Log inSubmit server
Netexpert MCP logo

Netexpert MCP

Cross-platform MCP tools for LAN discovery, DNS checks, connectivity tests, Wi-Fi analysis, and host exposure reviews.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Netexpert MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "netexpert-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "netexpert-mcp"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Automated check passed— started and listed 31 tools correctly ().

Overview

netexpert-mcp provides cross-platform diagnostics for a local computer and its LAN through normalized MCP tool responses. It covers connectivity, DNS, device inventory, Wi-Fi conditions, active listeners, firewall state, and exposure findings on Windows, Linux, and macOS. Most operations are read-only and bounded by host, port, timeout, and rate limits; Wake-on-LAN is the exception and requires confirmation. Reach for it when an agent needs to investigate unreachable services, unknown devices, DNS inconsistencies, wireless degradation, or risky local exposure without shell access or raw sockets.

Use cases

  • Inspect unknown devices on an RFC1918 network
  • Diagnose slow or unreachable services
  • Check DNS responses against trusted resolvers
  • Review local listeners and firewall exposure
  • Track newly appearing LAN devices

Key features

  • Cross-platform normalized network diagnostics
  • Bounded port, host, timeout, and rate controls
  • DNS hijack and propagation checks
  • LAN inventory with OUI vendors and PTR names
  • Wi-Fi health findings with follow-up tool calls
  • Read-only operation by default

Tools31

What Netexpert MCP lets your agent do. Expand a tool for its parameters.

Verified live~1.9k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked

Recent health check succeeded.

What it can do

From the 31 tools this server returned when we ran it.

Runs commands · 1Handles credentials · 1Makes network requests · 1Read-only tools · 30
Network at startup3 connections
Files written at startupNone
Install scriptsNone
npm provenanceNot published
Package age26 days
Maintainers1

Observed 2026-11-13 in an isolated sandbox. A description of reach, not a security audit.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 8h ago via OSV.dev · netexpert-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars1Stargazers on the source repository.
npm downloads1.6kPackage downloads in the last 30 days.
Last commit20d agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed31Callable tools this server registers over MCP.

How Netexpert MCP works

What netexpert-mcp does

netexpert-mcp gives MCP clients a structured way to inspect a local host, its network path, nearby devices, and selected security signals. It is intended for questions such as which devices are present, whether a service is reachable, why a connection is slow, whether DNS responses differ, and whether listening services are exposed.

The server normalizes results from Windows, Linux, and macOS into a shared JSON envelope containing success state, backend information, data, warnings, or a defined error with a hint. This lets an agent distinguish, for example, a real ICMP result from a TCP-connect fallback.

How it works

The package runs as an MCP process over stdio, with an optional stateless HTTP transport. Tools call platform-specific facilities beneath a common service layer. Subprocesses use argument arrays and validated inputs rather than shell commands, and the server does not use raw sockets, Npcap, or Python.

Operations are constrained in code. Port scans accept at most 256 ports, LAN sweeps at most 1,024 hosts, and several operations have timeout or token-bucket limits. The optional nmap adapter is disabled unless both the binary is installed and nmap.enabled is set in configuration; it is restricted to RFC1918 targets.

Results can include actionable Finding objects. Examples include high-severity DNS mismatches, newly observed device identifiers, risky listeners, and Wi-Fi quality problems with a suggested next tool call. The server is request/response based rather than a monitoring daemon; recurring checks must be scheduled by the MCP client.

Setup and configuration

Run it without cloning or building:

Terminal
npx -y netexpert-mcp

It can also be installed globally with npm install -g netexpert-mcp, then started with netexpert-mcp. A stdio client configuration uses npx as the command and passes -y netexpert-mcp as arguments.

For HTTP, set NETEXPERT_HTTP_PORT, for example:

bash
NETEXPERT_HTTP_PORT=3100 netexpert-mcp

The MCP endpoint is /mcp on localhost, and /health provides a liveness check. Optional settings are stored at ~/.netexpert-mcp/config.json. They cover default ping and traceroute values, trusted DNS resolvers and DoH, scan ceilings, rate limits, and nmap enablement. Environment overrides include NETEXPERT_MCP_CONFIG, NETEXPERT_HTTP_PORT, and NETEXPERT_WIFI_IF for a Linux wireless interface. Configuration keys containing password, token, secret, or credential are rejected.

Tools and capabilities

  • Test reachability with ICMP or an explicitly identified TCP fallback, trace routes, inspect HTTP timing, check one port, scan bounded port lists, and inspect TLS certificates.
  • Look up common DNS record types, identify the operating system's active resolvers, compare propagation across resolvers and DoH, and detect suspicious differences for known-good domains.
  • Inspect interfaces, gateways, filtered ARP neighbors, RFC1918 hosts, device vendors from the bundled IEEE OUI database, and PTR or Windows NetBIOS names.
  • Save inventory snapshots, compare the live network with a baseline, and identify new MAC addresses or changed MAC-to-IP associations.
  • Report Wi-Fi link details and nearby access points, then interpret signal strength, channel overlap, band mismatch, and PHY rate.
  • Review active connections, process-owned listeners, platform firewall state, and exposure involving ports such as 445, 3389, 23, 135–139, 5357, and 5900.
  • Plan and confirm one Wake-on-LAN broadcast. The tool uses a single-use confirmation token with a ten-minute lifetime; it is the only mutating operation.
  • Retrieve public IPv4 and ASN or organization information, and optionally run a bounded Cloudflare download test.

Limitations and notes

The server has no credentials or telemetry configuration. Internet-facing behavior occurs only when explicitly invoking tools such as public-IP lookup, speed testing, or DNS-over-HTTPS checks. Platform capabilities vary; net.health reports available backends and installation hints.

The LAN inventory combines ARP and RFC1918 discovery, so visibility depends on the local network and operating-system facilities. Deep scans require a separate nmap installation and explicit opt-in. First use of lan.newdevices creates a baseline automatically, while later calls compare the live inventory against it.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Netexpert MCP

netexpert-mcp is an MCP server that connects AI clients to local host and LAN networking facilities on Windows, Linux, and macOS. Its main tools test connectivity, inspect DNS, inventory devices, assess Wi-Fi, review listeners and firewalls, and report network exposure using bounded, normalized JSON results.

Install it with `npx -y netexpert-mcp` or run `npm install -g netexpert-mcp` followed by `netexpert-mcp`. Configure an MCP client to start the stdio process with `npx` and the arguments `-y netexpert-mcp`.

Yes, netexpert-mcp supports Claude Desktop through its stdio MCP configuration. Add a server entry that runs `npx` with `-y netexpert-mcp`; the first run needs no configuration file or environment variables.

Yes, ordinary LAN discovery works without nmap through ARP data and a bounded RFC1918 ping sweep. The optional `net.deepscan` tool specifically requires the nmap binary and `nmap.enabled` set to true in the configuration.

Set `NETEXPERT_HTTP_PORT` before starting the process, such as `NETEXPERT_HTTP_PORT=3100 netexpert-mcp`. The stateless MCP endpoint is available at `http://127.0.0.1:3100/mcp`, with a liveness endpoint at `/health`.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewNetexpert MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/netexpert-mcp?style=directory)](https://allmcps.com/mcp/netexpert-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/netexpert-mcp"><img src="https://allmcps.com/api/badge/netexpert-mcp?style=directory" alt="Netexpert MCP on AllMCPs" /></a>