
Detect VPNs, proxies, Tor, bots and antidetect browsers at signup, login and checkout.
Maskbreak API is a free Security API that requires apiKey authentication, is served over HTTPS and supports CORS, so it can be called from the browser.
REST API for VPN, residential proxy, fake-browser and bot detection. Node, Python and PHP SDKs, plus MCP. Free plan: 10,000 visitor checks a month.
Details from maskbreak.com.

Unified API suite · now live
Geocode an address, validate an email, track a flight or pull stock data with one account, one dashboard and one API key.
Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)
Reputation of IPs, domains, URLs and file hashes from aggregated threat feeds, plus CVE lookups
IP network class (residential, mobile, hosting, VPN, residential proxy, Tor) with a confidence score
The Maskbreak API is provided by Maskbreak (maskbreak.com). REST API for VPN, residential proxy, fake-browser and bot detection. Node, Python and PHP SDKs, plus MCP. Free plan: 10,000 visitor checks a month.
Yes. The Maskbreak API is listed in the Security category of the public-apis directory, which only includes APIs that are free or have a free tier. Check its documentation for rate limits and paid plans.
Yes. The Maskbreak API uses apiKey authentication, so you need to register for credentials before making requests.
Yes. The Maskbreak API supports CORS, so front-end JavaScript can call it directly.
Yes. The Maskbreak API is served over HTTPS, so it's safe to use in production.