# ipfast.dev

> Fast IP geolocation API powered by the edge. Own IP lookups free without key. Arbitrary IP lookups require free API key (register at ipfast.dev/login). Zero external API calls.

ipfast.dev returns your public IP address, geolocation, connection security details, and parsed user agent data. All data is resolved at the edge -- zero external API calls, zero database queries, zero third-party dependencies. Typical response time is under 5ms.

Premium API tiers add arbitrary IP lookup, country metadata enrichment, company/ASN detection, VPN/proxy/Tor detection, threat intelligence, risk scoring, bulk lookups, and distance calculation.

## Free Endpoints (no API key required -- returns YOUR IP data)

- GET /json - Full IP geolocation as JSON (24 fields: ip, country, countryName, city, region, regionCode, timezone, coordinates, postal, ASN, ISP, flag, continent, continentCode, isEU, currency, currencyName, currencySymbol, callingCode, languages, countryTld, countryCapital, colo)
- GET /text - Just the IP address as plain text (aliases: /plain, /ip)
- GET /all - IP geolocation + connection security + parsed user agent in one response
- GET /xml - IP geolocation as XML
- GET /yaml - IP geolocation as YAML
- GET /csv - IP geolocation as CSV (header + data row)
- GET /country - ISO 3166-1 alpha-2 country code as plain text
- GET /country-name - Full country name as plain text
- GET /city - City name as plain text
- GET /region - State/region as plain text
- GET /region-code - ISO subdivision code as plain text
- GET /timezone - IANA timezone identifier as plain text
- GET /coordinates - Latitude,Longitude as plain text (aliases: /latlon, /coords)
- GET /latitude - Latitude as plain text
- GET /longitude - Longitude as plain text
- GET /asn - ASN number + ISP organization as plain text
- GET /isp - ISP/organization name as plain text (alias: /org)
- GET /postal - Postal/ZIP code as plain text (alias: /zip)
- GET /flag - Country flag emoji as plain text (alias: /emoji)
- GET /continent - Continent name as plain text
- GET /continent-code - Two-letter continent code as plain text
- GET /eu - Boolean EU membership as plain text
- GET /currency - ISO 4217 currency code as plain text
- GET /currency-name - Full currency name as plain text
- GET /currency-symbol - Currency symbol as plain text
- GET /calling-code - International dialing code as plain text (alias: /dial)
- GET /languages - Comma-separated language codes as plain text
- GET /tld - Country top-level domain as plain text
- GET /capital - Capital city name as plain text
- GET /geo - Location-focused JSON preset (IP, country, city, region, coordinates, timezone, continent)
- GET /locale - Localization-focused JSON preset (country, timezone, languages, currency, calling code, EU)
- GET /network - Network-focused JSON preset (IP, ASN, ISP, colo, TLS, protocol, RTT)
- GET /meta - Country metadata JSON preset (flag, capital, continent, EU, currency, languages, TLD)
- GET /connection - TLS version, cipher suite, HTTP protocol, TCP RTT as JSON
- GET /useragent - Parsed browser, OS, device type, bot detection as JSON (alias: /ua)
- GET /headers - All request headers as JSON

## Premium Endpoints (API key required)

- GET /json/{ip} - Geolocation for any IPv4/IPv6 address (starter+)
- GET /{field}/{ip} - Single field for any IP: /country/8.8.8.8, /city/1.1.1.1 (starter+)
- GET /json/{ip}?modules=country_meta,company - Enriched response with metadata modules
- GET /country-meta/{ip} - Country metadata: currency, languages, calling code, TLD, flag, EU status (starter+)
- GET /company/{ip} - Company/org detection from ASN: name, domain, type classification (pro+)
- GET /distance/{ip1}/{ip2} - Distance between two IP geolocations in km and miles (pro+)
- GET /distance/{ip}?lat=X&lon=Y - Distance from IP to coordinates (pro+)
- POST /bulk - Batch lookup up to 50-500 IPs in one request (pro+)
- GET /security/{ip} - VPN, proxy, Tor, datacenter detection with provider ID and hostname (business+)
- GET /threat/{ip} - Threat intelligence: threat level, categories, known attacker detection, recommendation (business+)
- GET /risk/{ip} - Comprehensive fraud risk scoring (0-100): anonymizer, network, country risk, recommendation (business+)

## Security & Threat Intelligence

The /security, /threat, and /risk endpoints detect VPN providers, proxy networks, Tor exit nodes, datacenter IPs, and known threat actors. Detection data is refreshed daily for maximum accuracy.

## Format Options

- Add ?format=xml|yaml|csv to /json for format override
- Add ?callback=functionName for JSONP (callback name validated against XSS)
- Add ?modules=country_meta,company for enriched responses (premium)

## Authentication

Three tiers of access:

### Tier 1: No API key (own IP only)
- GET /json, /text, /xml, /yaml, /csv, /country, /city, etc. return YOUR IP data
- 120 requests/minute per IP address

### Tier 2: Free API key (arbitrary IP lookups)
- Register at ipfast.dev/login to get a free API key
- Pass via X-API-Key header or ?apikey= query parameter
- 10 arbitrary IP lookups per hour, 200 per month
- GET /json/{ip}, /country/{ip}, /geo/{ip}, etc.

### Tier 3: Paid API key (premium endpoints)
- Starter ($9/mo), Pro ($29/mo), Business ($99/mo)
- Unlimited arbitrary IP lookups (within plan quota)
- GET /security/{ip}, /threat/{ip}, /risk/{ip}, /company/{ip}, POST /bulk

### Alternative: x402 Pay-Per-Request
- Call any premium endpoint without an API key to get a 402 response with payment details
- Sign the payment with your wallet and include it in the X-PAYMENT header
- Payments settle on Base network in ~1 second using USDC
- Machine-readable pricing: GET /pricing.json
- Protocol: https://docs.x402.org

## Rate Limits

- Free: 120 requests/minute per IP, 10K requests/month
- Starter: 500/min, 50K monthly quota
- Pro: 1,000/min, 200K monthly quota
- Business: 2,000/min, 1M monthly quota
- Enterprise: 5,000/min, 10M monthly quota

## Details

- Data source: Edge network for own IP, IP intelligence database for arbitrary IPs
- CORS: Restricted to findutils.com and ipfast.dev origins
- Privacy: IP addresses are SHA-256 hashed in logs, never stored in plain text

## Pages

- Homepage: https://ipfast.dev
- Documentation: https://ipfast.dev/docs
- Features: https://ipfast.dev/features
- How It Works: https://ipfast.dev/how-it-works
- Advantages: https://ipfast.dev/advantages
- Use Cases: https://ipfast.dev/use-cases
- Compare APIs: https://ipfast.dev/compare
- About: https://ipfast.dev/about
- Changelog: https://ipfast.dev/changelog

## Machine Readable

- OpenAPI 3.1: https://ipfast.dev/openapi.json
- AI Plugin: https://ipfast.dev/.well-known/ai-plugin.json
- Sitemap: https://ipfast.dev/sitemap.xml

## Part Of

- FindUtils: https://findutils.com (300+ free developer tools)
- Emoji Favicon: https://emoji.findutils.com