Hackertarget

liveSecurityDeveloper

HackerTarget IP Tools — DNS and reverse-DNS lookups, passive subdomain search, IP geolocation, ASN and reverse-IP lookups, HTTP header fetches, ping, subnet arithmetic and page-link extraction. Eleven of the fourteen tools need no credential; whois, mtr and traceroute are gated by HackerTarget behind a membership and take the caller's own key as _apiKey.

14tools
0msauth
free tier50 calls/day

Tools

dns_lookup

"Resolve [domain]" / "what IP does [site] point at" / "A records for [X]" — forward DNS lookup via HackerTarget, returning the A/AAAA/MX/NS/SOA records the resolver holds for a hostname. Use to check

No parameters required.

▶Try it
reverse_dns

"What hostname is [IP]" / "reverse DNS for [address]" / "PTR record lookup" — reverse DNS (PTR) lookup via HackerTarget, mapping an IP address back to the hostname its owner published. Use to identify

No parameters required.

▶Try it
mtr

"Network path to [host]" / "where does traffic to [X] slow down" / "per-hop latency" — mtr report via HackerTarget, combining traceroute and ping into a per-hop table of loss and latency measured FROM

No parameters required.

▶Try it
nping

"Is [host] up" / "ping [X]" / "round-trip time to [address]" — ICMP ping via HackerTarget, reporting reachability and round-trip time from HackerTarget's probe host. Use for a liveness check when you

No parameters required.

▶Try it
find_shared_dns

"What else uses this nameserver" / "domains sharing DNS with [X]" — shared-nameserver search via HackerTarget, listing other domains served by the same DNS server. Use to map the infrastructure footpr

No parameters required.

▶Try it
geoip

"Where is [IP] located" / "what country is this address in" / "geolocate an IP" — IP geolocation via HackerTarget, returning country, state/region, city and coordinates for an address. City-level accu

No parameters required.

▶Try it
reverse_ip

"What else is hosted on [IP]" / "other sites on the same server" / "reverse IP lookup" — reverse IP lookup via HackerTarget, listing hostnames known to resolve to one address. Use to spot shared hosti

No parameters required.

▶Try it
as_lookup

"Which ASN owns [IP]" / "what network is this address on" / "who is the upstream provider" — autonomous system lookup via HackerTarget, returning the ASN, the announced prefix and the network's name f

No parameters required.

▶Try it
whois

"Who owns [domain]" / "when does [X] expire" / "whois lookup" / "registrar for [site]" — WHOIS record via HackerTarget for a domain or IP: registrar, creation and expiry dates, nameservers, and whatev

No parameters required.

▶Try it
http_headers

"What headers does [site] return" / "what server runs [X]" / "check the security headers" / "does [site] redirect" — HTTP response headers fetched by HackerTarget, including status line, Server, redir

No parameters required.

▶Try it
traceroute

"Traceroute to [host]" / "what route does traffic take to [X]" / "how many hops to [address]" — traceroute via HackerTarget, listing the routers between HackerTarget's probe host and the target. The p

No parameters required.

▶Try it
subnet_lookup

"What is the range of [CIDR]" / "how many hosts in a /24" / "network and broadcast address for [X]" / "subnet calculator" — subnet arithmetic via HackerTarget, returning network address, broadcast add

No parameters required.

▶Try it
page_links

"What does [page] link to" / "extract every link from [URL]" / "outbound links on a page" — link extraction via HackerTarget, fetching one web page and returning the URLs it links to. Use to map a sit

No parameters required.

▶Try it

Test with curl

The gateway speaks JSON-RPC 2.0 over HTTP POST. You can test any pack directly from the terminal.

List available tools
bash
curl -X POST https://gateway.pipeworx.io/hackertarget/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
Call a tool
bash
curl -X POST https://gateway.pipeworx.io/hackertarget/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"dns_lookup","arguments":{}}}'

Use with the SDK

Install @pipeworx/sdk to call tools from any TypeScript/Node project.

TypeScript
import { Pipeworx } from '@pipeworx/sdk';
const px = new Pipeworx();
const result = await px.call("dns_lookup", {});
ask_pipeworx
// Or ask in plain English:
const answer = await px.ask("hackertarget ip tools — dns and reverse-dns lookups, passive subdomain search, ip geolocation, asn and reverse-ip lookups, http header fetches, ping, subnet arithmetic and page-link extraction");