Auth
Authorization: Bearer iptool_… or X-Api-Key. A bad key returns 401; it does not fall through to the guest quota.
HTTP API
Create a key under Account → API. GET uses the query string; POST sends JSON. No session cookie; the key stays on your server, not in a browser.
Authorization: Bearer iptool_… or X-Api-Key. A bad key returns 401; it does not fall through to the guest quota.
Same pool as the site: guest 40, member 200, Pro 2000 / day (Turkey time). Hash and calculators do not count.
$1 / month · $10 / year
GET /api/:slug requires an API key. Pass domain, host or ip in the query string.
POST JSON uses the same body. Browser calls still need CSRF; key-authenticated calls skip CSRF.
No browser CORS; call it server to server.
curl -sS -H "Authorization: Bearer iptool_…" \
"https://iptool.tr/api/dns-lookup?domain=example.com"
curl -sS -H "Authorization: Bearer iptool_…" \
-H "Content-Type: application/json" \
-d '{"domain":"example.com"}' \
https://iptool.tr/api/dns-lookup
/api/spf-checker SPF Checker/api/dmarc-checker DMARC Checker/api/dkim DKIM Checker/api/mail-test Mail Server Test/api/mail-tester Mail Score/api/ssl-checker SSL Checker/api/dns-lookup DNS Lookup/api/reverse-dns-lookup Reverse DNS/api/dns-validation DNS Validation/api/domain-health-checker DNS Health Check/api/dnskey-lookup DNSKEY Lookup/api/recursive-dnscheck Recursive DNS/api/ip-lookup IP Geolocation/api/ip-blacklist-checker IP Blacklist/api/ip-subnet-calculator Subnet Calculator/api/ping-ip Ping Test/api/online-traceroute Traceroute/api/asn-lookup ASN Lookup/api/port-sorgulama Port Scanner/api/domain-whois Whois Lookup/api/http-header-checker Web Security Test/api/hash-generator Hash Generator/api/inode-hesaplayici INODE Calculator/api/cloud-server Server Sizing