TunnelMind
reputation API for IPs, ASNs, and ad-tech supply chains
Last verified:
What is TunnelMind?
TunnelMind is a trust attestation platform for the agentic internet, building a correlated graph of who is attacking, who is watching, and who can be trusted. The platform provides one signed corpus with four analytical lenses: Scry (signed observations of hostile network actors including IPs, ASNs, behaviors, and threat-feed overlap), Sigil (programmatic-advertising supply-graph trust layer for publishers, SSPs, DSPs with entity trust scoring), Tracker (demand-side graph showing who is watching whom on the open web with recurring SDK fingerprints), and GhostRoute (routing integrity and sovereignty checking origin AS, RPKI route validity, and jurisdiction claims).
TunnelMind pricing
Pricing model: Freemium
TunnelMind offers a free tier for anonymous API access without authentication. The free tier includes 50 requests per day limit. Paid Pro/enterprise plans are available with API key authentication that determines rate limits. Specific pricing amounts for paid plans are not publicly disclosed on the website. The MCP servers run as Cloudflare Workers proxying the live API at data.tunnelmind.ai.
TunnelMind pros
- Signed observations provide cryptographic proof of hostile actor data
- Four fused lenses create cross-lens verdicts no siloed incumbent can compute
- MCP servers support Streamable HTTP and JSON-RPC 2.0 for AI agent integration
- Scry provides IP, ASN, behavior, and threat-feed overlap classification
- Sigil validates ads.txt authorization and OpenRTB SupplyChain objects
- Tracker identifies recurring SDK fingerprints and tracker-operator entities
- GhostRoute verifies RPKI route validity and sovereign jurisdiction claims
- Cross_lens_verify tool fuses Scry and Sigil for combined domain/IP/ASN verdicts
- ATAP attestation tools register identifiers and generate compliance receipts
- Entity trust scoring includes 14-day trend data
- Batch scoring supports up to 200 entities in one request
- IP type classification distinguishes datacenter vs residential vs mobile
- App bundle verification checks app-store bundle IDs
- Free tier available for anonymous API access without authentication
- Cloudflare Worker proxy ensures low-latency responses under 100ms typical
TunnelMind cons
- No public pricing page with detailed plan costs disclosed
- API key required for paid tier beyond free anonymous access
- Live probe latency can reach 10 seconds at p99 for external DNS/HTTP calls
- MCP server configuration requires external API key setup
- Limited documentation publicly available beyond server cards
- Focus primarily on ad-tech and security use cases, not general web trust
- No self-hosted or offline deployment option mentioned
- European users may face data sovereignty concerns with US-based service
Frequently asked questions about TunnelMind
What is TunnelMind's main purpose?
TunnelMind provides trust attestation for the agentic internet by building one correlated graph of who is attacking, who is watching, and who can be trusted, with signed receipts and an open protocol for silicon-root attestation.
What are the four lenses in TunnelMind?
The four lenses are Scry (hostile network actor observations), Sigil (advertising supply-graph trust layer), Tracker (demand-side watching graph), and GhostRoute (routing integrity and sovereignty verification).
How do AI agents integrate with TunnelMind?
AI agents use MCP servers that support Streamable HTTP and JSON-RPC 2.0, with three official servers: mcp-data.tunnelmind.ai (43 tools), mcp.tunnelmind.ai/scry (12 tools), and mcp.sigil.tunnelmind.ai/sigil (11 tools).
What does the cross_lens_verify tool do?
cross_lens_verify fuses data from TunnelMind's Scry and Sigil datasets to provide a combined fused verdict on domains, IPs, or ASNs, combining attack signal times trust signal for one answer.
What is ATAP in TunnelMind?
ATAP is the Agentic Trust Attestation Protocol, which includes tools to register ATAP AIT identifiers for media-buyer agents, witness bid/budget events into the attestation chain, and generate ATAP compliance Receipt ZIP files.
Does Sigil validate ads.txt?
Yes, Sigil includes sigil_verify_ads_txt tool that performs ads.txt seller-authorization checks for programmatic advertising supply chain verification.
What IP types can Sigil classify?
Sigil_verify_ip_type classifies IPs as datacenter, residential, or mobile, helping agents determine the nature of the network actor.
Is there a free tier for TunnelMind API?
Yes, anonymous callers get the free tier without authentication, which includes 50 requests per day. The MCP servers are available for free tier access.
What standards does TunnelMind edit?
TunnelMind edits three standards: OAI (Observed Actor Identifier), ATAP (Agentic Trust Attestation Protocol), and ATAP profiles for agentic trust attestation.
How fast is the TunnelMind API response time?
Database hits typically respond under 100ms with p99 under 300ms. Live probes typically take 2-5 seconds with p99 at 10 seconds due to external DNS/HTTP calls.