API documentation.

The vendor name, as plain text, and nothing else. No API key, no signup: the fastest way to resolve a MAC. Free for 1,000 lookups per UTC day from one IP address (plus 60 requests/minute). Send a key the same way as any other endpoint and that daily ceiling becomes your plan's cycle quota instead, with the first 1,000 a day still not counted against it, and your plan's requests/minute in place of the anonymous 60.

Replacing another keyless service? The macvendors.com API migration guide has a side-by-side comparison and copy-paste snippets.

Request

curl https://api.macadress.com/v1/vendor/00:03:93:AB:12:34

Response 200

Apple, Inc.

No vendor to return 404

A syntactically valid address with no name behind it. The body is one of:

Invalid input 400

invalid mac address

Over the limit 429

Body rate limited once an IP passes 1,000 lookups in a UTC day (with a Retry-After header) or exceeds 60 requests/minute. Body over quota for a keyed caller past the daily grant who has used their plan's cycle quota.

Responses set Access-Control-Allow-Origin: *, so browser code can call this directly, and a Cache-Control of one day for a hit, one hour otherwise. See the overview for how it compares to other free MAC vendor APIs.

Look up a single MAC address.

Request

curl https://api.macadress.com/v1/mac/00:03:93:AB:12:34 \
  -H "Authorization: Bearer mk_your_api_key"

Response 200

{
  "mac": "00:03:93:AB:12:34",
  "valid": true,
  "oui": "00:03:93",
  "organization": "Apple, Inc.",
  "vendor_address": "1 Infinite Loop Cupertino CA US 95014",
  "country": "US",
  "block_type": "MA-L",
  "address_capacity": 16777216,
  "range_start": "00:03:93:00:00:00",
  "range_end": "00:03:93:FF:FF:FF",
  "registered": true,
  "transmission_type": "unicast",
  "administration_type": "universally_administered",
  "locally_administered": false,
  "slap_quadrant": null,
  "eui64": "02:03:93:FF:FE:AB:12:34",
  "ipv6_link_local": "fe80::203:93ff:feab:1234",
  "potentially_randomized": false,
  "randomization_confidence": "none",
  "vendor_lookup_reliable": true,
  "is_zero": false,
  "is_broadcast": false,
  "explanation": "This is a universally administered unicast address with a registered vendor prefix.",
  "is_private": false,
  "matched_prefix": "00:03:93",
  "prefix_length": 24,
  "registry": {
    "source": "IEEE",
    "record_type": "MA-L",
    "record_updated_at": null,
    "database_synced_at": "2026-08-22T03:10:00Z"
  },
  "device": {
    "category": "consumer_electronics",
    "possible_categories": ["smartphone", "tablet", "computer", "media_device"],
    "confidence": "medium",
    "inference_source": "vendor_profile",
    "exact_model_known": false
  },
  "virtualization": { "detected": false, "platform": null, "confidence": "none", "signals": [] },
  "special_use": { "detected": false, "type": null, "protocol": null, "name": null, "source": null, "confidence": "none" },
  "vendor_location": {
    "raw": "1 Infinite Loop Cupertino CA US 95014",
    "address_line": null,
    "city": null,
    "region": null,
    "postal_code": null,
    "country_code": "US",
    "country_name": "United States",
    "parse_confidence": "low"
  },
  "randomization": { "potentially_randomized": false, "confidence": "none", "signals": [], "alternative_explanations": [] },
  "local_vendor_derivation": { "detected": false, "method": "", "universal_mac": null, "confidence": "none", "organization": null, "country": null, "matched_prefix": null, "block_type": null, "lookup_url": null, "device": null, "signals": [] },
  "assignment": { "registered_at": null, "first_seen_at": "2026-08-22", "last_changed_at": "2026-08-22" },
  "vendor": {
    "id": "apple-inc",
    "registered_name": "Apple, Inc.",
    "canonical_name": "Apple, Inc.",
    "slug": "apple-inc",
    "block_count": 1553,
    "lookup_url": "https://macadress.com/vendor/000393"
  },
  "meta": {
    "request_id": "5249ebff-787d-4776-97c3-235a8c95823c",
    "api_version": "v1",
    "database_version": "2026-08-22",
    "processed_at": "2026-08-22T10:26:47Z",
    "cached": false
  }
}

vendor_location's address_line/city/region/postal_code only get filled in for the minority of IEEE addresses that use a clean comma-delimited format; the far more common space-only shape shown above yields just raw and country_code at "low" confidence rather than guessing where the street address ends and the city begins.

