IPinfo API

Base URL

https://ipinfo.io

Authentication

The `/json` endpoint answers without a token at a limited daily volume. A free registered token raises the allowance and unlocks extra fields, but nothing here requires one.

Rate limit

Anonymous use is capped by IP; sustained polling will start returning 429. Cache per address rather than per request.

Pricing

Free anonymous tier, free registered tier with a higher cap, then paid plans for volume and for privacy-detection data.

CORS

Enabled — callable directly from browser JavaScript

Official docs

Read the docs

Every request below was executed against the live API on 2026-08-21, and the response shown is the real body it returned — not an illustration.

curl 'https://ipinfo.io/json'

const res = await fetch("https://ipinfo.io/json");
if (!res.ok) throw new Error(`Request failed: ${res.status}`);
const data = await res.json();
console.log(data);

import requests

res = requests.get("https://ipinfo.io/json", timeout=20)
res.raise_for_status()
print(res.json())

{
  "ip": "182.185.184.9",
  "city": "Lahore",
  "region": "Punjab",
  "country": "PK",
  "loc": "31.5580,74.3507",
  "org": "AS17557 Pakistan Telecommunication Company Limited",
  "postal": "54000",
  "timezone": "Asia/Karachi",
  "readme": "https://ipinfo.io/missingauth"
}

ipstring

The address that was looked up, echoed back. Use it to confirm the API resolved the caller you expected.

city / region / countrystring

Locality, first-level subdivision and ISO 3166-1 alpha-2 country code. `country` is a two-letter code, not a name.

locstring

Latitude and longitude in one comma-separated string, such as `"31.5580,74.3507"`. Split and cast before doing arithmetic.

orgstring

ASN and organisation name concatenated, for example `"AS17557 Pakistan Telecommunication Company Limited"`. Split on the first space to separate them.

postal / timezonestring

Postal code and IANA timezone. Postal code is missing for some countries, so treat it as optional.

readmestring

Present only on anonymous responses; a link explaining the tokenless limits. Its presence tells you which tier answered.

• Show visitors a localised currency, language or timezone default on first load
• Detect the country of an incoming request for compliance or content licensing
• Enrich server logs with ASN and organisation for abuse investigations
• Diagnose whether a user is behind a VPN, datacentre or residential connection
• Build a simple 'where am I' diagnostic page for a support team