Developers

Free network & DNS API

30 JSON endpoints for DNS, email authentication, TLS and IP lookups. No API key, no signup, no quota beyond a plain per-IP rate limit. CORS is open, so you can call it straight from a browser.

curl "https://ipgaze.com/api/v1/dmarc?domain=example.com"

Response shape

Every endpoint returns the same envelope, so you only write one error path:

{ "ok": true,  "data":  { ... } }
{ "ok": false, "error": "Domain is not valid." }

A failed lookup returns HTTP 400 with the reason; an upstream problem returns 502. Successful responses carry Cache-Control: max-age=60 — these values rarely change minute to minute, so please cache rather than poll.

Rate limit and fair use

60 requests per minute per IP. Exceed it and you get HTTP 429 with a Retry-After header — honour it rather than retrying on a schedule of your own. There is no key to apply for and no paid tier; this runs on one server, and the limit is what keeps it answering for everyone.

If you need sustained volume beyond that, get in touch and say what you are building. That is a conversation, not a sales funnel.

Attribution

The API is free for any use, commercial included. If it powers something public, a visible link back to https://ipgaze.com is appreciated — that is the whole price, and it is what keeps this worth running.

Network data from <a href="https://ipgaze.com">iPGaze</a>

Endpoints

All paths are relative to https://ipgaze.com/api/v1. Every endpoint is a GET with a single required query parameter unless noted. The index endpoint returns this same list as JSON.

DNS

/dns?host=
All common DNS records for a domain (A, AAAA, MX, TXT, NS, CNAME, SOA).
/api/v1/dns?host=example.com
/reverse-dns?ip=
PTR record for an IP address.
/api/v1/reverse-dns?ip=8.8.8.8
/dnssec?host=
DNSSEC chain status and DNSKEY/DS records.
/api/v1/dnssec?host=cloudflare.com
/caa?host=
CAA records — which certificate authorities may issue for the domain.
/api/v1/caa?host=example.com
/soa?host=
SOA record with serial, refresh, retry and expiry values.
/api/v1/soa?host=example.com
/srv?host=
SRV records for a service label.
/api/v1/srv?host=_sip._tcp.example.com
/nameservers?host=
Authoritative nameservers as reported by the parent zone.
/api/v1/nameservers?host=example.com
/dns-report?host=
Combined DNS health report across record types.
/api/v1/dns-report?host=example.com

Email

/mx?host=
MX records with preference values.
/api/v1/mx?host=example.com
/spf?host=
SPF record, parsed mechanisms and the recursive DNS-lookup count.
/api/v1/spf?host=example.com
/dmarc?host=
DMARC record with the policy, subdomain policy and reporting addresses.
/api/v1/dmarc?host=example.com
/dkim?host=
DKIM public key for a selector. Pass selector= alongside host=.
/api/v1/dkim?host=example.com
/bimi?host=
BIMI record and logo URL.
/api/v1/bimi?host=example.com
/mta-sts?host=
MTA-STS policy record and the published policy file.
/api/v1/mta-sts?host=example.com
/tls-rpt?host=
TLS-RPT record and its reporting destinations.
/api/v1/tls-rpt?host=example.com

IP

/ip?ip=
Geolocation, ISP, ASN and network details for an IP address.
/api/v1/ip?ip=1.1.1.1
/asn?asn=
ASN details: organisation, country and announced prefixes.
/api/v1/asn?asn=AS13335
/blacklist?ip=
Check an IPv4 address against public DNS blocklists.
/api/v1/blacklist?ip=8.8.8.8
/subnet?cidr=
Subnet maths: network, broadcast, usable range and host count.
/api/v1/subnet?cidr=192.168.1.0/24
/ipv6-compress?ip=
Compress an IPv6 address to its shortest valid form.
/api/v1/ipv6-compress?ip=2001:0db8:0000:0000:0000:0000:0000:0001
/ipv6-expand?ip=
Expand an IPv6 address to its full form.
/api/v1/ipv6-expand?ip=2001:db8::1
/ip-convert?ip=
Convert an IP between dotted-quad, integer, hex and binary.
/api/v1/ip-convert?ip=192.168.1.1
/mac-lookup?mac=
OUI vendor lookup for a MAC address.
/api/v1/mac-lookup?mac=00:1A:2B:3C:4D:5E

TLS & HTTP

/ssl?host=
TLS certificate: issuer, validity dates, SANs and the chain.
/api/v1/ssl?host=example.com
/headers?host=
Raw HTTP response headers. Optional scheme=http|https.
/api/v1/headers?host=example.com
/security-headers?host=
Security header analysis with a grade — the check behind our published study.
/api/v1/security-headers?host=example.com
/http-status?host=
HTTP status code and final URL after redirects. Optional scheme=.
/api/v1/http-status?host=example.com
/redirect-chain?host=
Every hop in a redirect chain with its status code. Optional scheme=.
/api/v1/redirect-chain?host=example.com

Domain

/whois?host=
WHOIS/RDAP record: registrar, dates and nameservers.
/api/v1/whois?host=example.com
/domain-info?host=
Combined registration, DNS and hosting summary for a domain.
/api/v1/domain-info?host=example.com

What the API does not do

Ping, traceroute and port checks are available as tools on the site but deliberately not as API endpoints. Each one makes our server originate traffic at a destination the caller picks, and publishing that as an open interface turns this host into a scanning proxy for anyone who finds it. Every endpoint above is a read-only lookup — DNS, WHOIS, one TLS handshake or one HTTP request — that you could perform yourself. We are saving you the parsing, not lending you reach.

Terms

Provided as-is with no uptime guarantee. Results come from public DNS, RDAP/WHOIS and live TLS and HTTP connections, and may be wrong or stale — do not use them as the sole basis for a security decision. Do not use the API to attack, overwhelm or map infrastructure you do not own. Full terms are on the terms page.