Netintel Mcp

io.github.kjgueyePublished by GitHub account kjgueyev1.1.68Updated Oct 30, 2026

MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

VerifiedSTDIODesktop onlyWeb Search & ScrapingFinanceSecurity & Monitoring

Overview

AI-generated overview

NetIntel MCP gives an assistant 126 pay-per-call network intelligence tools — DNS, SSL, WHOIS, email security, IP reputation, OSINT and web extraction — paid…

What you can do
  • Look up DNS records, WHOIS/RDAP data, SSL certificates, DNSSEC, propagation, subnets and ASNs
  • Check email authentication (SPF, DKIM, DMARC), email deliverability and address validity
  • Assess IP and URL risk: geolocation, blacklists, reputation, redirect chains, security headers, cloud and tech fingerprints
  • Gather OSINT and web data: breach checks, username and domain availability, certificate transparency, Wayback, GitHub, npm, RSS, sitemaps, page and PDF extraction, web search
  • Run AI text tasks: summarize, translate, classify, moderate, extract entities, invoices, resumes and tables, convert to JSON or Markdown, embeddings, and pay-per-call OpenAI models
  • Query crypto and market data…
When to use it
Useful when an assistant needs quick domain, IP, TLS or email-security due diligence, OSINT lookups, or web page and PDF extraction without signing up for separate API keys. Also handy for one-off AI text processing and crypto or market data where per-call payment is preferable to a subscription.
Requirements
Runs locally via npx (Node.js). No API key needed: without a key, paid tools return the exact request and price for the agent's own x402 wallet (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP). Optionally set EVM_PRIVATE_KEY for a dedicated wallet holding USDC on Base so the server pays automatically; NETINTEL_MAX_PER_CALL_USD and NETINTEL_MAX_SESSION_USD cap spending. Network access to netintel.dev and router.netintel.dev.
Before you install
Every tool costs money in USDC on Base, from $0.001 to $0.65 per call; with EVM_PRIVATE_KEY set, every 402 response is paid automatically, so confirm paid calls with the user first. A private key in the environment is a wallet secret — prefer the agent's own wallet. Tool inputs are passed to third parties (OpenAI, Anthropic, Exa, AbuseIPDB, AlienVault OTX, CoinGecko, blockchain explorers, GitHub), and NetIntel retains paid-call inputs and results.

Installation

In SourceWeft

  1. Open Netintel Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

netintel-mcp

MCP server for NetIntel — 126 network intelligence tools for AI agents. DNS, SSL, WHOIS, email security, cloud fingerprinting, OSINT and more. Pay-per-call via x402 — the NetIntel API accepts USDC on Base or Solana. No API keys, and no private key to paste: pay from the wallet your agent already has (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP), or give this server a dedicated wallet key. Plus 3 router tools that find the best x402 endpoint for a job from any provider — details below.

Install as a Claude Code plugin (recommended)

The plugin installs the MCP server and a skill that knows which NetIntel endpoint fits a task, what it costs and how to pay it. It never holds a private key and never signs a payment: each paid tool hands the exact request and its price to the agent's own wallet (below), which pays it under that wallet's own approvals and limits. Nothing to configure:

/plugin marketplace add kjgueye/netintel-mcp/plugin install netintel@netintel

Then just ask — "is this IP malicious?", "does this domain have DMARC?", "fetch this URL as JSON" — and each call is paid from your wallet.

Pay with the wallet you already have

With no EVM_PRIVATE_KEY set, every paid tool answers with the exact request — URL, method, body — and its price, ready for the agent's own wallet:

  • AgentCash — the agent calls its fetch tool with that request. Install: claude mcp add agentcash --scope user -- npx -y agentcash@latest.
  • Coinbase Agentic Wallet — npx awal@latest x402 pay '<url>' [-X POST -d '<json>'] --max-amount <atomic>. Log in once with npx awal@latest auth login <email>.
  • Coinbase Wallet MCP — initiate_x402_request, approve the payment in Coinbase Wallet, then complete_x402_request.

That wallet's own spending limits apply. The bundled skill (skills/netintel/SKILL.md) calls NetIntel the same way even without this server.

