# netintel-mcp [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/kjgueye/netintel-mcp  
**GitHub Stars:** 1  
**npm Downloads (last month):** 2625  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/netintel-mcp

## Description
MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

## Tools
Capabilities this server exposes over MCP:

- **netintel_dns_lookup** — DNS lookup for any domain — resolve A, AAAA, MX, TXT, NS, CNAME, SOA…
- **netintel_ssl_analyze** — Performs a TLS handshake to inspect the certificate chain, probes…
- **netintel_redirect_trace** — Follows a URL through its full redirect chain (up to 20 hops)…
- **netintel_security_headers** — Fetches a URL and evaluates 10 security-critical response headers (CSP…
- **netintel_email_auth** — Email deliverability & domain security check — validates SPF, DKIM…
- **netintel_cloud_fingerprint** — Fingerprints a domain's cloud infrastructure — DNS records, HTTP…
- **netintel_schema_parse** — Extract structured data from any unstructured text into your own JSON…
- **netintel_asn_lookup** — Resolves an IP address or domain to its Autonomous System Number (ASN)…
- **netintel_whois_lookup** — WHOIS domain lookup via RDAP — domain registration data: registrar…
- **netintel_cert_transparency** — Query the crt.sh certificate transparency log database to enumerate all…
- **netintel_subnet_calc** — Calculates IPv4/IPv6 subnet details from CIDR notation —…
- **netintel_dns_propagation** — Query a domain's DNS record across 10 geographically distributed public…
- **netintel_dnssec_validate** — Validate a domain's DNSSEC configuration over DNS-over-HTTPS: DS…
- **netintel_ip_blacklist** — Check an IP address against 15 major DNS blacklists (Spamhaus…
- **netintel_tech_fingerprint** — Fetch a URL and detect the full technology stack from HTTP response…
- **netintel_breach_check** — Check if a password has appeared in known data breaches using the…
- **netintel_domain_availability** — Check if a domain name is available for registration by querying RDAP…
- **netintel_email_intel** — Email verification & deliverability check (email validator / verifier)…
- **netintel_og_scraper** — Fetch any public URL and extract structured metadata — Open Graph tags…
- **netintel_page_extract** — Fetch any article or web page and extract clean readable text stripped…
- **netintel_phone_intel** — Parse and validate any phone number in any format, identify its country…
- **netintel_robots_txt** — Fetch and parse a domain's robots.txt file — returns all crawl rules by…
- **netintel_rss_parser** — Fetch and parse any RSS 2.0 or Atom feed URL and return structured…
- **netintel_username_check** — Check username availability across 20+ social platforms and developer…
- **netintel_wayback_lookup** — Query the Internet Archive Wayback Machine to check if a URL has ever…
- **netintel_ip_reputation** — IP reputation and malicious-IP check — screens an address against…
- **netintel_cron_parser** — Parse any cron expression into a human-readable explanation, validate…
- **netintel_currency_exchange** — Convert any amount between 32 fiat currencies (live European Central…
- **netintel_github_intel** — Fetch public metadata for any GitHub repository — stars, forks, open…
- **netintel_holidays** — Look up public holidays for any country and year, check whether a…
- **netintel_ip_geo** — IP geolocation lookup (geoip / IP location API) — geolocate any IPv4 or…
- **netintel_jwt_inspector** — Decode and inspect any JWT token — extracts header algorithm, payload…
- **netintel_lang_detect** — Detect the language of any text input using stopword-set matching and…
- **netintel_npm_intel** — Fetch metadata for any npm package — download counts, latest version…
- **netintel_sitemap_parser** — Fetch and parse any XML sitemap or sitemap index file — returns URLs…
- **netintel_url_safety** — Check a URL against URLhaus malware database and heuristic phishing…
- **netintel_domain_age** — Determine a domain's age from registration data and archival history —…
- **netintel_bulk_domain** — Check availability of many domain names across multiple TLDs in a…
- **netintel_domain_appraise** — Estimate the market value tier of a domain name using transparent…
- **netintel_domain_report** — One call returns a complete intelligence profile for a domain — WHOIS…
- **netintel_ip_risk** — One call returns a complete risk profile for an IP address —…
- **netintel_name_gen** — Generate brandable startup/product names from a keyword using prefixes…
- **netintel_tld_price** — Reference registration/renewal/transfer pricing from a curated table of…
- **netintel_typosquat** — Generate common typo and look-alike variations of a domain and check…
- **netintel_classify** — Classify text into your own categories — zero-shot: supply 2–20 labels…
- **netintel_content_moderate** — Moderate text content using Claude Haiku — flags categories like…
- **netintel_entity_extract** — Extract named entities from text using Claude Haiku — people…
- **netintel_sentiment** — Sentiment analysis API — analyze sentiment of text and get a text…
- **netintel_text_summarize** — Summarize text, articles or documents — condense raw text, Markdown, or…
- **netintel_translate** — Translate up to 2000 words between languages using Claude Haiku —…
- **netintel_translate_short** — Translate text between languages — text translation API for short…
- **netintel_domain_due_diligence** — One call combines domain availability, heuristic value appraisal, and…
- **netintel_domain_report_full** — One premium call returns a complete six-part domain profile — DNS…
- **netintel_email_report** — One call combines domain email authentication (SPF/DKIM/DMARC)…
- **netintel_ip_report** — One premium call returns a complete five-part IP profile — geolocation…
- **netintel_url_safety_full** — One call vets a URL end to end — traces its full redirect chain, checks…
- **netintel_extract** — Parse and normalize a freeform address string using Claude Haiku —…
- **netintel_extract_contact** — Extract structured contact details from text, an email signature, or…
- **netintel_extract_invoice** — Extract structured data from invoice or receipt text — or directly from…
- **netintel_extract_resume** — Extract structured data from resume/CV text using Claude Haiku —…
- **netintel_extract_table** — Extract tabular data from messy text or HTML using Claude Haiku —…
- **netintel_markdown** — Convert messy HTML or text into clean, well-structured Markdown using…
- **netintel_normalize** — Conform messy or inconsistent JSON to a target schema using Claude…
- **netintel_text_to_json** — Turn unstructured text into structured JSON matching a caller-supplied…
- **netintel_web** — Extract web content from any page or PDF as clean Markdown — web page…
- **netintel_money** — Normalize any messy money string into a typed decimal amount plus ISO…
- **netintel_calendar** — Turn event fields into a valid RFC 5545 .ics calendar file — handles…
- **netintel_event_classify** — Cheap, fast "is this a dateable event?" filter for social and web text…
- **netintel_event_extract** — Event extraction / event parsing — turn any caption, announcement…
- **netintel_messages** — OpenAI-compatible chat completions over x402, answered by Claude Sonnet…
- **netintel_ai_image** — Generate agent-ready image assets (icons, logos, social graphics…
- **netintel_convert** — Convert any physical measurement — length, mass, volume, temperature…
- **netintel_domain** — Composite 0-100 trust/risk score for a domain in one call — blends…
- **netintel_translate_structured** — Translate structured content — JSON, HTML, Markdown, templates, UI…
- **netintel_translate_batch** — Translate many independent strings in one request — each with a caller…
- **netintel_json** — Repair malformed JSON into valid JSON — fixes code fences, trailing…
- **netintel_schema** — Validate data against a supplied schema — checks required fields…
- **netintel_schema_map** — Transform a source object into a target schema — matches fields by…
- **netintel_domain_vet** — Vet and pick a domain in one call — give candidate names, get back a…
- **netintel_openai** — Call OpenAI's gpt-4o via a single pay-per-call x402 endpoint — no…

