FernTool Network Tools

com.ferntool/ipVersion 1.2.0

24 free tools: IP/VPN lookup, WHOIS, DNS, SPF/DMARC, site up/down, redirects, time zones. No key.

Status

Responds183 msNov 14, 2026, 13:56 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 13:56 UTC
Latency: 183 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 21:12 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://www.ferntool.com/mcpResponds183 msNov 14, 2026, 13:56 UTC

No sign-in

Claude Code

claude mcp add --transport http ip https://www.ferntool.com/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: ip
Remote MCP server URL: https://www.ferntool.com/mcp

Cursor

{
  "mcpServers": {
    "ip": {
      "url": "https://www.ferntool.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"ip","type":"http","url":"https://www.ferntool.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

26 tools

Tools of FernTool Network Tools
	Description		Read-only	Idempotent	Open world
`ai_service_status`Live status of AI services (ChatGPT/OpenAI, Claude, Gemini API, GitHub Copilot, Perplexity, Cohere) read from their official status pages, cached ~60s. level is up, degraded, down or unknown.	Live status of AI services (ChatGPT/OpenAI, Claude, Gemini API, GitHub Copilot, Perplexity, Cohere) read from their official status pages, cached ~60s. level is up, degraded, down or unknown.	Not declared	Not declared	Not declared	Not declared
`analyze_email_headers`Is this email real or fake? Paste the raw headers of an email (Gmail Show original, Outlook View message details). Returns who really sent it (From, Reply-To, Return-Path), the SPF/DKIM/DMARC results recorded by the receiving provider, look-alike or fake sender names (banks, SARS, couriers, free-mail accounts posing as companies), every Received hop with delays, the sending server IP with country/network, and a verdict: verified, unverified or suspicious. Nothing is stored.	Is this email real or fake? Paste the raw headers of an email (Gmail Show original, Outlook View message details). Returns who really sent it (From, Reply-To, Return-Path), the SPF/DKIM/DMARC results recorded by the receiving provider, look-alike or fake sender names (banks, SARS, couriers, free-mail accounts posing as companies), every Received hop with delays, the sending server IP with country/network, and a verdict: verified, unverified or suspicious. Nothing is stored.	Not declared	Not declared	Not declared	Not declared
`batch_lookup_ip`Look up 1-100 IPv4/IPv6 addresses at once. Each result has version, scope, country, timezone, ASN, network owner and flags (is_tor, is_datacenter, provider).	Look up 1-100 IPv4/IPv6 addresses at once. Each result has version, scope, country, timezone, ASN, network owner and flags (is_tor, is_datacenter, provider).	Not declared	Not declared	Not declared	Not declared
`check_dns_propagation`Check whether a DNS change has spread: asks the domain's own authoritative name server (when reachable) and 8 big public resolvers (Cloudflare, Google, OpenDNS, AdGuard, NextDNS, Control D, CleanBrowsing, AliDNS) over DoH, marks which are up to date, and gives the remaining cache time (TTL) of stale answers.	Check whether a DNS change has spread: asks the domain's own authoritative name server (when reachable) and 8 big public resolvers (Cloudflare, Google, OpenDNS, AdGuard, NextDNS, Control D, CleanBrowsing, AliDNS) over DoH, marks which are up to date, and gives the remaining cache time (TTL) of stale answers.	Not declared	Not declared	Not declared	Not declared
`check_email_security`Can someone fake (spoof) email from a domain? Reads SPF (counts the 10 DNS-lookup limit, follows includes), DMARC (policy, pct, reports, inherited from the parent domain) and DKIM keys (common selectors, or the one given), detects the email provider from MX, and returns a plain verdict (protected / partial / unprotected) plus the exact TXT records to add.	Can someone fake (spoof) email from a domain? Reads SPF (counts the 10 DNS-lookup limit, follows includes), DMARC (policy, pct, reports, inherited from the parent domain) and DKIM keys (common selectors, or the one given), detects the email provider from MX, and returns a plain verdict (protected / partial / unprotected) plus the exact TXT records to add.	Not declared	Not declared	Not declared	Not declared
