How do I install Netintel?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Netintel need an API key?

The publisher lists these environment variables: EVM_PRIVATE_KEY.

What transport does Netintel use?

Netintel runs locally over stdio.

When was Netintel last checked?

Last checked 2026-11-09. MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

Netintel MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

npx -y [email protected]

Credentials from the publisher

EVM_PRIVATE_KEY — Optional. A dedicated wallet's private key (USDC on Base) to pay each call automatically. Leave unset and every paid tool returns the exact request and price for the agent's own wallet (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP) to pay.

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1EVM_PRIVATE_KEY=<secret> claude mcp add io.github.kjgueye-netintel-mcp -- npx -y netintel-mcp@1.1.68

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.kjgueye-netintel-mcp": {4      "command": "npx",5      "args": [6        "-y",7        "[email protected]"8      ],9      "env": {10        "EVM_PRIVATE_KEY": "<secret>"11      }12    }13  }14}

claude_desktop_config.json

Local · npmPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version: 1.1.68

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

netintel-mcp

MCP server for NetIntel — 124 network intelligence tools for AI agents. DNS, SSL, WHOIS, email security, cloud fingerprinting, OSINT and more. Pay-per-call via x402 — the NetIntel API accepts USDC on Base or Solana. No API keys, and no private key to paste: pay from the wallet your agent already has (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP), or give this server a dedicated wallet key. Plus 3 router tools that find the best x402 endpoint for a job from any provider — details below.

Install as a Claude Code plugin (recommended)

The plugin installs the MCP server and a skill that knows which NetIntel endpoint fits a task, what it costs and how to pay it. It never holds a private key and never signs a payment: each paid tool hands the exact request and its price to the agent's own wallet (below), which pays it under that wallet's own approvals and limits. Nothing to configure:

/plugin marketplace add kjgueye/netintel-mcp
/plugin install netintel@netintel

Then just ask — "is this IP malicious?", "does this domain have DMARC?", "fetch this URL as JSON" — and each call is paid from your wallet.

Pay with the wallet you already have

With no EVM_PRIVATE_KEY set, every paid tool answers with the exact request — URL, method, body — and its price, ready for the agent's own wallet:

AgentCash — the agent calls its fetch tool with that request. Install: claude mcp add agentcash --scope user -- npx -y agentcash@latest.
Coinbase Agentic Wallet — npx awal@latest x402 pay '<url>' [-X POST -d '<json>'] --max-amount <atomic>. Log in once with npx awal@latest auth login <email>.
Coinbase Wallet MCP — initiate_x402_request, approve the payment in Coinbase Wallet, then complete_x402_request.

That wallet's own spending limits apply. The bundled skill (skills/netintel/SKILL.md) calls NetIntel the same way even without this server.

What it connects to

The tools call only NetIntel's own hosts: netintel.dev (the API) and router.netintel.dev (the router tools). Requests carry the tool's input and, when this server pays with its own key, an x402 payment signature; nothing else from your machine is sent. With a key configured, netintel_wallet_status also reads that wallet's USDC balance from Base's public node, mainnet.base.org.

When the agent pays with its own wallet (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP), that wallet sends the request to netintel.dev and pays it. NetIntel's API passes some tool inputs to the provider that answers them: OpenAI and Anthropic (AI tools), Exa (web search), AbuseIPDB and AlienVault OTX (IP reputation), CoinGecko and blockchain explorers (market and wallet data) and GitHub (repository lookups); fetch tools retrieve the URL you ask for. NetIntel keeps paid-call inputs and results — see the privacy policy.