Invalid input 400

{"valid": false, "error": "invalid MAC address", "request_id": "19ee676c-4410-443f-813e-3bbb3433b4bf"}

Look up up to 100 addresses in one request. Invalid entries don't fail the whole batch, each result reports its own status. It's one HTTP call, but each address that resolves is billed against your cycle quota separately — 100 addresses in one batch draws down 100 lookups, same as 100 separate calls to GET /v1/mac/:mac would.

Request

curl -X POST https://api.macadress.com/v1/mac/batch \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer mk_your_api_key" \
  -d '{"macs": ["00:03:93:AB:12:34", "not-a-mac"]}'

# or with the key inline in the body instead of the header:
curl -X POST https://api.macadress.com/v1/mac/batch \
  -H "Content-Type: application/json" \
  -d '{"api_key": "mk_your_api_key", "macs": ["00:03:93:AB:12:34"]}'

Response 200 (abbreviated: each successful entry has every field shown in GET /v1/mac/:mac's example above)

{
  "count": 2,
  "results": [
    {
      "input": "00:03:93:AB:12:34",
      "mac": "00:03:93:AB:12:34",
      "valid": true,
      "organization": "Apple, Inc.",
      "matched_prefix": "00:03:93",
      "meta": { "request_id": "d204feb2-...", "api_version": "v1", "database_version": "2026-08-22", "processed_at": "2026-08-22T10:27:51Z", "cached": false }
    },
    {
      "input": "not-a-mac",
      "error": "invalid MAC address",
      "mac": "",
      "valid": false,
      "organization": null,
      "matched_prefix": null,
      "meta": { "request_id": "d204feb2-...", "api_version": "v1", "database_version": "2026-08-22", "processed_at": "2026-08-22T10:27:51Z", "cached": false }
    }
  ]
}

Each entry in results has the same shape as the single-lookup response, plus input (what you sent) and, on failure, error. Every item in one batch call shares the same meta.request_id: it's one HTTP request, even though it billed against your quota per address looked up.

Scan free-form text for anything that looks like a MAC address (colon/dash-separated or Cisco dot-grouped) and look up every one found, up to 100 per request. Useful for arp -a output, log dumps, or DHCP leases, anywhere you have a blob of text instead of a clean list of addresses. Same billing as /v1/mac/batch: one HTTP call, but each address found and resolved is billed against your cycle quota separately.

Request

curl -X POST https://api.macadress.com/v1/mac/extract \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer mk_your_api_key" \
  -d '{"text": "? (192.168.1.1) at 00:03:93:ab:12:34 on en0 ifscope [ethernet]"}'

Response 200 (abbreviated: each entry has every field shown in GET /v1/mac/:mac's example above)

{
  "count": 1,
  "truncated": false,
  "results": [
    {
      "input": "00:03:93:AB:12:34",
      "mac": "00:03:93:AB:12:34",
      "valid": true,
      "organization": "Apple, Inc.",
      "matched_prefix": "00:03:93",
      "meta": { "request_id": "d204feb2-...", "api_version": "v1", "database_version": "2026-08-22", "processed_at": "2026-08-22T10:27:51Z", "cached": false }
    }
  ]
}

Addresses are deduplicated and returned in first-seen order. truncated is true if the text contained more than 100 distinct addresses, only the first 100 were looked up. Each entry in results has the same shape as /v1/mac/batch's and bills against your quota the same way, per address looked up, not per request.

Search the registered vendor/block directory by organization name substring and/or country. Returns registered, non-private blocks only. Counts as one call against your plan quota, same as a single MAC lookup.

Request

curl "https://api.macadress.com/v1/vendors?query=Apple&country=US&limit=10" \
  -H "Authorization: Bearer mk_your_api_key"

Response 200

{
  "total": 1553,
  "blocks": [
    {
      "prefix_int": 915,
      "mask_bits": 24,
      "block_type": "MA-L",
      "organization": "Apple, Inc.",
      "address": "1 Infinite Loop Cupertino CA US 95014",
      "country": "US",
      "is_private": false,
      "first_seen_at": "2026-08-22T14:26:39Z",
      "last_changed_at": "2026-08-22T14:26:39Z"
    }
  ]
}

total is how many blocks match, independent of limit; blocks is the page actually returned. Omitting both query and country matches the entire registry (~58k non-private blocks), so total reflects that and only the first limit come back, not an error.

Returns 200 {"status": "ok"} when the database is reachable, 503 otherwise. For uptime checks, not counted against any quota.