Local MCP capabilities provider for Expo
Nothing to run from here
Netintel is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
96/100
trust score
52
downloads a day
local
runs on your machine
2k
downloads in 30d
What it does
MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --env 'EVM_PRIVATE_KEY=${EVM_PRIVATE_KEY}' --transport stdio netintel-mcp '--' npx -y netintel-mcp
# 2 — ask your agent for something these tools do
# netintel_dns_lookup, netintel_ssl_analyze, netintel_redirect_trace and 124 more
It needs EVM_PRIVATE_KEY: this reads it from your environment, so export it first.
Netintel costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publisher
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. This one runs on your machine: your client starts Netintel as a process under your own user, with your files and your network, so the tool surface below is what it can do to your computer rather than to a server somewhere else. Its scan result is on the Security tab — read the surface before you approve it.
Claude Codedeclared by this listing
This is a public server: you run it yourself and this marketplace is not in the path. You need Node.js — the current LTS (24) is the safe choice; npx comes with it. Claude Code registers it in one command; --scope user makes it available in every project. Claude Code reads EVM_PRIVATE_KEY (EVM wallet private key with USDC on Base mainnet for x402 micropayments) from your environment each time it starts the server, so the value stays out of its config: export it in your shell profile (macOS, Linux), or run setx EVM_PRIVATE_KEY … and open a new terminal (Windows). The '--' is in quotes so that PowerShell passes it on.
claude mcp add --scope user --env 'EVM_PRIVATE_KEY=${EVM_PRIVATE_KEY}' --transport stdio netintel-mcp '--' npx -y netintel-mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it runs from its publisher’s own package: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it asks of you
It reaches a system of yours, so it needs your own credential rather than the publisher’s: EVM_PRIVATE_KEY — EVM wallet private key with USDC on Base mainnet for x402 micropayments. You set it in your own client’s config, on your machine — this marketplace never holds it.
What it writes
One config entry your client uses to start the process locally. A local server runs with your file system and your network, which is why it is priced without metering.
What you approve
127 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
DNS lookup for any domain — resolve A, AAAA, MX, TXT, NS, CNAME, SOA and PTR records in one call. Parses SPF/DMARC from TXT plus DKIM, and cross-checks A records across Google, Cloudflare and Quad9 resolvers for propagation consistency.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Analyze TLS certificate chain, supported protocols (TLS 1.0-1.3), key strength, and return an overall security grade A-F.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
| port | number | no | — |
Follow a URL through its full redirect chain recording status codes, timing, TLS status per hop. Returns a redirect health grade A-F and detects protocol downgrades.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
| max_hops | number | no | — |
Audit 10 security-critical HTTP response headers (CSP, HSTS, X-Frame-Options, etc). Detects anti-patterns and returns a security grade A-F.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| target | string | yes | — |
Validate SPF, DKIM, and DMARC records for a domain. Probes multiple DKIM selectors and returns an email security grade A-F.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Detect CDN, WAF, hosting, DNS and email provider for a domain, plus TLS certificate issuer, wildcard coverage and SAN count, with confidence scores and an infrastructure security grade. Hosts that resolve but serve nothing on 80/443 return http_reachable:false and grade insufficient_data rather…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Extract structured data from any unstructured text using LLM. Pass any JSON Schema and get back a typed object. Works on emails, invoices, resumes, contracts, anything.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| raw_text | string | yes | — |
| target_schema | object | yes | — |
Resolve an IP or domain to its ASN, network owner, country, and hosting/cloud classification with a trust score.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| target | string | yes | — |
Domain registration lookup, WHOIS via RDAP — registrar, registration and expiry dates, last-updated date, nameservers, and status flags from the authoritative registry, plus an actionability score for domain trustworthiness, ownership, or availability risk.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Query crt.sh certificate transparency logs to enumerate all SSL certs ever issued for a domain. Returns discovered subdomains, issuers, and flags wildcard or suspicious certs.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
| include_subdomains | boolean | no | — |
| limit | number | no | — |
Calculate IPv4/IPv6 subnet details from CIDR notation — network address, broadcast, netmask, usable host range, supernet. Pass multiple CIDRs comma-separated to detect overlaps.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| cidr | string | yes | — |
Check DNS propagation across 10 global resolvers simultaneously. Returns what each resolver sees, propagation percentage, and flags divergent resolvers.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
| record_type | string | no | — |
Validate DNSSEC configuration — checks DS records, DNSKEY, RRSIG signatures, and NSEC/NSEC3. Returns full chain-of-trust assessment.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Check an IP address against 15 major DNS blacklists (Spamhaus, Barracuda, SORBS, etc). Returns threat level and which lists it appears on.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ip | string | yes | — |
Detect the full technology stack of a website — CMS, framework, CDN, analytics, security tools — from HTTP headers and HTML.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Check if a password has appeared in known data breaches using HaveIBeenPwned k-anonymity API. The full password is never transmitted — only a 5-char SHA-1 prefix.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| password | string | yes | — |
