Netintel MCP

netintel-mcp

MCP server for NetIntel — 126 network intelligence tools for AI agents. DNS, SSL, WHOIS, email security, cloud fingerprinting, OSINT and more. Pay-per-call via x402 — the NetIntel API accepts USDC on Base or Solana. No API keys, and no private key to paste: pay from the wallet your agent already has (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP), or give this server a dedicated wallet key. Plus 3 router tools that find the best x402 endpoint for a job from any provider — details below.

Install as a Claude Code plugin (recommended)

The plugin installs the MCP server and a skill that knows which NetIntel endpoint fits a task, what it costs and how to pay it. It never holds a private key and never signs a payment: each paid tool hands the exact request and its price to the agent's own wallet (below), which pays it under that wallet's own approvals and limits. Nothing to configure:

/plugin marketplace add kjgueye/netintel-mcp

/plugin install netintel@netintel

Then just ask — "is this IP malicious?", "does this domain have DMARC?", "fetch this URL as JSON" — and each call is paid from your wallet.

Pay with the wallet you already have

With no EVM_PRIVATE_KEY set, every paid tool answers with the exact request — URL, method, body — and its price, ready for the agent's own wallet:

• AgentCash — the agent calls its fetch tool with that request. Install: claude mcp add agentcash --scope user -- npx -y agentcash@latest.
• Coinbase Agentic Wallet — npx awal@latest x402 pay ' ' [-X POST -d ' '] --max-amount . Log in once with npx awal@latest auth login .
• Coinbase Wallet MCP — initiate_x402_request, approve the payment in Coinbase Wallet, then complete_x402_request.

That wallet's own spending limits apply. The bundled skill (skills/netintel/SKILL.md) calls NetIntel the same way even without this server.

What it connects to

The tools call only NetIntel's own hosts: netintel.dev (the API) and router.netintel.dev (the router tools). Requests carry the tool's input and, when this server pays with its own key, an x402 payment signature; nothing else from your machine is sent. With a key configured, netintel_wallet_status also reads that wallet's USDC balance from Base's public node, mainnet.base.org.

When the agent pays with its own wallet (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP), that wallet sends the request to netintel.dev and pays it. NetIntel's API passes some tool inputs to the provider that answers them: OpenAI and Anthropic (AI tools), Exa (web search), AbuseIPDB and AlienVault OTX (IP reputation), CoinGecko and blockchain explorers (market and wallet data) and GitHub (repository lookups); fetch tools retrieve the URL you ask for. NetIntel keeps paid-call inputs and results — see the privacy policy.

Privacy policy: https://netintel.dev/privacy

Terms of service: https://netintel.dev/terms

Install

# pay from AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP

claude mcp add netintel -- npx -y netintel-mcp

or let this server pay from a dedicated wallet (direct install only; the plugin never takes a key)

claude mcp add netintel -e EVM_PRIVATE_KEY=0xYOUR_PRIVATE_KEY -- npx -y netintel-mcp

Or add manually to your Claude Desktop config (the env block is optional — leave it out to pay from your own wallet as above):

{

"mcpServers": { "netintel": { "command": "npx", "args": ["-y", "netintel-mcp"], "env": { "EVM_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY" } } } }

Requirements

• None to start. Without a key every paid tool hands back a ready-to-pay request (see above), and netintel_wallet_status explains the options.
• Optional: EVM_PRIVATE_KEY — a dedicated agent wallet holding USDC on Base mainnet (gasless; a few dollars is plenty). With it, this server pays every tool's listed price automatically.
• Spending limits (≥1.1.55): with a key, the server refuses to sign a payment above NETINTEL_MAX_PER_CALL_USD (default $0.25) or once it has authorized NETINTEL_MAX_SESSION_USD (default $5) in total per process; a refusal returns SPEND_LIMIT: … and nothing is paid. Listed prices are what a call costs, not a cap — with a key configured every 402 is paid automatically, so authorize paid calls with your user first.

Tools

126 pay-per-call tools across DNS, SSL/TLS, WHOIS & domains, email security, IP intelligence, web & content, OSINT, AI text processing, and bundled reports.

| netintel_event_extract | Event extraction / event parsing — turn any caption,