ssid.ai vs maclookup.app
Both resolve a MAC address to its registrant, both read all five IEEE registries down to the MA-S and IAB sub-blocks, and both tell you when the address is randomized. Pick maclookup.app for burst rate and for bulk: 10 requests a second without a key against ssid.ai's 60 a minute, plus downloadable JSON and CSV databases. Pick ssid.ai when the question goes past the vendor name: router default logins cited to the manufacturer, a compliance dataset with a free JSON feed, and an MCP server. maclookup.app has stopped issuing API keys; ssid.ai never needed one.
Last updated 2026-09-06 · maclookup.app limits quoted from their rate-limits page
Side by side
| ssid.ai | maclookup.app | |
|---|---|---|
| Response | JSON: vendor, blockType, block start/end, kind, randomized, cidRegistrant, confidence, source | JSON: company, address, country, blockType, blockStart/End, isRand, isPrivate |
| Randomized address | Yes — kind: randomized, vendor null | Yes — isRand: true, plus the CID registrant |
| Registries resolved | MA-L, MA-M, MA-S, IAB, CID, each to its assignee (longest prefix wins) | MA-L, MA-M, MA-S, IAB, CID, each to its assignee |
| Router default logins | Yes — 424 models, manufacturer-cited | No |
| Compliance dataset | Yes — free JSON feed | No |
| MCP server | Yes — ssid-mcp on npm | No |
| Free lookup, no key | Unlimited per day, 60 / min burst | 10 / sec, 25,000 per 6 hours |
| API keys | Optional, free; raises burst headroom | New registrations discontinued; existing keys keep 50 / sec until April 2027 |
| Paid tiers | $10 / mo and $100 / mo, metering router + compliance data | None published (/pricing is a 404) |
| Database download | Router dataset, CSV + JSON, CC BY 4.0; no OUI dump | JSON and CSV vendor databases, Cisco vendorMacs.xml |
| Vendor data refresh | IEEE MA-L, re-fetched daily at 04:00 | “Last update: 4 September 2026” on the homepage |
maclookup.app limits and key policy are quoted from maclookup.app/api-v2/rate-limits and /api-v2/token-deprecated, checked 2026-09-04. Check them before relying on the numbers here.
Where maclookup.app is the right answer
Corrected 2026-09-06. This page originally ran a coverage finding here: the IEEE hands out large blocks (MA-L, 24-bit) to big vendors and smaller ones (MA-M 28-bit, MA-S 36-bit, the older IAB) to everyone else, the small blocks sit inside MA-L prefixes the IEEE Registration Authority holds on paper, and ssid.ai stopped at the MA-L table while maclookup.app resolved through to the company that actually got the small block. That was true and it was a real gap. It was found by writing this page, and it is fixed. ssid.ai now ingests all five registry files daily and matches the longest prefix:
$ curl "https://api.maclookup.app/v2/macs/70:B3:D5:12:34:56"
{ "macPrefix": "70B3D5123", "company": "Amfitech ApS", "country": "DK",
"blockType": "MA-S", "blockSize": 4095, "isRand": false } # HTTP 200
$ curl "https://ssid.ai/api/v1/lookup?mac=70:B3:D5:12:34:56" # before 2026-09-06
{ "vendor": { "organization": "IEEE Registration Authority" } } # the block holder, not the assignee
$ curl "https://ssid.ai/api/v1/lookup?mac=70:B3:D5:12:34:56" # now
{ "oui": "70B3D5", "kind": "universal",
"vendor": { "organization": "Amfitech ApS" }, "blockType": "MA-S",
"block": { "start": "70B3D5123000", "end": "70B3D5123FFF" },
"confidence": 1 } # HTTP 200The finding stays on the page instead of being deleted, because a comparison that quietly edits out its own losses is not worth reading. IoT and industrial devices are disproportionately on MA-S and IAB blocks, and “IEEE Registration Authority” was a correct answer that told you nothing. maclookup.app was the better lookup for those addresses until this shipped.
Rate. Without a key, maclookup.app allows 10 requests a second and 25,000 per six hours. ssid.ai allows unlimited requests per day but caps bursts at 60 a minute without a key and 300 a minute on the Pro tier. For a scan that resolves a few thousand addresses in one go, maclookup.app finishes first. It has also run since 2018, ships downloadable JSON and CSV databases and a Cisco vendorMacs.xml export, and its homepage showed a refresh dated the day we checked.
Where ssid.ai is different
Randomized-address detection is not the difference here; both services flag it, and maclookup.app even names the CID registrant behind an Android private address. The difference is what ssid.ai holds besides the vendor table:
- Router default logins across 424 models: gateway IP, admin username, password and reset steps, each transcribed from the manufacturer's own documentation with the source URL attached. A field with no citation does not publish. The same API and the same MCP server answer “whose device is this” and “how do I log into the router it is on”.
