whatismynetip

io.github.getlarkwright由 GitHub 帳號 getlarkwright 發布v0.1.1更新於 Nov 7, 2026

Subnet math, port and MAC lookups, DNS, DNSBL, TLS cert inspection, public IP. No account.

已驗證STDIO僅桌面雲端與基礎設施開發者工具安全與監控

概覽

AI 產生的概覽

給程式碼代理使用的本機網路工具箱：子網計算、IP 轉換、MAC 廠商查詢、連接埠暴露建議、DNS、DNSBL、TLS 憑證與公網 IP 查詢。

可以做什麼
  • 計算子網，並判斷某個位址是否落在指定 CIDR 網段內，支援 IPv4 與 IPv6
  • 在點分、整數、十六進位與二進位之間轉換 IPv4，並正規化 IPv6 位址
  • 依內建 IEEE 表查詢 MAC 位址廠商，並查詢某個連接埠上執行什麼服務以及是否應對外開放
  • 透過 DNS-over-HTTPS 解析 DNS 記錄與反向 DNS，並用常見黑名單檢查位址
  • 檢查主機實際提供的 TLS 憑證，並回報網際網路所看到的公網 IP、ASN 與邊緣節點位置
適用情境
適合在代理協助處理網路設定、防火牆與暴露面檢視、DNS 排錯、憑證到期檢查，或回答某個連接埠是否應對外開放這類問題時使用。
執行需求
以 stdio 方式在本機執行。npx 方式需要 Node.js 18 或更新版本，也可使用 Docker 映像。不需帳號、API 金鑰或環境變數。只有 DNS、黑名單、TLS 與公網 IP 工具需要連網，計算與查詢類工具可離線使用。
安裝前請注意
網路類工具會連線到第三方公開服務（Cloudflare 的 DNS-over-HTTPS 與 trace、Google 的 DNS-over-HTTPS、Team Cymru 的 ASN DNS）以及 TLS 檢查所指向的主機，因此被查詢的主機名稱與位址會離開本機。TLS 檢查會拒絕私有或保留位址。它無法測試連接埠是否能從 NAT 外部連上。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 whatismynetip，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

netip-mcp

The whatismynetip.com toolbox as tools your coding agent can call. Subnet math, "what runs on this port and should it be open", MAC vendor lookups, DNS and blocklist checks, the certificate a host actually serves, and the IP the internet sees you as.

Free, MIT, no account, no telemetry. The site's own tools run in your browser; this runs the same logic next to your agent.

Install

Pin the version.

Claude Code

claude mcp add netip -- npx -y github:getlarkwright/netip-mcp#v0.1.1

Claude Desktop, Cursor, or any client with a JSON config

json
{  "mcpServers": {    "netip": {      "command": "npx",      "args": ["-y", "github:getlarkwright/netip-mcp#v0.1.1"]    }  }}

Docker

json
{  "mcpServers": {    "netip": {      "command": "docker",      "args": ["run", "-i", "--rm", "ghcr.io/getlarkwright/netip-mcp:0.1.1"]    }  }}

Node 18 or newer for the npx route. Also in the official MCP registry as io.github.getlarkwright/netip-mcp.

Tools

ToolWhat it answersNetwork
subnet_calcNetwork, mask, wildcard, broadcast, host range and counts for a CIDR — IPv4 and IPv6, /31 and /32 done rightnone
ip_in_subnetIs this address inside that block?none
ip_convertIPv4 as dotted, integer, hex, binary — from any of themnone
ipv6_normalizeExpanded and RFC 5952 compressed forms, and what kind of address it isnone
mac_lookupVendor from the full IEEE registry (~40,000 assignments, bundled), plus the multicast and locally-administered bitsnone
lookup_portWhat runs on a port, and whether to expose it — 100 ports written up by hand, searchable by servicenone
dns_lookupA, AAAA, MX, TXT, NS, CNAME, CAA, SOA, PTR, SRV over DNS-over-HTTPSDoH
reverse_dnsPTR for an IPv4 or IPv6 addressDoH
dnsbl_checkFive common blocklists, honest about the ones that refuse public resolversDoH
tls_inspectThe certificate a host actually serves: expiry, SANs, chain verification, protocol, cipherdirect TLS
my_public_ipThe address the internet sees, edge location, ASN, reverse DNS, datacenter/VPN hintCloudflare trace + Team Cymru DNS

lookup_port

The one I reach for most. The port pages on the site are opinionated — every port carries a verdict:

Port 3389/tcp+udp — RDP (Remote Desktop Protocol)
  Category   remote access  Software   Windows Remote Desktop Services, xrdp, FreeRDP server, Windows Admin Center hosts  Exposure   NEVER — do not expose to the internet
Internet-facing RDP is the most common initial-access route for ransomware crews, whocredential-stuff it around the clock; put it behind WireGuard, Tailscale or an RD Gateway …

Ask by number, or search: lookup_port with query: "redis" finds 6379. detail: true adds the full write-up and FAQ.

What it does not do

  • No account, no signup, no key.
  • No telemetry. Nothing about your usage goes anywhere.
  • Nothing of yours is read from disk. The only file it opens is its own bundled OUI table.
  • The local tools never open a socket. The network tools talk only to public services — Cloudflare and Google's DNS-over-HTTPS resolvers, Cloudflare's trace endpoint, Team Cymru's ASN DNS, and whichever host you point tls_inspect at. tls_inspect refuses anything that resolves to private or reserved space, so it cannot be turned on your own network.
  • "Is my port reachable from outside?" needs a machine outside your NAT to try the connection. That is what whatismynetip.com/port-checker does; a local tool cannot.

The port data and the calculators are the same ones the site uses, so the two stay in step.

Licence

MIT © Larkwright LLC. Written by James Son — network, security, and automation engineer. Corrections and additions to the port write-ups are welcome.

來源：README.md，提交 d422005

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.1.1最新Nov 7, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分