`check_website_legit`Is this website legit or a scam? Follows the URL (redirects included) and returns plain-language warning signs: domain age from RDAP (scam shops are usually days or weeks old), look-alike brand names (banks, SARS, couriers, Takealot, PayPal, Apple…), risky domain endings and scam words, look-alike letters, HTTPS, whether the domain receives email and has DMARC. verdict: no_signs, mostly_ok, caution or likely_scam. Warning signs only; not a malware scan.	Is this website legit or a scam? Follows the URL (redirects included) and returns plain-language warning signs: domain age from RDAP (scam shops are usually days or weeks old), look-alike brand names (banks, SARS, couriers, Takealot, PayPal, Apple…), risky domain endings and scam words, look-alike letters, HTTPS, whether the domain receives email and has DMARC. verdict: no_signs, mostly_ok, caution or likely_scam. Warning signs only; not a malware scan.	Not declared	Not declared	Not declared	Not declared
`check_website_status`Is a website down? Resolves its DNS and loads the URL once (10 s timeout) from FernTool's Cloudflare edge, then returns verdict (up/down), reason (ok, blocked_bot, page_not_found, server_error, timeout, tls, dns_nxdomain...), HTTP status, response time, final URL after redirects and server country/network. One vantage point only; results cached 30 s.	Is a website down? Resolves its DNS and loads the URL once (10 s timeout) from FernTool's Cloudflare edge, then returns verdict (up/down), reason (ok, blocked_bot, page_not_found, server_error, timeout, tls, dns_nxdomain...), HTTP status, response time, final URL after redirects and server country/network. One vantage point only; results cached 30 s.	Not declared	Not declared	Not declared	Not declared
`convert_timestamp`Convert a Unix timestamp (seconds, milliseconds, microseconds or nanoseconds, auto-detected) to a readable date, or a date/time string (e.g. 2026-12-25 09:00, read in the given time zone unless it has its own offset) to a Unix timestamp. Also returns weekday, ISO week and how long ago or until.	Convert a Unix timestamp (seconds, milliseconds, microseconds or nanoseconds, auto-detected) to a readable date, or a date/time string (e.g. 2026-12-25 09:00, read in the given time zone unless it has its own offset) to a Unix timestamp. Also returns weekday, ISO week and how long ago or until.	Not declared	Not declared	Not declared	Not declared
`convert_timezone`Convert a time between time zones with daylight saving applied (you cannot do this reliably yourself). from/to accept IANA zones (Africa/Johannesburg), common abbreviations (SAST, EST, PST, GMT, CET, IST=India, CST=US Central) or big cities. Omit time for now. Returns each local date, time, UTC offset, abbreviation, hour difference and whether it is the next/previous day.	Convert a time between time zones with daylight saving applied (you cannot do this reliably yourself). from/to accept IANA zones (Africa/Johannesburg), common abbreviations (SAST, EST, PST, GMT, CET, IST=India, CST=US Central) or big cities. Omit time for now. Returns each local date, time, UTC offset, abbreviation, hour difference and whether it is the next/previous day.	Not declared	Not declared	Not declared	Not declared
`count_words`Exactly count words, characters (with and without spaces), sentences and paragraphs in a text, with reading/speaking time and the most repeated words. Use this instead of estimating counts yourself.	Exactly count words, characters (with and without spaces), sentences and paragraphs in a text, with reading/speaking time and the most repeated words. Use this instead of estimating counts yourself.	Not declared	Not declared	Not declared	Not declared
`date_calc`Exact calendar maths. With end: days between two dates (plus weeks, months+days, weekdays Mon-Fri, weekend days). With add_days/add_weeks/add_months/add_years (negative to subtract): the resulting date and weekday; business_days=true skips weekends. Use this instead of counting days yourself.	Exact calendar maths. With end: days between two dates (plus weeks, months+days, weekdays Mon-Fri, weekend days). With add_days/add_weeks/add_months/add_years (negative to subtract): the resulting date and weekday; business_days=true skips weekends. Use this instead of counting days yourself.	Not declared	Not declared	Not declared	Not declared
