as_info
ClaudeGet the name, organization, country, and description for an Autonomous System number. Lightweight version of as_whois.
Robtex Network Intelligence
by Robtex
Overview
Look up DNS records, check IP and domain reputation against 100+ blocklists, query AS/network data, and explore the Bitcoin Lightning Network — all directly from Claude. Robtex provides 44 tools covering forward and reverse DNS lookups, IP geolocation and threat intelligence, domain popularity rankings from 5 independent sources (Majestic, Tranco, Cloudflare Radar, Umbrella, CrUX), hostname parsing, MAC address vendor lookups, and Lightning Network node/channel discovery. Free, no authentication required.
Tools
as_prefixes
ClaudeGet all IPv4 and IPv6 network prefixes (netblocks) announced by an Autonomous System. Returns BGP-visible routes.
bitcoin_address_transactions
ClaudeReturns a paginated list of transactions involving a Bitcoin address. Filter by direction: received (incoming funds), sent (outgoing funds), or all. Returns up to 100 transactions per call, sorted by block height descending (most recent first).
bitcoin_blockchain_stats
ClaudeReturns cumulative blockchain metrics over a configurable block range. Available metrics include: txs, fees, segwittx, inputs, outputs, insats, outsats, btcusd, volusd, unspentoutputs, fullyspent, unspentsats, addresses, satoshiblocks, clnopen, clnclose, satlnopen, satlnclose, basereward, blockreward, batched, rbf, version2tx, lowestfee, and more. Returns sampled data points suitable for charting.
bitcoin_transaction_spends
ClaudeFor a given transaction, returns which subsequent transactions consumed its outputs. Useful for UTXO tracking and chain analysis. Shows the spending txid for each output.
check_email
ClaudeVerify an email address by connecting to its mail server via SMTP. Checks MX records, tests if the address is accepted (RCPT TO), detects catch-all domains, and reports TLS support. Results are RAM-cached for 1 hour.
dns_a
Claudedns_aaaa
Claudedns_cname
Claudedns_differential
ClaudeResolve a domain through filtered public DNS resolvers and their unfiltered controls to detect provider threat-feed blocks.
dns_mx
Claudedns_ns
Claudedns_ptr
Claudedns_soa
Claudedns_txt
Claudedomain_blocklist_check
ClaudeCheck a domain against HaGeZi DNS blocklists, Steven Black unified hosts, Blackbook malware list, phishing databases, Roskomnadzor (Russia), and Citizen Lab censorship lists. Returns which lists the domain appears on.
domain_ranking
ClaudeGet domain popularity rankings from five independent sources: Majestic Million (backlinks), Tranco top 1M (aggregated traffic), Cloudflare Radar (1.1.1.1 DNS query popularity), Cisco Umbrella (OpenDNS query popularity), and Chrome UX Report (real Chrome user traffic).
domain_rdap
ClaudeQueries the authoritative RDAP registry for a domain. Returns availability status (HTTP 404 = available), and for registered domains: registrar name, registration/expiration dates, nameservers, DNSSEC status, and domain status flags. Uses IANA bootstrap to find the correct RDAP server per TLD. Covers 590+ TLDs.
domain_reputation
ClaudeGet comprehensive domain reputation: Majestic rank, Tranco rank, HaGeZi blocklist status, Blackbook malware status, phishing database status, HSTS preload status, and disposable email detection.
domain_shared_ip
ClaudeFind other domains hosted on the same IP address(es) as the target domain. Resolves the domain's A records, then performs reverse IP lookups for each.
domain_shared_mx
ClaudeFind other domains using the same mail server(s) as the target domain. Resolves the domain's MX records, then performs reverse MX lookups for each.
domain_shared_ns
ClaudeFind other domains using the same nameserver(s) as the target domain. Resolves the domain's NS records, then performs reverse NS lookups for each.
get_recommended_lightning_peers
ClaudeGet recommended Lightning Network peers for a given node. Returns nodes that are NOT currently peered with the specified node but would improve its centrality score if connected.
historic_reverse_lookup_cname
ClaudeFind hostnames that previously had a CNAME record pointing to the specified target but no longer do. Tracks CDN and infrastructure migrations.
historic_reverse_lookup_ip
ClaudeFind hostnames that previously pointed to a specific IP address but no longer do. Tracks hosting migrations and past IP relationships. Searches both A and AAAA records.
historic_reverse_lookup_mx
ClaudeFind hostnames that previously used a specific mail server but no longer do. Tracks email provider migrations and past MX relationships.
historic_reverse_lookup_ns
ClaudeFind hostnames that previously used a specific nameserver but no longer do. Tracks infrastructure migrations and past delegation relationships.