- The compliance index: 72% of 424 tracked models no longer ship a universal default password, the pattern the UK PSTI Act and the EU Cyber Resilience Act target, with a free JSON feed and the whole dataset published as CSV and JSON under CC BY 4.0.
- An MCP server.
npx -y ssid-mcpgives an assistantlookup_macandsubmit_correctionas typed tools, no key. - A
sourceobject on every lookup naming the IEEE registry URL, and a dated record of prefixes whose registrant changed since 2016, on each directory page.
What changed at maclookup.app
Their key-deprecation page says new API key registration has been discontinued and that existing keys keep their higher limit (50 requests a second) until April 2027. No pricing page exists (the URL is a 404), so there is no paid path to a higher limit after that date. If you built on a maclookup.app key, April 2027 is the date to plan around. ssid.ai's lookup has no key requirement and no daily cap, which is stated in full on /pricing.
How to decide
Ask two questions. Does your traffic include devices on small IEEE blocks, and do you need thousands of answers in a minute? If yes to either, maclookup.app resolves further and faster. Do you need to go from a MAC address to the router it sits behind, or to hand an assistant a tool instead of a URL? If yes, that is the job ssid.ai is built for, and the two can sit side by side: maclookup.app for resolution, ssid.ai for the router and compliance data.
FAQ
- Is ssid.ai or maclookup.app better for MAC address lookup?
- For resolving the prefix itself they now answer the same. Both ingest all five IEEE registries and both resolve the MA-M, MA-S and IAB sub-blocks to the company holding them. Until 2026-09-06 ssid.ai returned the MA-L block holder ("IEEE Registration Authority") for those ranges; it now matches the longest prefix and returns the assignee, with a blockType field naming the registry that answered. maclookup.app still allows 10 requests a second without a key against ssid.ai's 60 a minute, and ships downloadable JSON and CSV databases. ssid.ai is the better pick when the vendor name is not the whole answer: router default logins for every model in its directory, each cited to the manufacturer, a compliance index with a free JSON feed, and an MCP server, none of which maclookup.app publishes.
- Does maclookup.app still issue API keys?
- No. Its /api-v2/token-deprecated page (checked 2026-09-04) says registration of new API keys has been discontinued. Everyone can use the API without a key at 10 requests a second and 25,000 requests per 6 hours; holders of existing keys keep 50 requests a second until April 2027. ssid.ai has never required a key for MAC/OUI lookup; a free key only raises the burst ceiling.
- Do ssid.ai and maclookup.app both detect randomized MAC addresses?
- Yes, and since 2026-09-06 both report the CID registrant too. For DA:A1:19:5F:2C:88, maclookup.app answers isRand: true with the registrant of that CID block (Google, Inc.), because DA:A1:19 is a registered Company ID that Android generates from. ssid.ai answers kind: "randomized", randomized: true, vendor: null, confidence: 0, with a plain-English explanation, and now adds cidRegistrant: Google, Inc. alongside. ssid.ai keeps vendor null deliberately: the device generated the address, so no manufacturer assigned it, and the registrant of the ID it generated from is a different fact.
- Which resolves more MAC prefixes, ssid.ai or maclookup.app?
- They are level as of 2026-09-06. On 2026-09-04 maclookup.app counted 40,112 MA-L, 6,579 MA-M, 7,185 MA-S, 4,578 IAB and 221 CID entries and resolved the MA-S address 70:B3:D5:12:34:56 to Amfitech ApS, while ssid.ai ingested only MA-L and returned "IEEE Registration Authority" for it. ssid.ai now ingests all five files daily and returns Amfitech ApS for that address with blockType MA-S and the block bounds. This page recorded the gap while it was real and records the fix on the date it shipped rather than deleting the finding.
- Does maclookup.app have an MCP server?
- No. maclookup.app publishes an HTTP API (v2), client libraries and downloadable JSON and CSV databases; an npm search on 2026-09-04 finds a client package (@logocomune/maclookup) and no MCP server. ssid.ai publishes ssid-mcp on npm, which exposes lookup_mac and submit_correction as MCP tools over stdio with no API key.
- Is there an API for router default credentials?
- ssid.ai has one; maclookup.app does not. ssid.ai's router directory returns gateway IP, default username, default password and reset steps per model, each transcribed from the manufacturer's documentation with the source URL on the field, over the same API and the same MCP server as the MAC lookup. The dataset is also published as CSV and JSON under CC BY 4.0. maclookup.app's scope is MAC vendor resolution and vendor browsing.