Install

# pay from AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP
claude mcp add netintel -- npx -y netintel-mcp
# or let this server pay from a dedicated wallet (direct install only; the plugin never takes a key)
claude mcp add netintel -e EVM_PRIVATE_KEY=0xYOUR_PRIVATE_KEY -- npx -y netintel-mcp

Or add manually to your Claude Desktop config (the env block is optional — leave it out to pay from your own wallet as above):

{
  "mcpServers": {
    "netintel": {
      "command": "npx",
      "args": ["-y", "netintel-mcp"],
      "env": {
        "EVM_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY"
      }
    }
  }
}

Requirements

None to start. Without a key every paid tool hands back a ready-to-pay request (see above), and netintel_wallet_status explains the options.
Optional: EVM_PRIVATE_KEY — a dedicated agent wallet holding USDC on Base mainnet (gasless; a few dollars is plenty). With it, this server pays every tool's listed price automatically.
Spending limits (≥1.1.55): with a key, the server refuses to sign a payment above NETINTEL_MAX_PER_CALL_USD (default $0.25) or once it has authorized NETINTEL_MAX_SESSION_USD (default $5) in total per process; a refusal returns SPEND_LIMIT: … and nothing is paid. Listed prices are what a call costs, not a cap — with a key configured every 402 is paid automatically, so authorize paid calls with your user first.

Tools

124 pay-per-call tools across DNS, SSL/TLS, WHOIS & domains, email security, IP intelligence, web & content, OSINT, AI text processing, and bundled reports.

Tool	Description	Price
netintel_dns_lookup	DNS lookup for any domain — resolve A, AAAA, MX, TXT, NS, CNAME, SOA…	$0.002
netintel_ssl_analyze	Performs a TLS handshake to inspect the certificate chain, probes…	$0.007
netintel_redirect_trace	Follows a URL through its full redirect chain (up to 20 hops)…	$0.01
netintel_security_headers	Fetches a URL and evaluates 10 security-critical response headers (CSP…	$0.01
netintel_email_auth	Email deliverability & domain security check — validates SPF, DKIM…	$0.002
netintel_cloud_fingerprint	Fingerprints a domain's cloud infrastructure — DNS records, HTTP…	$0.01
netintel_schema_parse	Extract structured data from any unstructured text into your own JSON…	$0.01
netintel_asn_lookup	Resolves an IP address or domain to its Autonomous System Number (ASN)…	$0.03
netintel_whois_lookup	WHOIS domain lookup via RDAP — domain registration data: registrar…	$0.003
netintel_cert_transparency	Query the crt.sh certificate transparency log database to enumerate all…	$0.01
netintel_subnet_calc	Calculates IPv4/IPv6 subnet details from CIDR notation —…	$0.005
netintel_dns_propagation	Query a domain's DNS record across 10 geographically distributed public…	$0.03
netintel_dnssec_validate	Validate a domain's DNSSEC configuration over DNS-over-HTTPS: DS…	$0.03
netintel_ip_blacklist	Check an IP address against 15 major DNS blacklists (Spamhaus…	$0.05
netintel_tech_fingerprint	Fetch a URL and detect the full technology stack from HTTP response…	$0.05
netintel_breach_check	Check if a password has appeared in known data breaches using the…	$0.01
netintel_domain_availability	Check if a domain name is available for registration by querying RDAP…

Find the right x402 endpoint from any provider

These tools answer "which x402 endpoint should I call?" over the whole Coinbase Bazaar catalog — every provider, not only NetIntel — ranked by fit, real paying demand, health and price, with the reasons. They call the NetIntel Router (https://router.netintel.dev) with the same wallet and spending limits. NetIntel's own endpoints are labeled and get no boost. Daily rankings for 40 common agent tasks: https://router.netintel.dev/rankings

Tool	Description	Price
netintel_route_search	Find which x402 pay-per-call API endpoint fits a job, from ANY provider…	free
netintel_route_recommend	Get the 3 best x402 endpoints for a job, from three different…	$0.005
netintel_route_vet	Check one x402 endpoint before relying on it: give its URL as the…	$0.002

Payment

All tools pay automatically via x402 in USDC on Base mainnet. Your wallet is charged per call. No subscriptions, no API keys. (The NetIntel API itself also accepts USDC on Solana — call it directly over x402 with a Solana wallet if you prefer that rail.)

Netintel

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Netintel?

Does Netintel need an API key?

What transport does Netintel use?

When was Netintel last checked?

Documentation

netintel-mcp

Install as a Claude Code plugin (recommended)

Pay with the wallet you already have

What it connects to

Install

Requirements

Tools

Find the right x402 endpoint from any provider

Payment

Links