What it connects to

The tools call only NetIntel's own hosts: netintel.dev (the API) and router.netintel.dev (the router tools). Requests carry the tool's input and, when this server pays with its own key, an x402 payment signature; nothing else from your machine is sent. With a key configured, netintel_wallet_status also reads that wallet's USDC balance from Base's public node, mainnet.base.org.

When the agent pays with its own wallet (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP), that wallet sends the request to netintel.dev and pays it. NetIntel's API passes some tool inputs to the provider that answers them: OpenAI and Anthropic (AI tools), Exa (web search), AbuseIPDB and AlienVault OTX (IP reputation), CoinGecko and blockchain explorers (market and wallet data) and GitHub (repository lookups); fetch tools retrieve the URL you ask for. NetIntel keeps paid-call inputs and results — see the privacy policy.

Privacy policy: https://netintel.dev/privacy

Terms of service: https://netintel.dev/terms

Install

bash
# pay from AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCPclaude mcp add netintel -- npx -y netintel-mcp# or let this server pay from a dedicated wallet (direct install only; the plugin never takes a key)claude mcp add netintel -e EVM_PRIVATE_KEY=0xYOUR_PRIVATE_KEY -- npx -y netintel-mcp

Or add manually to your Claude Desktop config (the env block is optional — leave it out to pay from your own wallet as above):

json
{  "mcpServers": {    "netintel": {      "command": "npx",      "args": ["-y", "netintel-mcp"],      "env": {        "EVM_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY"      }    }  }}

Requirements

  • None to start. Without a key every paid tool hands back a ready-to-pay request (see above), and netintel_wallet_status explains the options.
  • Optional: EVM_PRIVATE_KEY — a dedicated agent wallet holding USDC on Base mainnet (gasless; a few dollars is plenty). With it, this server pays every tool's listed price automatically.
  • Spending limits (≥1.1.55): with a key, the server refuses to sign a payment above NETINTEL_MAX_PER_CALL_USD (default $0.25) or once it has authorized NETINTEL_MAX_SESSION_USD (default $5) in total per process; a refusal returns SPEND_LIMIT: … and nothing is paid. Listed prices are what a call costs, not a cap — with a key configured every 402 is paid automatically, so authorize paid calls with your user first.

Tools

126 pay-per-call tools across DNS, SSL/TLS, WHOIS & domains, email security, IP intelligence, web & content, OSINT, AI text processing, and bundled reports.

