": "reverse DNS of the address"
      }
    },
    {
      "type": "organization",
      "value": "Google LLC",
      "source": "ipinfo",
      "confidence": "medium",
      "attrs": {
        "role": "network owner",
        "asn": "AS15169"
      }
    },
    {
      "type": "location",
      "value": "Mountain View, California, United States",
      "source": "ipinfo",
      "confidence": "low",
      "attrs": {
        "latitude": "38.0088",
        "longitude": "-122.1175",
        "postal": "94043",
        "basis": "IP geolocation"
      }
    }
  ],
  "warnings": []
}

Recorded from the registry's own run of version 0.1.0 on its test input, 24 Oct 2026. --format table to read it; ot extract and ot auto to continue.

ipinfo

Looks up an IP address in IPinfo: its reverse DNS name, city, region and country with coordinates, time zone, the network that owns it and its ASN, and whether it is anycast. Uses IPinfo's official Python client, ipinfo. Only IPinfo's data is read, so the target is not contacted.

ot run osintverse-community/ipinfo --ip 8.8.8.8

Inputs

Input	Required
`ip`	yes	IPv4 or IPv6 address

Keys

None needed: lookups without a token work at a lower request limit. IPINFO_TOKEN (ot keys set IPINFO_TOKEN), from a free IPinfo account, raises it: https://ipinfo.io/signup. When the limit is reached the tool exits with code 1 and says so.

Notes

A private or reserved address (a "bogon") gives no entities and a note on stderr. The location is where IPinfo places the address, which for networks such as mobile carriers and VPNs can be far from the person using it.

Next steps

Check the address's reputation with osintverse-community/virustotal or osintverse-community/greynoise, or see its services with osintverse-community/censys-host.

Development

pip install ipinfo==5.6.0
python -m unittest
ot validate

Releases are built, signed and published by the otinstaller release workflow (Actions tab, with the version to release).

License

MIT

What next

ipinfo finds ip, domain, organization, location. Tools that take those:

ip → 10 tools domain → 10 tools organization → 6 tools ot auto, with a saved result

Other ip address tools

All ip address tools →

Alternatives to ipinfo that also take an ip address; ot auto runs every installed one on the same value.