Integrations
Extensions.
Drop macadress.com vendor, device-category, virtualization, and special-use enrichment into the tools your team already runs. Every extension uses the same API and the same API key.
Available now
SIEM · Available on Splunkbase
Splunk
A macaddresslookup search command that enriches events with the vendor, country, device category, virtualization platform, and randomization confidence for any MAC address field.
Threat intel · Merged into misp-modules
MISP module
Merged into MISP's official misp-modules repository. Queries macadress.com for a mac-address attribute and returns vendor identity, device category, virtualization, and special-use classification, inline on hover.
Threat intel · Merged into OpenCTI connectors
OpenCTI connector
An internal enrichment connector, merged into OpenCTI's official connectors repository, that enriches a Mac-Addr observable with vendor identity, device category, virtualization, randomization confidence, and a linked vendor Organization.
Automation
n8n node
A community node published on npm as n8n-nodes-macadress. Adds a MAC Address lookup step to any workflow, returning vendor, device category, virtualization, and randomization confidence. Also usable as an AI Agent tool.
Building your own
Anything that can make an HTTPS request can call the API directly: a single GET /v1/mac/:mac or a batched POST /v1/mac/batch of up to 100 addresses. See the API docs for request and response shapes, or the MCP server if you want an AI agent to do the lookups. Want an extension for a tool that isn't here yet? Tell us.