ToolDescriptionPrice
netintel_dns_lookupDNS lookup for any domain — resolve A, AAAA, MX, TXT, NS, CNAME, SOA…$0.002
netintel_ssl_analyzePerforms a TLS handshake to inspect the certificate chain, probes…$0.007
netintel_redirect_traceFollows a URL through its full redirect chain (up to 20 hops)…$0.01
netintel_security_headersFetches a URL and evaluates 10 security-critical response headers (CSP…$0.01
netintel_email_authEmail deliverability & domain security check — validates SPF, DKIM…$0.002
netintel_cloud_fingerprintFingerprints a domain's cloud infrastructure — DNS records, HTTP…$0.01
netintel_schema_parseExtract structured data from any unstructured text into your own JSON…$0.01
netintel_asn_lookupResolves an IP address or domain to its Autonomous System Number (ASN)…$0.03
netintel_whois_lookupWHOIS domain lookup via RDAP — domain registration data: registrar…$0.003
netintel_cert_transparencyQuery the crt.sh certificate transparency log database to enumerate all…$0.01
netintel_subnet_calcCalculates IPv4/IPv6 subnet details from CIDR notation —…$0.005
netintel_dns_propagationQuery a domain's DNS record across 10 geographically distributed public…$0.03
netintel_dnssec_validateValidate a domain's DNSSEC configuration over DNS-over-HTTPS: DS…$0.03
netintel_ip_blacklistCheck an IP address against 15 major DNS blacklists (Spamhaus…$0.05
netintel_tech_fingerprintFetch a URL and detect the full technology stack from HTTP response…$0.05
netintel_breach_checkCheck if a password has appeared in known data breaches using the…$0.01
netintel_domain_availabilityCheck if a domain name is available for registration by querying RDAP…$0.01
netintel_email_intelEmail verification & deliverability check (email validator / verifier)…$0.005
netintel_og_scraperFetch any public URL and extract structured metadata — Open Graph tags…$0.01
netintel_page_extractFetch any article or web page and extract clean readable text stripped…$0.05
netintel_phone_intelParse and validate any phone number in any format, identify its country…$0.05
netintel_robots_txtFetch and parse a domain's robots.txt file — returns all crawl rules by…$0.01
netintel_rss_parserFetch and parse any RSS 2.0 or Atom feed URL and return structured…$0.01
netintel_username_checkCheck username availability across 20+ social platforms and developer…$0.03
netintel_wayback_lookupQuery the Internet Archive Wayback Machine to check if a URL has ever…$0.01
netintel_ip_reputationIP reputation and malicious-IP check — screens an address against…$0.05
netintel_cron_parserParse any cron expression into a human-readable explanation, validate…$0.03
netintel_currency_exchangeConvert any amount between 32 fiat currencies (live European Central…$0.01
netintel_github_intelFetch public metadata for any GitHub repository — stars, forks, open…$0.03
netintel_holidaysLook up public holidays for any country and year, check whether a…$0.005
netintel_ip_geoIP geolocation lookup (geoip / IP location API) — geolocate any IPv4 or…$0.002
netintel_jwt_inspectorDecode and inspect any JWT token — extracts header algorithm, payload…$0.005
netintel_lang_detectDetect the language of any text input using stopword-set matching and…$0.005
netintel_npm_intelFetch metadata for any npm package — download counts, latest version…$0.01
netintel_sitemap_parserFetch and parse any XML sitemap or sitemap index file — returns URLs…$0.01
netintel_url_safetyCheck a URL against URLhaus malware database and heuristic phishing…$0.01
netintel_domain_ageDetermine a domain's age from registration data and archival history —…$0.03
netintel_bulk_domainCheck availability of many domain names across multiple TLDs in a…$0.10
netintel_domain_appraiseEstimate the market value tier of a domain name using transparent…$0.03
netintel_domain_reportOne call returns a complete intelligence profile for a domain — WHOIS…$0.10
netintel_ip_riskOne call returns a complete risk profile for an IP address —…$0.10
netintel_name_genGenerate brandable startup/product names from a keyword using prefixes…$0.05
netintel_tld_priceReference registration/renewal/transfer pricing from a curated table of…$0.01
netintel_typosquatGenerate common typo and look-alike variations of a domain and check…$0.05
netintel_classifyClassify text into your own categories — zero-shot: supply 2–20 labels…$0.005
netintel_content_moderateModerate text content using Claude Haiku — flags categories like…$0.005
netintel_entity_extractExtract named entities from text using Claude Haiku — people…$0.05
netintel_sentimentSentiment analysis API — analyze sentiment of text and get a text…$0.002
netintel_text_summarizeSummarize text, articles or documents — condense raw text, Markdown, or…$0.005
netintel_translateTranslate up to 2000 words between languages using Claude Haiku —…$0.02
netintel_translate_shortTranslate text between languages — text translation API for short…$0.01
netintel_domain_due_diligenceOne call combines domain availability, heuristic value appraisal, and…$0.20
netintel_domain_report_fullOne premium call returns a complete six-part domain profile — DNS…$0.25
netintel_email_reportOne call combines domain email authentication (SPF/DKIM/DMARC)…$0.15
netintel_ip_reportOne premium call returns a complete five-part IP profile — geolocation…$0.20
netintel_url_safety_fullOne call vets a URL end to end — traces its full redirect chain, checks…$0.15
netintel_extractParse and normalize a freeform address string using Claude Haiku —…$0.01
netintel_extract_contactExtract structured contact details from text, an email signature, or…$0.01
netintel_extract_invoiceExtract structured data from invoice or receipt text — or directly from…$0.02
netintel_extract_resumeExtract structured data from resume/CV text using Claude Haiku —…$0.02
netintel_extract_tableExtract tabular data from messy text or HTML using Claude Haiku —…$0.02
netintel_markdownConvert messy HTML or text into clean, well-structured Markdown using…$0.03
netintel_normalizeConform messy or inconsistent JSON to a target schema using Claude…$0.05
