VPNDetection

VPNDetection tells you what's behind an IP address: a commercial VPN, a residential, datacenter or mobile proxy, a Tor exit, a privacy relay like iCloud Private Relay, a hosting provider or a CDN. Where we know the VPN operator, the answer names it and says when we last saw the address in use. Ask about one address, or hand Claude a whole list, like a signup, login or order export, and it checks them all in one call. IPv4 and IPv6 both work.

How much of each answer you get depends on your plan. The free plan answers whether an address is a VPN. Paid plans add hosting, Tor, relay, CDN and the VPN operator's name, and the higher ones the residential, datacenter and mobile proxy flags. Every lookup result names the fields your plan left out, so Claude can tell a field it didn't get from a "no". Claude can also tell you what your plan includes, how much of its allowance you've used and when it resets.

If your organization licenses our downloadable databases, Claude can list them, show a database's columns, sample rows, size and build date, give you the published checksums to verify a copy, and go through your recent download attempts, refusals included.

You sign in with your VPNDetection account and pick which of your organization's API keys Claude uses. Claude never sees the key: our server uses it on your behalf, and each lookup counts against that key's plan like any other API call. Every tool is read-only, and Claude sends us the addresses and database ids you ask about.

Our classifications come from measurement, published operator data and public registration records. They can be wrong or go stale, so don't make one the only reason to turn someone away.