Netintel

netintel-mcp

MCP server for NetIntel — 124 network intelligence tools for AI agents. DNS, SSL, WHOIS, email security, cloud fingerprinting, OSINT and more. Pay-per-call via x402 — the NetIntel API accepts USDC on Base or Solana. No API keys, and no private key to paste: pay from the wallet your agent already has (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP), or give this server a dedicated wallet key. Plus 3 router tools that find the best x402 endpoint for a job from any provider — details below.

Install as a Claude Code plugin (recommended)

The plugin installs the MCP server and a skill that knows which NetIntel endpoint fits a task, what it costs and how to pay it. It never holds a private key and never signs a payment: each paid tool hands the exact request and its price to the agent's own wallet (below), which pays it under that wallet's own approvals and limits. Nothing to configure:

/plugin marketplace add kjgueye/netintel-mcp
/plugin install netintel@netintel

Then just ask — "is this IP malicious?", "does this domain have DMARC?", "fetch this URL as JSON" — and each call is paid from your wallet.

Pay with the wallet you already have

With no EVM_PRIVATE_KEY set, every paid tool answers with the exact request — URL, method, body — and its price, ready for the agent's own wallet:

• AgentCash — the agent calls its fetch tool with that request. Install: claude mcp add agentcash --scope user -- npx -y agentcash@latest.
• Coinbase Agentic Wallet — npx awal@latest x402 pay '<url>' [-X POST -d '<json>'] --max-amount <atomic>. Log in once with npx awal@latest auth login <email>.
• Coinbase Wallet MCP — initiate_x402_request, approve the payment in Coinbase Wallet, then complete_x402_request.

That wallet's own spending limits apply. The bundled skill (skills/netintel/SKILL.md) calls NetIntel the same way even without this server.

What it connects to

The tools call only NetIntel's own hosts: netintel.dev (the API) and router.netintel.dev (the router tools). Requests carry the tool's input and, when this server pays with its own key, an x402 payment signature; nothing else from your machine is sent. With a key configured, netintel_wallet_status also reads that wallet's USDC balance from Base's public node, mainnet.base.org.

When the agent pays with its own wallet (AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP), that wallet sends the request to netintel.dev and pays it. NetIntel's API passes some tool inputs to the provider that answers them: OpenAI and Anthropic (AI tools), Exa (web search), AbuseIPDB and AlienVault OTX (IP reputation), CoinGecko and blockchain explorers (market and wallet data) and GitHub (repository lookups); fetch tools retrieve the URL you ask for. NetIntel keeps paid-call inputs and results — see the privacy policy.

Privacy policy: https://netintel.dev/privacy

Terms of service: https://netintel.dev/terms

Install

# pay from AgentCash, Coinbase Agentic Wallet or Coinbase Wallet MCP
claude mcp add netintel -- npx -y netintel-mcp
# or let this server pay from a dedicated wallet (direct install only; the plugin never takes a key)
claude mcp add netintel -e EVM_PRIVATE_KEY=0xYOUR_PRIVATE_KEY -- npx -y netintel-mcp

Or add manually to your Claude Desktop config (the env block is optional — leave it out to pay from your own wallet as above):

{
  "mcpServers": {
    "netintel": {
      "command": "npx",
      "args": ["-y", "netintel-mcp"],
      "env": {
        "EVM_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY"
      }
    }
  }
}

Requirements

• None to start. Without a key every paid tool hands back a ready-to-pay request (see above), and netintel_wallet_status explains the options.
• Optional: EVM_PRIVATE_KEY — a dedicated agent wallet holding USDC on Base mainnet (gasless; a few dollars is plenty). With it, this server pays every tool's listed price automatically.
• Spending limits (≥1.1.55): with a key, the server refuses to sign a payment above NETINTEL_MAX_PER_CALL_USD (default $0.25) or once it has authorized NETINTEL_MAX_SESSION_USD (default $5) in total per process; a refusal returns SPEND_LIMIT: … and nothing is paid. Listed prices are what a call costs, not a cap — with a key configured every 402 is paid automatically, so authorize paid calls with your user first.

Tools

124 pay-per-call tools across DNS, SSL/TLS, WHOIS & domains, email security, IP intelligence, web & content, OSINT, AI text processing, and bundled reports.

Find the right x402 endpoint from any provider

These tools answer "which x402 endpoint should I call?" over the whole Coinbase Bazaar catalog — every provider, not only NetIntel — ranked by fit, real paying demand, health and price, with the reasons. They call the NetIntel Router (https://router.netintel.dev) with the same wallet and spending limits. NetIntel's own endpoints are labeled and get no boost. Daily rankings for 40 common agent tasks: https://router.netintel.dev/rankings

Payment

All tools pay automatically via x402 in USDC on Base mainnet. Your wallet is charged per call. No subscriptions, no API keys. (The NetIntel API itself also accepts USDC on Solana — call it directly over x402 with a Solana wallet if you prefer that rail.)

Links

• Website: https://netintel.dev
• API manifest: https://netintel.dev/.well-known/x402
• OpenAPI spec: https://netintel.dev/openapi.json
• Agent catalog: https://netintel.dev/llms.txt
• Router (which x402 endpoint to call; daily rankings): https://router.netintel.dev/rankings
• Source: https://github.com/kjgueye/netintel-mcp