netintel_text_to_jsonTurn unstructured text into structured JSON matching a caller-supplied…$0.05
netintel_webExtract web content from any page or PDF as clean Markdown — web page…$0.003
netintel_moneyNormalize any messy money string into a typed decimal amount plus ISO…$0.01
netintel_calendarTurn event fields into a valid RFC 5545 .ics calendar file — handles…$0.005
netintel_event_classifyCheap, fast "is this a dateable event?" filter for social and web text…$0.02
netintel_event_extractEvent extraction / event parsing — turn any caption, announcement…$0.05
netintel_messagesOpenAI-compatible chat completions over x402, answered by Claude Sonnet…$0.06
netintel_ai_imageGenerate agent-ready image assets (icons, logos, social graphics…$0.25
netintel_convertConvert any physical measurement — length, mass, volume, temperature…$0.01
netintel_domainComposite 0-100 trust/risk score for a domain in one call — blends…$0.10
netintel_translate_structuredTranslate structured content — JSON, HTML, Markdown, templates, UI…$0.02
netintel_translate_batchTranslate many independent strings in one request — each with a caller…$0.05
netintel_jsonRepair malformed JSON into valid JSON — fixes code fences, trailing…$0.02
netintel_schemaValidate data against a supplied schema — checks required fields…$0.02
netintel_schema_mapTransform a source object into a target schema — matches fields by…$0.04
netintel_domain_vetVet and pick a domain in one call — give candidate names, get back a…$0.20
netintel_openaiCall OpenAI's gpt-4o via a single pay-per-call x402 endpoint — no…$0.10
netintel_openai_gpt_4_1Call OpenAI's gpt-4.1 via a single pay-per-call x402 endpoint — no…$0.09
netintel_openai_gpt_4_1_miniCall OpenAI's gpt-4.1-mini via a single pay-per-call x402 endpoint — no…$0.005
netintel_openai_gpt_4o_miniCall OpenAI's gpt-4o-mini via a single pay-per-call x402 endpoint — no…$0.005
netintel_openai_gpt_4_1_nanoCall OpenAI's gpt-4.1-nano via a single pay-per-call x402 endpoint — no…$0.005
netintel_openai_gpt_5_5Call OpenAI's gpt-5.5 via a single pay-per-call x402 endpoint — no…$0.65
netintel_openai_gpt_5_4Call OpenAI's gpt-5.4 via a single pay-per-call x402 endpoint — no…$0.25
netintel_openai_gpt_5_4_miniCall OpenAI's gpt-5.4-mini via a single pay-per-call x402 endpoint — no…$0.04
netintel_openai_gpt_5_4_nanoCall OpenAI's gpt-5.4-nano via a single pay-per-call x402 endpoint — no…$0.005
netintel_openai_gpt_5_1Call OpenAI's gpt-5.1 via a single pay-per-call x402 endpoint — no…$0.15
netintel_openai_gpt_5_nanoCall OpenAI's gpt-5-nano via a single pay-per-call x402 endpoint — no…$0.005
netintel_openai_gpt_5_2Call OpenAI's gpt-5.2 via a single pay-per-call x402 endpoint — no…$0.20
netintel_openai_gpt_5_6_solCall OpenAI's gpt-5.6-sol via a single pay-per-call x402 endpoint — no…$0.65
netintel_openai_gpt_5_6_terraCall OpenAI's gpt-5.6-terra via a single pay-per-call x402 endpoint —…$0.25
netintel_openai_gpt_5_6_lunaCall OpenAI's gpt-5.6-luna via a single pay-per-call x402 endpoint — no…$0.06
netintel_v1_embeddingsOpenAI-compatible text embeddings API — standard /v1/embeddings request…$0.005
netintel_semantic_rankSemantic similarity ranking — send a query plus up to 100 candidate…$0.02
netintel_v1_chat_completionsOpenAI-compatible chat completions gateway — standard…$0.005
netintel_crypto_marketStructured live crypto market data for ~50 top assets in one JSON call:…$0.005
netintel_gas_priceLive gas prices across Base, Ethereum, Arbitrum, Optimism, and Polygon…$0.002
netintel_crypto_priceCrypto prices for up to 25 coins in one call — live cryptocurrency spot…$0.005
netintel_crypto_ohlcHistorical OHLC candles for any major crypto asset — hourly or daily…$0.02
netintel_currency_exchange_batchConvert one base currency to up to 30 targets in a single call — fiat…$0.02
netintel_currency_exchange_historyDaily historical exchange-rate series for any currency pair — fiat via…$0.02
netintel_token_infoFull profile for any ERC-20 token by contract address — name, symbol…$0.02
netintel_wallet_balanceToken balance for any wallet — native coin, USDC and any ERC-20 on…$0.005
netintel_wallet_intelCounterparty due-diligence for any Base or Ethereum wallet — age…$0.05
netintel_iban_validateValidate any IBAN offline — mod-97 check digits, per-country structure…$0.005
netintel_market_snapshotOne-call market briefing for agents — BTC/ETH/SOL spot + 24h moves…$0.05
netintel_web_fetchFetch any URL and get the raw body back — JSON parsed, everything else…$0.003
netintel_weather_currentCurrent weather for any city or lat/lon worldwide, plus a 3-day…$0.002
netintel_weather_forecastMulti-day weather forecast for any city or lat/lon worldwide — up to 16…$0.003
netintel_prediction_marketsLive prediction market odds from Polymarket — list the top active…$0.005
netintel_prediction_marketFull detail for ONE Polymarket prediction market by id or slug —…$0.003
netintel_ssl_certSSL certificate check for any domain — issuer, subject, SANs, valid…$0.003
netintel_text_chunkSplit text into overlapping chunks for RAG ingestion — by characters or…$0.001
netintel_text_statsInstant text statistics — characters (with/without spaces), words…$0.001
netintel_embeddingsMultilingual text embeddings (384-dim) served in-house, no OpenAI…$0.001
netintel_email_verifyValidate an email address — email verification before you send: syntax…$0.001
netintel_exa_searchExa neural web search for AI agents — POST or GET a query, get ranked…$0.01
netintel_web_searchWeb search for AI agents — one query in, ranked live results out…$0.01
netintel_exa_contentsClean page text for up to 3 URLs in one call via Exa's index + live…$0.005
netintel_exa_answerAsk a question, get a direct answer grounded in a live web search, with…$0.01
netintel_pdf_parseParse a PDF to text and Markdown: send a PDF url or base64 file, get…$0.005
netintel_lead_checkCheck a sales lead before outreach — one call verifies the email…$0.005
netintel_web_monitorMonitor a web page for changes — fetch a URL, compare it with your…$0.003
netintel_domain_watchMonitor a domain for changes — DNS records, nameservers, MX, SPF and…$0.005

