MSPs & integrators
Check client IPs for blacklisting and exposure before they complain
AdminKit's free tools let MSPs check a client's blacklist status and exposed services today, so problems like a bounced-email complaint can be caught proactively instead of one asset at a time after a client reports it, with a scriptable Check API planned for checking many clients at scale.
Updated October 21, 2026
The problem
MSPs and integrators are usually responsible for more client IPs and domains than they can realistically check by hand on a regular basis. In practice, that often means problems get noticed reactively: a client’s email starts bouncing, and only then does anyone check whether the client’s IP has landed on a blacklist.
Forward-facing services are another recurring issue. A client’s database, an MQTT broker, or an admin panel can end up reachable from the public internet without anyone having decided that on purpose, often left over from a quick setup or a default configuration nobody revisited. Spotting this across dozens or hundreds of client assets, one at a time through a web form, doesn’t scale well.
None of this is unique to any one client; it’s a natural result of managing many networks you don’t personally sit inside of, with limited time to check each one individually. The underlying checks are simple on their own — the challenge is doing them consistently across a growing client list rather than only when something has already gone wrong.
What you can do for free today
- Check if an IP is blacklisted — check this for a client proactively instead of waiting for a bounce complaint.
- Check a client’s public IP and CGNAT status — useful context when investigating exposure or blacklist findings.
- Check which commonly-exposed ports are open — a quick way to spot an exposed database, broker, or admin panel on a client’s IP.
- Check a client’s SSL certificate — flags expired or misconfigured certificates before they cause an outage.
- Check a client’s HTTP response headers — useful for spotting missing security headers on client-facing sites.
What AdminKit will add
AdminKit’s Check API is in early access and development, aimed at letting MSPs script these same checks across many client assets instead of running them one at a time through the website. White-label reporting for MSPs is a later milestone under consideration, but it isn’t built yet, and there’s no dashboard to point to today — the honest status is that the Check API is the first step toward checking at scale, and reporting on top of it would come later.
For now, the practical path is to keep using the free tools above for spot checks and ad hoc investigations, and to treat the Check API as something to evaluate once it’s further along, rather than something to build a workflow around today.
This page is general guidance, not a security audit of your specific network — see our disclaimer for what AdminKit's guidance does and does not commit to.
Frequently asked questions
How do we usually find out a client's IP got blacklisted?
Often the client notices first, when their email stops arriving or bounces, and reports it before the MSP has checked anything. The blacklist-check tool lets you check proactively instead of waiting for that call.
Can AdminKit check multiple client IPs automatically?
Not yet in an automated way; today the free tools check one asset at a time through the website. A scriptable Check API for checking many client assets at scale is in early access and development.
Is there a white-label reporting dashboard for MSPs?
No, that's not built yet. It's a later milestone under consideration, not something available today, and this page won't claim otherwise.
What kinds of exposed services should we be checking for on client IPs?
Common ones include open admin panels, exposed databases, and MQTT brokers left reachable from the internet without anyone intending that. The port-check and http-headers tools can help spot some of these from outside.
Can AdminKit see inside a client's network without us doing anything?
No. From outside, AdminKit only sees what's reachable at the client's public IP, the same as any visitor would see. It would only see more if the client specifically opted into something like a DNS change or an agent.
Want AdminKit set up for you?
Tell us about your setup — we will follow up about early access and, if you need it, expert help.