NetAPI

NetAPI MCP server

An MCP server that gives AI assistants and agents (Claude, Cursor, ChatGPT, Windsurf, VS Code Copilot and any other MCP client) access to NetAPI domain intelligence: registered domains of 1,584 TLDs, newly registered and deleted domains, DNS-provider and registrar data, the free NetAPI Top 1M popularity ranking and the compromised domain / IP feed.

Endpoints (Streamable HTTP):

Tools

Free (no plan needed):

With a NetAPI plan:

Free data (Top 1M, compromised feeds) is published under CC BY 4.0: credit NetAPI and link to https://netapi.com/. Full description of the tools and the connection steps: netapi.com/help/mcp/.

Connect

The server speaks standard MCP OAuth (authorization server https://netapi.com, dynamic client registration, PKCE), so clients that support it show a NetAPI sign-in when you add https://mcp.netapi.com/mcp: sign in with your email code or Google, click Allow access, done. Connected apps are listed in your dashboard, where you can disconnect them.

claude.ai / Claude Desktop: Settings → Connectors → Add custom connector → URL https://mcp.netapi.com/mcp → Connect.

ChatGPT: install NetAPI from the ChatGPT plugin directory and sign in when asked. Developer mode still works: Settings → Connectors → Add → MCP server URL https://mcp.netapi.com/mcp, authentication OAuth.

Claude Code

claude mcp add --transport http netapi https://mcp.netapi.com/mcp

then /mcp inside Claude Code to sign in. Without an account:

claude mcp add --transport http netapi https://mcp.netapi.com/mcp/public

Cursor (~/.cursor/mcp.json or the project's .cursor/mcp.json): Cursor signs in through OAuth when you add the URL; a NetAPI API token works as well:

{

"mcpServers": { "netapi": { "url": "https://mcp.netapi.com/mcp", "headers": { "Authorization": "Bearer YOUR_API_TOKEN" } } } }

Other clients: add a remote MCP server of type "http" / "streamable-http" with one of the URLs above.

Rate limits

Without an account (/mcp/public): 30 requests per minute and 1,000 per day per IP for point lookups, 10 / 200 for list tools, 6 / 100 for search_new_domains (100 results per call). A free NetAPI account raises them to 60 / 5,000, 30 / 1,000 and 30 / 500 (500 results per call); paid plans raise them further, unlock lookup_domain, lookup_ip and get_download_url, and Pro has no daily caps. Limits and error messages come from the JSON API: see the request-limit table and the MCP server page.

How it works

The Worker is a thin layer: every tool call is one GET request to the NetAPI JSON API (https://netapi.com/api-json/), the answer is returned to the client as JSON text. Tokens are validated by the site and cached for a minute; nothing else is stored in the Worker. /.well-known/oauth-protected-resource points clients to the authorization server. Files are never streamed through it: get_download_url returns a temporary link instead.

Development

npm install

npm run typecheck npm run dev # http://localhost:8787/mcp (and /mcp/public) npm run deploy # wrangler deploy (or connect the repo in the Cloudflare dashboard)

Test with the MCP Inspector: npx @modelcontextprotocol/inspector, add a Streamable HTTP server with http://localhost:8787/mcp/public (or the production URL to test the sign-in).

MCP Registry

The server is listed in the MCP Registry as com.netapi/mcp (remote https://mcp.netapi.com/mcp); server.json is its manifest. A new version: bump version in server.json, mcp-publisher login http --domain netapi.com (domain proof via /.well-known/mcp-registry-auth; dns works too), then mcp-publisher publish from this directory.

License

MIT for the code in this repository. NetAPI data is subject to the Terms of Service; the free datasets are CC BY 4.0.