The endpoint

GET https://api.macadress.com/v1/vendor/{mac} returns the vendor name as plain text. No key is needed, and it allows 1,000 lookups per day per IP. It takes a full MAC in any common format: 3C:22:FB:12:34:56, 3c-22-fb-12-34-56 or 3C22FB123456.

curl

curl https://api.macadress.com/v1/vendor/3C:22:FB:12:34:56

JavaScript (Node 18+ or the browser)

const vendor = await fetch(
  "https://api.macadress.com/v1/vendor/3C:22:FB:12:34:56"
).then(r => r.text());
console.log(vendor); // Apple, Inc.

Python

import requests
print(requests.get("https://api.macadress.com/v1/vendor/3C:22:FB:12:34:56").text)

Go

resp, err := http.Get("https://api.macadress.com/v1/vendor/3C:22:FB:12:34:56")
if err != nil { log.Fatal(err) }
defer resp.Body.Close()
body, _ := io.ReadAll(resp.Body)
fmt.Println(string(body))

PowerShell

Invoke-RestMethod "https://api.macadress.com/v1/vendor/3C:22:FB:12:34:56"

When you need more than a name

The keyed endpoint GET /v1/mac/{mac} returns JSON with the IEEE block type (MA-L, MA-M or MA-S), country, unicast/multicast, local/universal and a randomization estimate. POST /v1/mac/batch takes up to 100 addresses at once, which suits enriching a DHCP lease table or a SIEM export. A free key includes 1,000 lookups per month, and there are official clients for PHP, JS, Python, Go, PowerShell and C#. Details are in the API docs.

A note on MA-M and MA-S blocks

Many lookup scripts only match the first 6 hex characters. That fails for vendors with smaller IEEE blocks (MA-M is 28 bits, MA-S is 36 bits), where several companies share the same first 24 bits. A good lookup matches the longest block first. That's why a local copy of just the MA-L list gives wrong answers for some industrial and IoT devices.

Offline or air-gapped?

If MAC addresses can't leave your network, a self-hosted license runs the same API on your own infrastructure.