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "netintel-mcp": {
    "command": "npx",
    "args": ["-y","netintel-mcp"],
    "env": {
      "EVM_PRIVATE_KEY": "",
      "NETINTEL_MAX_PER_CALL_USD": "",
      "NETINTEL_MAX_SESSION_USD": ""
    }
  }
}
```

**Requires environment variables:** `EVM_PRIVATE_KEY`, `NETINTEL_MAX_PER_CALL_USD`, `NETINTEL_MAX_SESSION_USD` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What netintel-mcp does

netintel-mcp gives MCP-compatible agents access to NetIntel's pay-per-call network intelligence API. Its toolset spans DNS and DNSSEC checks, TLS certificate inspection, WHOIS and RDAP data, certificate-transparency searches, ASN and subnet lookups, email authentication, IP reputation, blacklist checks, URL safety, cloud and technology fingerprinting, and domain reports.

It also includes web and OSINT functions such as redirect tracing, security-header analysis, page and metadata extraction, RSS and sitemap parsing, robots.txt inspection, Wayback Machine lookups, username checks, GitHub repository metadata, and structured-data extraction. Other tools cover phone and email intelligence, JWT inspection, cron parsing, currency conversion, holidays, language detection, npm metadata, and domain availability.

## How it works

Each tool call is priced individually and uses x402 payments. NetIntel accepts USDC on Base or Solana. The server can pay automatically from a dedicated wallet, or it can return the exact request and amount for payment through AgentCash, Coinbase Agentic Wallet, or Coinbase Wallet MCP. The wallet's own approvals and spending limits remain in effect.

The server communicates with NetIntel's API at `netintel.dev` and router services at `router.netintel.dev`. Some NetIntel operations pass inputs to providers such as AbuseIPDB, AlienVault OTX, Exa, GitHub, OpenAI, Anthropic, CoinGecko, or blockchain explorers, depending on the tool. Fetch-oriented tools retrieve the URL supplied to them.

## Setup and configuration

Install the package with `npx` as an MCP server, for example through Claude Code:

```bash
claude mcp add netintel -- npx -y netintel-mcp
```

It can also be added to Claude Desktop with a command-and-arguments MCP configuration. No key is required to start. Set `EVM_PRIVATE_KEY` when using a dedicated agent wallet with USDC on Base mainnet; the server then pays listed prices automatically. With a key configured, `NETINTEL_MAX_PER_CALL_USD` limits an individual payment and `NETINTEL_MAX_SESSION_USD` limits total authorized spending for the process. Their defaults are $0.25 and $5 respectively.

A Claude Code plugin is also available through the `kjgueye/netintel-mcp` marketplace. The plugin installs the server and a skill for selecting NetIntel endpoints and handling payment instructions.

## Limitations and notes

Calls incur separate usage charges, and listed prices are not merely estimates when a wallet key is configured: eligible requests are paid automatically unless a spending limit blocks them. NetIntel retains paid-call inputs and results under its privacy policy. External providers may receive inputs required to answer particular tools. A private key should only be used for a wallet dedicated to this service and funded for the intended limits.

_Full upstream README: https://allmcps.com/mcp/netintel-mcp/readme_