NetAPI

com.netapiPublished by netapi.comOfficial publisherv0.2.0Updated Nov 9, 2026

Domain data: Top 1M domain ranks, compromised checks, new domain search, registered domain lists.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server giving assistants NetAPI domain intelligence: compromised domain/IP checks, new-domain searches, TLD, registrar and DNS-provider stats, and…

What you can do
  • Check whether a domain or IP appears in the compromised feed, with block reason and registrar
  • Search domains registered in the last 1-7 days by keyword for brand, typosquatting or phishing monitoring
  • Look up TLD statistics, registrar and DNS-provider size, abuse rate and growth
  • Get a domain's Top 1M and in-TLD rank, country or TLD top websites, and slices of the Top 1M list
  • List all 1,584 zones with their figures
  • With a paid plan: domain and reverse-IP lookups, temporary dataset download links, and account plan info
When to use it
Useful when an assistant needs to vet a domain or IP for abuse, watch newly registered domains for brand or phishing risk, or pull domain-market statistics such as TLD, registrar and popularity rankings.
Requirements
Remote Streamable HTTP endpoint; no local install. The main endpoint requires a NetAPI account via OAuth sign-in or an Authorization Bearer API token; a public endpoint works without an account but lists only the free tools. Paid tools need a NetAPI plan. Rate limits apply per IP or account.
Before you install
Signing in grants the app access to your NetAPI account, so review and disconnect connected apps in the dashboard when done. Paid tools require a NetAPI plan, and download links are temporary. Free Top 1M and compromised data is CC BY 4.0 and requires crediting NetAPI with a link. Every tool call is forwarded to the NetAPI JSON API.

Installation

In SourceWeft

  1. Open NetAPI in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.netapi%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "netapi": {
      "type": "http",
      "url": "https://mcp.netapi.com/mcp"
    }
  }
}

README

NetAPI MCP server

An MCP server that gives AI assistants and agents (Claude, Cursor, ChatGPT, Windsurf, VS Code Copilot and any other MCP client) access to NetAPI domain intelligence: registered domains of 1,584 TLDs, newly registered and deleted domains, DNS-provider and registrar data, the free NetAPI Top 1M popularity ranking and the compromised domain / IP feed.

Endpoints (Streamable HTTP):

URLWhoWhat
https://mcp.netapi.com/mcpsigned-in NetAPI account (OAuth, or Authorization: Bearer <api_token>)all tools; a free account is enough for the free tools with higher limits, a plan unlocks the paid ones
https://mcp.netapi.com/mcp/publicno accountthe free tools only (the account and plan tools are not listed there), anonymous limits

Tools

Free (no plan needed):

ToolWhat it answers
check_compromisedIs this domain or IP in the compromised feed (malware, phishing, abuse)? Seen in the last 24 h (an IP: 48 h) or ever, block reason, registrar.
search_new_domainsDomains registered in the last 1-7 days that contain a string: brand monitoring, typosquatting, phishing, keyword trends.
tld_statsRegistry, active domains, new / deleted in 24 h, growth over 7-365 days, abuse rate, Top 1M presence, policies of a TLD.
domain_rankRank of a domain in the NetAPI Top 1M and inside its TLD.
top_websitesThe most popular websites of a country or TLD (Germany = .de, .fr, .io ...).
top_1mA slice of the Top 1M list.
registrar_infoSize, rank and abuse rate of a registrar.
dns_provider_infoDomains, market share and growth of a DNS provider.
list_zonesAll 1,584 zones with their figures.

With a NetAPI plan:

ToolWhat it answers
lookup_domainNameservers, IP, country, registration / expiration dates, registrar of a domain.
lookup_ipDomains hosted on an IP (reverse IP).
get_download_urlA 24-hour link to a domain list or dataset file: the domains of a zone (active / new / deleted, one zone or all zones), of a DNS provider or of a registrar. Lists = domain names (any plan), datasets = one row per domain with nameservers, IP, country, emails, phones (Plus or Pro).
account_infoPlan and limits of the connected account.

Free data (Top 1M, compromised feeds) is published under CC BY 4.0: credit NetAPI and link to https://netapi.com/. Full description of the tools and the connection steps: netapi.com/help/mcp/.

Connect

The server speaks standard MCP OAuth (authorization server https://netapi.com, dynamic client registration, PKCE), so clients that support it show a NetAPI sign-in when you add https://mcp.netapi.com/mcp: sign in with your email code or Google, click Allow access, done. Connected apps are listed in your dashboard, where you can disconnect them.

claude.ai / Claude Desktop: Settings → Connectors → Add custom connector → URL https://mcp.netapi.com/mcp → Connect.

ChatGPT: install NetAPI from the ChatGPT plugin directory and sign in when asked. Developer mode still works: Settings → Connectors → Add → MCP server URL https://mcp.netapi.com/mcp, authentication OAuth.

Claude Code

bash
claude mcp add --transport http netapi https://mcp.netapi.com/mcp

then /mcp inside Claude Code to sign in. Without an account:

bash
claude mcp add --transport http netapi https://mcp.netapi.com/mcp/public

Cursor (~/.cursor/mcp.json or the project's .cursor/mcp.json): Cursor signs in through OAuth when you add the URL; a NetAPI API token works as well:

json
{  "mcpServers": {    "netapi": {      "url": "https://mcp.netapi.com/mcp",      "headers": { "Authorization": "Bearer YOUR_API_TOKEN" }    }  }}

Other clients: add a remote MCP server of type "http" / "streamable-http" with one of the URLs above.

Rate limits

Without an account (/mcp/public): 30 requests per minute and 1,000 per day per IP for point lookups, 10 / 200 for list tools, 6 / 100 for search_new_domains (100 results per call). A free NetAPI account raises them to 60 / 5,000, 30 / 1,000 and 30 / 500 (500 results per call); paid plans raise them further, unlock lookup_domain, lookup_ip and get_download_url, and Pro has no daily caps. Limits and error messages come from the JSON API: see the request-limit table and the MCP server page.

How it works

The Worker is a thin layer: every tool call is one GET request to the NetAPI JSON API (https://netapi.com/api-json/), the answer is returned to the client as JSON text. Tokens are validated by the site and cached for a minute; nothing else is stored in the Worker. /.well-known/oauth-protected-resource points clients to the authorization server. Files are never streamed through it: get_download_url returns a temporary link instead.

Development

bash
npm installnpm run typechecknpm run dev        # http://localhost:8787/mcp (and /mcp/public)npm run deploy     # wrangler deploy (or connect the repo in the Cloudflare dashboard)

Test with the MCP Inspector: npx @modelcontextprotocol/inspector, add a Streamable HTTP server with http://localhost:8787/mcp/public (or the production URL to test the sign-in).

MCP Registry

The server is listed in the MCP Registry as com.netapi/mcp (remote https://mcp.netapi.com/mcp); server.json is its manifest. A new version: bump version in server.json, mcp-publisher login http --domain netapi.com (domain proof via /.well-known/mcp-registry-auth; dns works too), then mcp-publisher publish from this directory.

License

MIT for the code in this repository. NetAPI data is subject to the Terms of Service; the free datasets are CC BY 4.0.

Source: README.md at commit 0c0dd78

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v0.2.0LatestSep 27, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts