Packetrove

Packetrove

Network tools for humans and agents.

Packetrove helps developers and network administrators simplify firewall IP lists, subtract networks, convert IP ranges to CIDRs, and check a connection's public IP, and inspect PEM certificate bundles. Use the website for a quick calculation, the API or CLI for scripts, or connect AI agents through Model Context Protocol (MCP).

[Website](https://packetrove.com) · [CIDR calculator](https://packetrove.com/cidr-cover) · [CIDR subtraction](https://packetrove.com/cidr-subtract) · [IP range to CIDRs](https://packetrove.com/range-to-cidrs) · [My Public IP](https://packetrove.com/public-ip) · [Certificate Bundle Checker](https://packetrove.com/certificate-bundle)

What you can do

• Cover an IP list with one CIDR. Find the smallest IPv4 or IPv6 network covering your inputs, with its full address range and exact additional coverage.
• Subtract CIDR lists exactly. Remove excluded networks and copy the smallest CIDR list representing the remaining addresses, without adding addresses.
• Convert an IP range exactly. Enter inclusive start and end addresses and copy the minimal CIDR list covering that range, with an exact address count.
• Check a connection's public IP. See and copy the IPv4 or IPv6 address observed for the connection making the request.
• Inspect a PEM certificate bundle. Paste text or import a file in the browser. Review candidate issuer signatures, validity, duplicates, and an optional DNS hostname, with evidence and next steps.

The website supports ten languages. Hosted tools require no account or API key. All five tools are available through the website, Web API, and MCP. The CLI provides covering-CIDR calculations and public IP lookup.

Browse example results in the homepage gallery, then open a tool to enter your own inputs. Gallery previews use documentation addresses and make no live lookups.

Quick start

Open the CIDR calculator, or call the API:

curl https://api.packetrove.com/v1/cidr-cover \

-H 'Content-Type: application/json' \ -d '{"inputs":["203.0.113.1","203.0.113.2","203.0.113.6"]}'

The result is 203.0.113.0/29: eight addresses, including five beyond the three inputs. Review this expansion before using it in an allowlist or blocklist. API address counts are decimal strings to preserve exact IPv6 values.

Use it your way

The website's main navigation opens browser tools. Its footer groups the API, MCP, and CLI guides; the CLI guide is in English.

Tools share flat public names across interfaces. For changes to existing calls and commands, see the name migration guide.

Privacy and scope

• Website CIDR calculations and certificate checks run locally in your browser; CLI calculations run offline. API and remote MCP calculations send inputs to the server.
• Certificate checks accept public certificates only and reject private keys. They do not validate full trust paths, revocation, or deployment safety.
• Public IP checks make a network request and observe one address family per check. A VPN or proxy supplies its exit address; a hosted MCP client may observe a different connection from your computer's. Browser and CLI lookups have a ten-second deadline and a 64 KiB response limit.
• The application does not store or log returned IP addresses. Lookup results and errors are not cached.
• MCP execution counts use operational events with the tool name, outcome, controlled error code, and traffic source. Verified automated checks may also record an automation run identifier. Inputs, results, raw request headers, and automation tokens are excluded. The deployment guide describes the free-tier limits and per-tool queries.
• Optional MCP submit-feedback is disabled by default. When enabled, it sends a user-authorized synthetic report to hello@packetrove.com by email, with approximate IP-based quotas and mailbox retention managed manually. See the MCP guide.
• The Privacy Policy describes remote input processing, browser storage, operational error logs, hosting, retention, and user choices. Cloudflare's platform processing is separate from application storage and logging.

For input formats, limits, and detailed behavior, see the covering-CIDR, CIDR subtraction, IP range conversion, certificate diagnostics, and public IP guides.

Development

Use the Node.js version in .node-version and the pnpm version in package.json. Local development needs no production credentials.

pnpm install

pnpm dev:web

Open http://127.0.0.1:5173. For the API and MCP, run pnpm dev:api in another terminal; they listen at http://localhost:8787. Local public IP lookup requires Cloudflare connection metadata and reports CLIENT_IP_UNAVAILABLE without it. See Contributing for complete setup, checks, and Git hooks.

Documentation and contributing

• Support · Terms of Service
• Contribute or report an issue
• Self-hosting
• Continuous integration and deployment
• Product releases, CLI publishing, and MCP Registry publication · Changelog

License

Packetrove is licensed under the MIT License. Bundled components retain their own licenses; see the website notices and CLI notices. Vendored validation schemas retain their Apache-2.0 license and provenance.