`dns_lookup`Resolve DNS records for a domain via Cloudflare 1.1.1.1 DNS-over-HTTPS. Types: A, AAAA, MX, TXT, NS, CNAME, SOA (default: all).	Resolve DNS records for a domain via Cloudflare 1.1.1.1 DNS-over-HTTPS. Types: A, AAAA, MX, TXT, NS, CNAME, SOA (default: all).	Not declared	Not declared	Not declared	Not declared
`estimate_ai_cost`Estimate token count and USD API cost of a text across major AI models (OpenAI GPT, Anthropic Claude, Google Gemini), and whether it fits each context window. Token counts are approximate. Pass text, or tokens directly.	Estimate token count and USD API cost of a text across major AI models (OpenAI GPT, Anthropic Claude, Google Gemini), and whether it fits each context window. Token counts are approximate. Pass text, or tokens directly.	Not declared	Not declared	Not declared	Not declared
`generate_spf_record`Build one valid SPF TXT record for a domain from the services that send its email (e.g. microsoft365, google, mailchimp, sendgrid, website). Optionally reads the domain's current SPF record and MX first (keeps unknown entries, warns about services it would drop), adds extra IPs/includes, and counts DNS lookups live against the 10-lookup limit. Returns the record, DNS name, lookup count, notes and a starter DMARC record. Service ids: microsoft365, google, zoho, proton, fastmail, icloud, mimecast_za, mimecast, website, mx, shopify, mailchimp, mandrill, brevo, mailerlite, constantcontact, campaignmonitor, mailjet, sendpulse, sendgrid, mailgun, amazonses, postmark, zendesk, freshdesk, helpscout, salesforce.	Build one valid SPF TXT record for a domain from the services that send its email (e.g. microsoft365, google, mailchimp, sendgrid, website). Optionally reads the domain's current SPF record and MX first (keeps unknown entries, warns about services it would drop), adds extra IPs/includes, and counts DNS lookups live against the 10-lookup limit. Returns the record, DNS name, lookup count, notes and a starter DMARC record. Service ids: microsoft365, google, zoho, proton, fastmail, icloud, mimecast_za, mimecast, website, mx, shopify, mailchimp, mandrill, brevo, mailerlite, constantcontact, campaignmonitor, mailjet, sendpulse, sendgrid, mailgun, amazonses, postmark, zendesk, freshdesk, helpscout, salesforce.	Not declared	Not declared	Not declared	Not declared
`get_current_time`Get the exact current date and time (you cannot know it otherwise). Returns Unix seconds and milliseconds, ISO 8601 in UTC and in the requested IANA time zone, weekday, ISO week and day of year.	Get the exact current date and time (you cannot know it otherwise). Returns Unix seconds and milliseconds, ISO 8601 in UTC and in the requested IANA time zone, weekday, ISO week and day of year.	Not declared	Not declared	Not declared	Not declared
`get_my_ip`Return the public IP address (and ISP, ASN, location, timezone) of the caller as seen by FernTool. Note: for remote agents this is the IP of the machine calling the MCP server.	Return the public IP address (and ISP, ASN, location, timezone) of the caller as seen by FernTool. Note: for remote agents this is the IP of the machine calling the MCP server.	Not declared	Not declared	Not declared	Not declared
`lookup_ip`Validate an IPv4/IPv6 address and return its version, scope (public/private/loopback/...), country, ASN and network owner (DB-IP Lite + IPtoASN data).	Validate an IPv4/IPv6 address and return its version, scope (public/private/loopback/...), country, ASN and network owner (DB-IP Lite + IPtoASN data).	Not declared	Not declared	Not declared	Not declared
`make_qr_code`Create a static QR code (never expires) for a URL, Wi-Fi string (WIFI:T:WPA;S:name;P:pass;;), mailto:, tel: or any text up to 2000 characters. Returns an SVG string plus a ferntool.com image URL that renders the same code.	Create a static QR code (never expires) for a URL, Wi-Fi string (WIFI:T:WPA;S:name;P:pass;;), mailto:, tel: or any text up to 2000 characters. Returns an SVG string plus a ferntool.com image URL that renders the same code.	Not declared	Not declared	Not declared	Not declared