ip_blocklist_check
ClaudeCheck an IP address against IPsum, FireHOL, Tor exit node lists, C2 indicators, Roskomnadzor (Russia), and other threat intelligence feeds. Returns which lists the IP appears on and threat scores.
ip_geolocation
ClaudeGet geographic location data for an IP address: country, city, region, latitude, longitude, timezone.
ip_network
ClaudeGet the containing network (BGP route), AS number, AS name, and route description for an IP address.
ip_reputation
ClaudeCheck an IP address reputation against 100+ real-time blocklists (DNSBLs). Returns listing status, threat categories, AS info, and blocklist details.
ip_threat_intel
ClaudeCombined threat intelligence: DNSBL listings, IPsum score, FireHOL lists, bad ASN flag, Tor exit status. Comprehensive threat assessment for an IP address.
ip_to_asn
ClaudeLightweight lookup: get just the AS number and netblock for an IP address. Fastest way to map IP to ASN.
is_subdomain
ClaudeCheck whether a hostname is a subdomain (has labels beyond the registered domain). Uses the Mozilla Public Suffix List for accurate eTLD detection.
latest_lightning_channels
ClaudeReturns the most recently opened Lightning Network channels, sorted by open time descending.
lookup_as_whois
ClaudeLookup WHOIS information for an Autonomous System (AS) number from the RADB routing database. Returns routing policy, network information, and administrative contacts.
lookup_bitcoin_address
ClaudeReturns address balance, total received/sent, transaction counts, address type (P2PKH, P2SH, P2WPKH, P2TR), first/last seen block, and ransomware/abuse flags. Supports all Bitcoin address formats.
lookup_bitcoin_block
ClaudeReturns block header (hash, timestamp, version, merkle root, difficulty, nonce), transaction count, and list of transaction IDs. Supports lookup by block height.
lookup_bitcoin_transaction
ClaudeReturns full transaction details: inputs with addresses and values, outputs with spent status, fee, size/weight, SegWit flag, and Lightning Network channel correlation. Supports both confirmed and mempool transactions.
lookup_dns
ClaudeLookup DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA) for a given hostname. Also returns domain reputation info (Majestic, Tranco rankings, blocklist status).
lookup_lightning_channel
ClaudeLookup a Lightning channel by channel ID. Supports numeric, block x txn x vout, or block:txn:vout formats.
lookup_lightning_channels_per_node
ClaudeLookup all Lightning Network channels for a given node by public key.
lookup_lightning_node
ClaudeLookup a Lightning Network node by public key. Returns node alias, peer count, channel count, and centrality ranking.
lookup_mac
ClaudeLook up the manufacturer/vendor of a network device by its MAC address. Uses the official IEEE OUI (Organizationally Unique Identifier) database with ~30K entries.
parse_hostname
ClaudeParse a hostname into its constituent parts using the Mozilla Public Suffix List (9700+ entries). Returns eTLD (effective TLD), registered domain, subdomain, labels, and depth. Handles multi-level eTLDs (co.uk, co.jp, com.au) and platform suffixes (github.io, herokuapp.com).
ping
ClaudeCheck if the API is responding. Returns status and server timestamp.
registered_domain
ClaudeExtract the registered domain (eTLD+1) from a hostname. For example, www.mail.example.co.uk returns example.co.uk.
reverse_lookup_cname
ClaudeFind hostnames that have a CNAME record pointing to the specified target. Useful for CDN and load balancer investigations.
reverse_lookup_dns_records
ClaudeFind hostnames that use a specific DNS record value. Query which hostnames point to an IP address, use a particular nameserver, or reference any DNS value. For example: 'which hostnames point to 1.2.3.4?' or 'which hostnames use chris.ns.cloudflare.com as their nameserver?'
reverse_lookup_ip
ClaudeFind hostnames that point to a specific IP address (IPv4 or IPv6). Searches both A and AAAA records. For example: which hostnames point to 1.2.3.4?
reverse_lookup_mx
ClaudeFind hostnames that use a specific mail server. For example: which hostnames use aspmx.l.google.com as their mail server?
reverse_lookup_ns
ClaudeFind hostnames that use a specific nameserver. For example: which hostnames use chris.ns.cloudflare.com as their nameserver?
search_lightning_nodes_by_alias
ClaudeSearch for Lightning Network nodes by partial alias match. Returns nodes whose aliases contain the search term (case-insensitive).
tld_info
ClaudeGet information about a top-level domain or effective TLD. Returns whether it is in the Public Suffix List, how many sub-suffixes exist, and classification (ccTLD, gTLD, or infrastructure).
