The PHP application provides the complete request path: key authentication, scope checks, atomic credits, local dataset lookup, durable audit and provenance. Configure a PHP host and activate an approved source before requesting a result.

1. Set up the host

Use PHP 8.3+, MySQL 8 and PDO SQLite (for immutable range artifacts). Install the locked Composer dependencies and copy config.example.php to a private config.local.php. Set the web root to dist/ and copy the three files in hostinger/ into it.

composer install --no-dev --prefer-dist
php server/cli.php migrate

2. Activate an owner-approved dataset

Source rights must be approved separately for service use and source-level exposure. Imports stage a new file, validate ranges, quarantine large record-count deltas, and change the active pointer transactionally.

php server/cli.php approve-source dbip-lite OWNER-APPROVED EXPOSURE-APPROVED
php server/cli.php import dbip-lite /private/approved-city.csv YYYY-MM-DD

3. Verify your account and create a key

Register, open the single-use verification link delivered by the mail worker, and create a key in the workspace. Save the full key when it is displayed; only its digest is stored.

curl "https://YOUR_HOST/v1/ip/8.8.8.8" \
  -H "Authorization: Bearer $ORIGOOO_KEY"

The api.orig.ooo examples describe the proposed production domain. Use your configured host until DNS is connected.

4. Handle unknowns

Check warnings and source versions. Use explicit unknown-country handling. An unavailable source is a 409/503; the API never substitutes a made-up location.