BINtools.io exposes a small number of read-only public API endpoints that power the in-browser tools. These endpoints are provided as-is, with the same disclaimers and rate-limits that apply to interactive use of the Service.
Base URL
https://bintools.io/api/
Endpoints
GET /api/lookup.php?bin={bin}
Look up a 6–8 digit BIN/IIN against our reference dataset. Returns JSON.
GET /api/zip_radius.php?country={US|CA}&zip={zip}&radius={miles}
Return all postal codes within the given radius of the supplied ZIP. Country-restricted to US and CA. Maximum radius: 200 miles. Maximum results: 500.
GET /api/banks.php?country={iso2}&q={query}
Auto-complete a bank name within the given country.
GET /api/countries.php?q={query}
Auto-complete a country name.
GET /api/random_bin.php
Return a random BIN entry from the reference dataset.
GET /api/ip-lookup.php?ip={ipv4|ipv6}
Return geolocation data for the given IP. Default: caller's IP.
GET /api/fraud-score.php?{params}
Return a heuristic fraud-risk score. See in-app documentation for parameter list.
Rate Limits
Per IP, soft-throttled at the application layer:
- 30 requests / minute
- 200 requests / hour
- 1500 requests / day
The zip_radius endpoint is more expensive and is throttled separately at the same numbers.
Authentication & Pricing
None. The endpoints are anonymous and free. We reserve the right to introduce optional API keys for higher rate limits in the future.
Stability
These endpoints are best-effort and may change without notice. They are documented here for transparency, not as a commercial contract. If you build on them, please pin a version of your client and be prepared to update.
Terms
Use of the API is subject to the same Terms of Service as use of the website.