Netdiag MCP vs Sanity

A side-by-side look at the Netdiag MCP and Sanity MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.

Netdiag MCP logoNetdiag MCPDeveloper Tools · Local subprocess (stdio)MCP server wrapping dig, ping, mtr, whois and TLS/HTTP checks for on-demand network diagnostics52GoodAuth: not declaredSanity logoSanityDeveloper Tools · Local subprocess (stdio)Direct access to your Sanity projects (content, datasets, releases, schemas) and agent rules64GoodAuth: oauth 2.0

Verdict: choose Netdiag MCP for developer tools work as a local process; choose Sanity for developer tools as a local process. You can also run both side by side in one mcpServers block.

Which MCP server should you choose?

Netdiag MCP logoChoose Netdiag MCP when

  • You need dedicated capabilities in the Developer Tools domain.
  • You prefer a local stdio subprocess transport.
  • You want tools like dns_lookup, dnssec_check, ping_host.
Explore Netdiag MCP

Sanity logoChoose Sanity when

  • You need dedicated capabilities in the Developer Tools domain.
  • You prefer a local stdio subprocess transport.
  • Its auth model fits you: OAuth 2.0.
  • You want tools like query_documents, create_documents, patch_documents.
Explore Sanity

Feature & specification comparison

Rows where the two servers differ are marked.

SpecNetdiag MCP logoNetdiag MCPSanity logoSanity
CategoryDeveloper ToolsDeveloper Tools
Quality signal52/100 · Good64/100 · Good
Install commandConfirmedConfirmed
TransportLocal subprocess (stdio)Local subprocess (stdio)
AuthNot declaredOAuth 2.0
PricingNot declaredNot declared
Required env varsNone listedNone listed
Verified ownerCommunity listingCommunity listing
GitHub stars0192
Directory activity 0 views 0 installs 0 upvotes 2 views 0 installs 0 upvotes
Tools128

Tools & capabilities

Netdiag MCP tools 12

  • dns_lookupResolve a DNS record via `dig` (A/AAAA/MX/TXT/NS/CNAME/SOA/PTR/CAA), optionally against a specific resolver and over plain DNS/DoT/DoH
  • dnssec_checkQuery a known-validating resolver and report whether the AD bit is set (plain/DoT/DoH) — the only reliable way to confirm DNSSEC validation, since an RRSIG being present in a plain `dig` reply does not by itself prove anything validated it
  • ping_hostICMP ping (count clamped to 1-10)
  • traceroute_pathHop-by-hop path/loss report via `mtr --report` (fixed cycles, not a live/continuous run)
  • tcp_port_checkIs a TCP port open — a plain socket connect, not a port scan
  • http_checkHEAD/GET a URL and report status, redirect chain, and latency
  • http_getGET a URL and return the body. Textual types only (`text/*`, JSON, XML, JavaScript, YAML, `+json`/`+xml`), capped at 1 MiB. Refuses loopback, link-local and cloud-metadata destinations, including via redirect
  • tls_cert_checkFetch the certificate a host presents and report subject/issuer/validity/SANs
  • whois_lookupWHOIS lookup for a domain
  • asn_lookupASN + country-code lookup for an IP, or org info for an AS number, via Team Cymru's whois service — no API key or GeoIP database needed
  • current_timeCurrent date, time and weekday in an IANA timezone — the weekday is returned as data because deriving it from a date is arithmetic that fails silently. Also reports UTC and epoch, so it doubles as a clock check
  • health_checkVersion and which wrapped binaries (`dig`/`ping`/`mtr`/`whois`) are present on PATH

Sanity tools 8

  • query_documentsrun GROQ queries directly
  • create_documentscreate draft documents from structured content, or version documents when a release ID is provided
  • patch_documentssurgical edits to existing documents; published documents are edited by creating or updating drafts
  • deploy_studiodeploy a hosted Studio bound to an MCP-managed schema
  • create_versioncreate version documents for releases
  • whoamiverify the authenticated Sanity user
  • get_project_studioslist Studio applications linked to a project
  • give_feedbackreport MCP tool errors, missing capabilities, confusing output, or documentation issues

Ready-to-paste client configs

Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.

Netdiag MCP

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "netdiag-mcp": {
      "command": "uvx",
      "args": [
        "netdiag-mcp"
      ]
    }
  }
}

Sanity

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "sanity": {
      "command": "npx",
      "args": [
        "-y",
        "sanity@latest"
      ]
    }
  }
}

Frequently asked questions

Netdiag MCP is categorized under Developer Tools and uses a local stdio subprocess. Sanity belongs to Developer Tools and uses a local stdio subprocess. Pick Netdiag MCP for developer tools work and Sanity for developer tools.

Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.

Netdiag MCP has no declared pricing — check the project's own site. Sanity has no declared pricing — check the project's own site. Auth: oauth 2.0. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.

Yes. MCP clients support multiple servers: add netdiag-mcp and sanity as separate keys in the same mcpServers object, and your assistant will call tools from either one.

On AllMCPs, Netdiag MCP has a quality signal of 52/100 (Good) with 0 views, 0 installs and 0 GitHub stars. Sanity has 64/100 (Good) with 2 views, 0 installs and 192 GitHub stars.