whatismynetip

io.github.labaccessnow由 GitHub 帳號 labaccessnow 發布v0.1.0更新於 Oct 25, 2026

Subnet math, port and MAC lookups, DNS, DNSBL, TLS cert inspection, public IP. No account.

已驗證STDIO僅桌面雲端與基礎設施安全與監控

概覽

AI 產生的概覽

本機 MCP 伺服器，為助理提供網路工具：子網路計算、IP 轉換、MAC 廠商與連接埠查詢、DNS 與黑名單檢查、TLS 憑證檢查及公網 IP 查詢。

可以做什麼
計算 IPv4 與 IPv6 子網路，判斷位址是否落在某個網段內，並在點分、整數、十六進位、二進位及 IPv6 展開與壓縮格式之間轉換位址，全部離線完成。依內建 IEEE 表查詢 MAC 廠商，並依連接埠號或服務名稱查詢連接埠用途及是否應對外開放。透過 DNS-over-HTTPS 解析 A、AAAA、MX、TXT 等記錄與反向 DNS，並用多個常見黑名單檢查位址。檢查主機實際提供的 TLS 憑證，包括到期時間、SAN、憑證鏈驗證、協定與加密套件。回報網際網路看到的公網 IP，並附邊緣位置、ASN、反向 DNS 及資料中心或 VPN 提示。
適用情境
適合助理在處理網路、基礎設施或安全任務時快速進行離線的網路計算與查詢，也適合在不離開助理的情況下做 DNS、黑名單、憑證或公網 IP 檢查。本機計算類工具完全不需要連網。
執行需求
以本機 stdio 程序執行，可透過 npx（需 Node 18 或更新版本）或 Docker 映像啟動。未宣告需要帳號、API 金鑰、環境變數或請求標頭。DNS、黑名單、TLS 與公網 IP 工具需要對外連線至公共解析器與端點。
安裝前請注意
連網工具會聯絡第三方公共服務（Cloudflare 解析器與 trace 端點、Google DNS-over-HTTPS、Team Cymru ASN DNS）以及 TLS 檢查所指向的主機，因此查詢的主機名稱與位址會離開本機。TLS 檢查會拒絕解析到私有或保留位址的目標。它無法測試自己的連接埠能否從外部存取，README 建議改用網站完成。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 whatismynetip，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

netip-mcp

The whatismynetip.com toolbox as tools your coding agent can call. Subnet math, "what runs on this port and should it be open", MAC vendor lookups, DNS and blocklist checks, the certificate a host actually serves, and the IP the internet sees you as.

Free, MIT, no account, no telemetry. The site's own tools run in your browser; this runs the same logic next to your agent.

Install

Pin the version.

Claude Code

claude mcp add netip -- npx -y github:labaccessnow/netip-mcp#v0.1.0

Claude Desktop, Cursor, or any client with a JSON config

json
{  "mcpServers": {    "netip": {      "command": "npx",      "args": ["-y", "github:labaccessnow/netip-mcp#v0.1.0"]    }  }}

Docker

json
{  "mcpServers": {    "netip": {      "command": "docker",      "args": ["run", "-i", "--rm", "ghcr.io/labaccessnow/netip-mcp:0.1.0"]    }  }}

Node 18 or newer for the npx route. Also in the official MCP registry as io.github.labaccessnow/netip-mcp.

Tools

ToolWhat it answersNetwork
subnet_calcNetwork, mask, wildcard, broadcast, host range and counts for a CIDR — IPv4 and IPv6, /31 and /32 done rightnone
ip_in_subnetIs this address inside that block?none
ip_convertIPv4 as dotted, integer, hex, binary — from any of themnone
ipv6_normalizeExpanded and RFC 5952 compressed forms, and what kind of address it isnone
mac_lookupVendor from the full IEEE registry (~40,000 assignments, bundled), plus the multicast and locally-administered bitsnone
lookup_portWhat runs on a port, and whether to expose it — 100 ports written up by hand, searchable by servicenone
dns_lookupA, AAAA, MX, TXT, NS, CNAME, CAA, SOA, PTR, SRV over DNS-over-HTTPSDoH
reverse_dnsPTR for an IPv4 or IPv6 addressDoH
dnsbl_checkFive common blocklists, honest about the ones that refuse public resolversDoH
tls_inspectThe certificate a host actually serves: expiry, SANs, chain verification, protocol, cipherdirect TLS
my_public_ipThe address the internet sees, edge location, ASN, reverse DNS, datacenter/VPN hintCloudflare trace + Team Cymru DNS

lookup_port

The one I reach for most. The port pages on the site are opinionated — every port carries a verdict:

Port 3389/tcp+udp — RDP (Remote Desktop Protocol)
  Category   remote access  Software   Windows Remote Desktop Services, xrdp, FreeRDP server, Windows Admin Center hosts  Exposure   NEVER — do not expose to the internet
Internet-facing RDP is the most common initial-access route for ransomware crews, whocredential-stuff it around the clock; put it behind WireGuard, Tailscale or an RD Gateway …

Ask by number, or search: lookup_port with query: "redis" finds 6379. detail: true adds the full write-up and FAQ.

What it does not do

  • No account, no signup, no key.
  • No telemetry. Nothing about your usage goes anywhere.
  • Nothing of yours is read from disk. The only file it opens is its own bundled OUI table.
  • The local tools never open a socket. The network tools talk only to public services — Cloudflare and Google's DNS-over-HTTPS resolvers, Cloudflare's trace endpoint, Team Cymru's ASN DNS, and whichever host you point tls_inspect at. tls_inspect refuses anything that resolves to private or reserved space, so it cannot be turned on your own network.
  • "Is my port reachable from outside?" needs a machine outside your NAT to try the connection. That is what whatismynetip.com/port-checker does; a local tool cannot.

The port data and the calculators are the same ones the site uses, so the two stay in step.

Licence

MIT. Written by James Son — network, security, and automation engineer. Corrections and additions to the port write-ups are welcome.

來源：README.md，提交 6283b2e

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.1.0最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分