Find the right x402 endpoint from any provider

These tools answer "which x402 endpoint should I call?" over the whole Coinbase Bazaar catalog — every provider, not only NetIntel — ranked by fit, real paying demand, health and price, with the reasons. They call the NetIntel Router (https://router.netintel.dev) with the same wallet and spending limits. NetIntel's own endpoints are labeled and get no boost. Daily rankings for 40 common agent tasks: https://router.netintel.dev/rankings

ToolDescriptionPrice
netintel_route_searchFind which x402 pay-per-call API endpoint fits a job, from ANY provider…free
netintel_route_recommendGet the 3 best x402 endpoints for a job, from three different…$0.005
netintel_route_vetCheck one x402 endpoint before relying on it: give its URL as the…$0.002

Payment

All tools pay automatically via x402 in USDC on Base mainnet. Your wallet is charged per call. No subscriptions, no API keys. (The NetIntel API itself also accepts USDC on Solana — call it directly over x402 with a Solana wallet if you prefer that rail.)

Links

Source: README.md at commit ebd2663

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

12
  1. v1.1.68LatestOct 29, 2026
  2. v1.1.66Oct 18, 2026
  3. v1.1.65Oct 17, 2026
  4. v1.1.61Oct 15, 2026
  5. v1.1.60Oct 11, 2026
  6. v1.1.59Oct 11, 2026
  7. v1.1.58Oct 10, 2026
  8. v1.1.57Oct 9, 2026
  9. v1.1.56Sep 25, 2026
  10. v1.1.54Sep 25, 2026
  11. v1.1.53Sep 23, 2026
  12. v1.1.52Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts