New Feature July 18, 2026 By WorldIP.io Editorial

Introducing the Keyless IP API — One curl Call, No Key Required

You can now look up any IPv4 address on WorldIP.io with a single HTTP request — no API key, no account, no SDK. Point curl (or any HTTP client) at an IP and get back a clean JSON profile: the owning organization, its ASN, country, reverse-DNS hostname and CIDR block. It works over both HTTPS and plain HTTP, and it is free.

Try it right now

The IP address is the endpoint — just append it to the domain:

curl

curl worldip.io/8.8.8.8

The response

Every call returns the same compact, predictable shape:

Response · application/json

{
  "ip": "8.8.8.8",
  "ptr": "dns.google",
  "forward_dns": { "hostname": "dns.google", "confirmed": true },
  "asn": { "number": 15169, "name": "Google LLC" },
  "org": { "name": "Google, LLC" },
  "country": { "code": "US", "name": "United States" },
  "region": null,
  "city": null,
  "cidr": "8.8.8.0/24",
  "_meta": {
    "keyless": true,
    "docs": "https://worldip.io/developers",
    "rate": {
      "limit": 1000,
      "remaining": 999,
      "reset": "2026-07-18T00:00:00Z",
      "window_seconds": 86400
    }
  }
}

What you get, free

The keyless endpoint returns the core identity of any address — the fields most lookups actually need:

ip — the address you asked about, canonicalized
ptr — the reverse-DNS hostname, resolved by our own scanner fleet
forward_dns — the forward-confirmed (FCrDNS) hostname and a confirmed flag
asn — the Autonomous System number and name
org — the owning organization
country — ISO code and name
region & city — full geolocation: the state/province and city, whenever the address maps to one
cidr — the routed prefix the address belongs to

Geolocation is included free. Anycast addresses like 8.8.8.8 map to no single physical city, but a located address returns its place — for example 4.2.2.2 comes back with "region": "South Carolina", "city": "Greenville".

Find your own IP — as structured JSON

Call the API with no address at all and it profiles the request’s own source IP — a what-is-my-ip that returns not just the address, but its full context: the ASN, organization, country, reverse-DNS hostname and CIDR block it belongs to.

curl

curl worldip.io

Pull out just the fields you need with any JSON tool — here, your current IP, ASN and organization in a single line:

curl + jq

curl -s worldip.io | jq '{ ip, asn: .asn.name, org: .org.name }'

It is the same free profile you get for any address, just resolved for whoever is asking — ideal for dynamic-DNS updaters, egress and connectivity checks, and CI runners that need to record which network they ran on.

Limits are built into the response

Keyless access is capped at 1,000 lookups per day per IP, with a short-term burst limit to keep things fair. You never have to guess where you stand: every response includes a _meta.rate object with remaining and a UTC reset timestamp, and the standard X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers are set too.

Use it from any language

It is just an HTTP GET that returns JSON, so it drops into anything:

PHP

$ip = json_decode(file_get_contents('https://worldip.io/8.8.8.8'), true);
echo $ip['org']['name'];   // Google, LLC

Node.js

const ip = await fetch('https://worldip.io/8.8.8.8').then(r => r.json());
console.log(ip.asn.name);  // Google LLC

Python

import requests
ip = requests.get('https://worldip.io/8.8.8.8').json()
print(ip['country']['code'])   # US

A true drop-in replacement

Because the endpoint is simply https://worldip.io/{ip}, it slots straight into the countless tools already wired to an IP-lookup URL. If something in your stack calls ip-api.com, ipinfo.io, geoplugin.net or ipapi.co today, you can usually switch to WorldIP by changing a single line.

That spans a huge range of self-hosted and open-source software — abuse tooling like Fail2ban, community platforms like Discourse, helpdesks like Zammad and Chatwoot, analytics such as Matomo and Plausible, threat-intel platforms like MISP, e-commerce via WooCommerce, CMSs like Craft, Grav and MyBB, link shorteners like Shlink and YOURLS, and framework packages for Laravel and Django — plus any internal dashboard, helpdesk or script that just needs clean JSON for an address. No key to manage, nothing to install.

Step-by-step migration guides for these are on the way; in the meantime the API docs have everything you need to get started today.

Need more than the basics?

When you need the deeper signals — VPN / proxy / datacenter classification, a trust score, org & ASN enrichment (PeeringDB / Wikidata), the /24 neighbors around an address, live BGP routing or hosted domains — those live on our authenticated API on a dedicated endpoint, so you pull (and pay for) only the enrichment you actually use. See the full API documentation and plans for details. The core keyless lookup shown here — including full geolocation — stays free, forever.