ApiToll

← Catalog

IP Geolocation.

MaxMind GeoLite2 IP geo plus autonomous-system data, agent-payable, weekly-refreshed. IPv4 and IPv6. Country, city, lat/lng, timezone, accuracy radius, ASN number, network operator. $0.002 per call.

Endpoint
GET /v1/ip/:address
Price
0.002 USDC per successful call
Source
MaxMind GeoLite2 City + ASN
License
CC-BY-SA 4.0 — attribution emitted in every response
Refresh
Weekly (Tuesday 04:00 UTC) — matches MaxMind's Tue/Fri publication cadence
Coverage
Global IPv4 and IPv6, public addresses
Auth
None. x402 payment is the auth.

Try the sandbox →   Same response shape, test USDC on Base Sepolia. Get a test wallet drip.

What you get

JSON. Same shape on every call.

{
  "status": "success",
  "ip":     "8.8.8.8",
  "country":  { "iso_code": "US", "name": "United States", "continent": "North America", "is_in_european_union": false },
  "city":     null,
  "subdivisions": [],
  "postal_code":  null,
  "location": {
    "latitude":          37.751,
    "longitude":         -97.822,
    "time_zone":         "America/Chicago",
    "accuracy_radius_km": 1000
  },
  "asn": {
    "number":       15169,
    "organization": "Google LLC"
  },
  "meta": {
    "source":         "MaxMind GeoLite2 (City + ASN)",
    "source_license": "CC-BY-SA 4.0",
    "attribution":    "This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com",
    "last_updated":   "2026-05-04"
  }
}

Why pay

Public sources exist. Hosting them is the work.

  1. GeoLite2 is free. The plumbing isn't.

    Sign up for MaxMind, generate a license, download two .mmdb files, host them, set a weekly cron, comply with the attribution clause. We've done all of that. You hit one URL.

  2. Free APIs cap at ~1k req/day.

    ipapi.co and similar throttle aggressively. Most production agents will burn that quota in an hour.

  3. ASN data is the secret sauce.

    Country and city are table stakes. The autonomous-system organization tells you "is this IP from a hosting provider, an ISP, a corporate network, a VPN?" — that's the signal that matters for fraud and abuse triage.

Use cases

What agents do with this.

  1. Fraud signals.

    Compare IP-country to billing-country. Flag mismatches as one input among many. Cheap pre-filter before more expensive checks.

  2. Abuse triage.

    ASN tells you whether the request is from AWS, a residential ISP, or a known VPN provider. Score accordingly.

  3. Geo-routing.

    Send EU visitors to the EU edge, US visitors to the US edge. Coarse but cheap.

  4. Compliance preflight.

    Identify the country before invoking sanctions checks. ISO-2 codes feed your downstream rules.

Honest framing

What it is not.

Good for: country-level geo, city-level (where MaxMind has it), ASN, network-operator identification, basic fraud signals.

Not good for:

  • Sub-city precision (accuracy radius is in kilometers, often 100km+)
  • Real-time threat intelligence (use a dedicated threat-intel feed)
  • Privately routed IPs (10.x, 192.168.x, etc — we 404 them)
  • Mobile carrier identification beyond the ASN level

This is GeoLite2, not GeoIP2. Paid GeoIP2 has higher accuracy and additional fields. If you need that grade, license it from MaxMind directly.

Try it

Right now.

One line to see the 402 challenge (no wallet needed):

curl -i https://apitoll.io/v1/ip/8.8.8.8

When you're ready to actually pay, send a signed X-PAYMENT header (most agent SDKs do this for you). See the agent primer for full setup. Or hit the sandbox first.

Discovery

Pricing rationale

$0.002 per call — double the FX/country price because the data is richer (City + ASN + lat/lng) and the underlying license requires more operational care. Comparable production-grade geo APIs start at $50/month with rate limits.