`pick_random`Fairly pick random winners from a list, shuffle a list, or split people into random even teams, using a cryptographically secure generator (you cannot choose fairly at random yourself). Use for giveaways, raffles, "who goes first", random order or team splits. An item listed twice has twice the chance unless dedupe=true.	Fairly pick random winners from a list, shuffle a list, or split people into random even teams, using a cryptographically secure generator (you cannot choose fairly at random yourself). Use for giveaways, raffles, "who goes first", random order or team splits. An item listed twice has twice the chance unless dedupe=true.	Not declared	Not declared	Not declared	Not declared
`random_number`Fair, cryptographically secure random integers (you cannot produce real randomness yourself). min and max are inclusive. unique=true for no repeats (raffles, lotto, picking winners). For a coin flip use min 0, max 1; for dice use min 1, max 6.	Fair, cryptographically secure random integers (you cannot produce real randomness yourself). min and max are inclusive. unique=true for no repeats (raffles, lotto, picking winners). For a coin flip use min 0, max 1; for dice use min 1, max 6.	Not declared	Not declared	Not declared	Not declared
`reverse_dns`Reverse DNS (PTR) lookup for an IPv4/IPv6 address, with forward-confirmation check.	Reverse DNS (PTR) lookup for an IPv4/IPv6 address, with forward-confirmation check.	Not declared	Not declared	Not declared	Not declared
`subnet_calc`IPv4/IPv6 CIDR subnet calculator: network, netmask, wildcard, broadcast, first/last usable host, total and usable addresses, block type. Optional split lists the smaller subnets (e.g. the /64s in a /48).	IPv4/IPv6 CIDR subnet calculator: network, netmask, wildcard, broadcast, first/last usable host, total and usable addresses, block type. Optional split lists the smaller subnets (e.g. the /64s in a /48).	Not declared	Not declared	Not declared	Not declared
`subnet_mask_convert`Convert between a subnet mask, CIDR prefix, wildcard mask and device count. Input a dotted mask (255.255.255.192 -> /26), a wildcard (0.0.0.255 -> /24), a prefix (/22) or how many devices you need ("50 hosts" -> smallest prefix that fits). Returns prefix, mask, wildcard, total and usable addresses, binary mask.	Convert between a subnet mask, CIDR prefix, wildcard mask and device count. Input a dotted mask (255.255.255.192 -> /26), a wildcard (0.0.0.255 -> /24), a prefix (/22) or how many devices you need ("50 hosts" -> smallest prefix that fits). Returns prefix, mask, wildcard, total and usable addresses, binary mask.	Not declared	Not declared	Not declared	Not declared
`trace_redirects`Where does a link really go? Follows a URL (short links like bit.ly, tracking links, QR code links) hop by hop without a browser: every redirect with status code (301/302/307/308/meta refresh), final URL and page title, plus warning signs (ends on a different site, domain registered < 30 days ago, punycode look-alike name, bare IP, no HTTPS, loops, long chains) and a copy of the final URL with tracking parameters removed. Does not scan pages for malware. Max 10 hops; cached 60 s.	Where does a link really go? Follows a URL (short links like bit.ly, tracking links, QR code links) hop by hop without a browser: every redirect with status code (301/302/307/308/meta refresh), final URL and page title, plus warning signs (ends on a different site, domain registered < 30 days ago, punycode look-alike name, bare IP, no HTTPS, loops, long chains) and a copy of the final URL with tracking parameters removed. Does not scan pages for malware. Max 10 hops; cached 60 s.	Not declared	Not declared	Not declared	Not declared
`validate_ip`Check whether a string is a valid IPv4 or IPv6 address and classify it.	Check whether a string is a valid IPv4 or IPv6 address and classify it.	Not declared	Not declared	Not declared	Not declared
`whois_lookup`WHOIS via RDAP for a domain (registrar, created/expiry dates, status, nameservers, DNSSEC), an IP address (network name, range, owner org, country, abuse contact) or an ASN like AS13335.	WHOIS via RDAP for a domain (registrar, created/expiry dates, status, nameservers, DNSSEC), an IP address (network name, range, owner org, country, abuse contact) or an ASN like AS13335.	Not declared	Not declared	Not declared	Not declared

Details

Registry status: Active
Published: Oct 26, 2026
Updated: Oct 26, 2026
Website: https://www.ferntool.com/api⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing