Skip to content

Home

Jump to bottom
Herve Hildenbrand edited this page Apr 9, 2026 · 5 revisions

BGP Explorer

Python 3.11+ License: MIT Tests Anthropic

AI-powered CLI for querying live and historical internet routing data using natural language.

BGP Explorer lets network operators investigate routing incidents by asking questions in plain English. Claude AI orchestrates multiple data sources to provide comprehensive answers.

Key Features

  • Natural Language Queries - Ask questions about BGP routing in plain English
  • Multi-Step Agentic Investigation - Claude autonomously decides which tools to call
  • Multiple Data Sources - RIPE Stat, bgp-radar, Globalping, PeeringDB, Monocle, BGPStream
  • Real-time Anomaly Detection - Hijacks, route leaks, blackholes via bgp-radar
  • RPKI Validation - Check route origin validation status
  • AS Relationship Analysis - Peers, upstreams, downstreams from observed BGP data
  • Network Resilience Assessment - Score any network's resilience with recommendations
  • Contact Lookup - Find NOC contacts from PeeringDB for incident coordination

Quick Start

pip install bgp-explorer
bgp-explorer install-deps  # Auto-installs Go + Rust + monocle + bgp-radar
bgp-explorer chat          # All 8 investigation tools ready!

Use with Claude Code (No API Key)

Have a Claude Code subscription (Pro/Max)? Use BGP tools directly without an API key:

claude mcp add bgp-explorer -- bgp-explorer mcp
claude
> Search for Google's ASNs and show their peers

See Claude Code Integration for details.

Documentation

Page Description
Installation Prerequisites, installation steps, optional dependencies
Configuration Environment variables, .env setup, model selection
Claude Code Integration Use with Claude Code subscription (no API key needed)
Usage Guide CLI options, interactive commands, output formats
Examples Common queries and use cases
Tools Reference Complete list of 23 available tools
Architecture System design and data flow
Data Sources RIPE Stat, bgp-radar, Globalping, PeeringDB, Monocle
Real-time Monitoring Starting/stopping monitoring, event types
Troubleshooting Common issues and solutions
Contributing Development setup, testing, pull requests

Example Queries

> Who originates 8.8.8.0/24?
> What prefixes does AS15169 announce?
> Check RPKI status for 1.1.1.0/24 from AS13335
> Show me the upstream providers for Cloudflare
> Are there any BGP hijacks right now?
> Ping 8.8.8.8 from multiple locations worldwide
> Assess the resilience of AS15169

License

MIT License - See LICENSE for details.

Clone this wiki locally