Check if a domain is available for registration across 10 TLDs simultaneously using RDAP and DNS. Returns availability status, registrar, and expiry for each TLD.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Validate an email address — check deliverability, detect disposable domains, identify role-based addresses, verify MX records.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| string | yes | — |
Extract Open Graph tags, Twitter Card tags, canonical URL, title, description, favicon, JSON-LD structured data, and article metadata from any public URL.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Fetch any article or web page and extract clean readable text stripped of ads and boilerplate. Returns content, word count, reading time, and language. For JavaScript-rendered or bot-walled pages a plain fetch can't read, use netintel_exa_contents instead.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Parse and validate any phone number in any format. Returns country, line type (mobile/landline/VOIP/toll-free), carrier region, and all standard format variants.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| phone | string | yes | — |
| country_hint | string | no | — |
Fetch and parse a domain's robots.txt. Returns all crawl rules, sitemap URLs, crawl delay settings, and checks if a specific path is allowed for a given bot.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
| path | string | no | — |
| user_agent | string | no | — |
Fetch and parse any RSS 2.0 or Atom feed. Returns structured articles with title, link, description, author, publish date, and categories.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
| limit | number | no | — |
Check username availability across 20+ platforms simultaneously — GitHub, Twitter, Instagram, npm, and more. Returns taken/available/unknown status per platform.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| username | string | yes | — |
Query the Wayback Machine for archived snapshots of a URL. Returns first/last capture dates, total snapshot count, and the closest snapshot to an optional target date.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
| timestamp | string | no | — |
IP reputation and malicious-IP check — screens an address against AbuseIPDB and AlienVault OTX threat feeds and returns a composite risk score, threat categories, malware families, and full source data.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ip | string | yes | — |
Parse a cron expression, explain the schedule in plain English, and compute the next 5 run times.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| expression | string | yes | — |
Convert between 32 currencies with real-time or historical rates. Pass a date (YYYY-MM-DD) for historical lookup.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| from | string | yes | — |
| to | string | yes | — |
| amount | number | no | — |
| date | string | no | — |
Analyze a GitHub repo — stars, forks, activity, license, open issues, maintenance score. Pass owner/repo format.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| repo | string | yes | — |
Get public holidays by country. Check if a date is a business day or weekend. ISO 3166-1 alpha-2 country codes.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| country | string | yes | — |
| year | number | no | — |
| month | number | no | — |
Geolocate an IP address — country, city, coordinates, ISP, ASN, timezone.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ip | string | yes | — |
Decode a JWT token — inspect header and payload, check expiry, flag security issues like weak algorithms.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| token | string | yes | — |
Detect the language of any text with confidence scoring. Supports 50+ languages.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
Analyze an npm package — versions, weekly downloads, maintainers, dependencies, quality and maintenance score.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| package | string | yes | — |
Parse an XML sitemap or auto-discover it from a domain. Returns all URLs with metadata including lastmod and priority.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Check a URL against URLhaus malware database and heuristic analysis. Returns threat classification and risk score.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Determine a domain's age from registration data and archival history — returns creation date, age in years, first Wayback Machine capture, total archived snapshots, and a maturity signal so agents can assess domain trustworthiness and…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Check availability of many domain names across multiple TLDs in a single call — submit up to 50 name/TLD combinations and get back per-domain registration status, registrar, and expiry concurrently, so agents can scan an entire naming…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| names | array | yes | — |
| tlds | array | no | — |
Estimate the market value tier of a domain name using transparent heuristics — length, TLD premium, dictionary-word presence, pronounceability, keyword value, and numeric/hyphen penalties — returns a value tier and 0-100 quality score so…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
One call returns a complete intelligence profile for a domain — WHOIS registration, DNS records, SSL certificate, detected tech stack, and blacklist status — aggregated into a single risk-scored report so agents can fully vet a domain…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
One call returns a complete risk profile for an IP address — geolocation, ASN/network owner, blacklist status across multiple DNSBLs, and proxy/VPN/hosting classification — aggregated into a single verdict so agents can make a block/allow…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ip | string | yes | — |
Generate brandable startup/product names from a keyword using prefixes, suffixes, blends, and phonetic patterns, then check .com (or any TLD) availability for each via DNS — returns available names ranked by a brandability heuristic so…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| keyword | string | yes | — |
| tld | string | no | — |
| limit | number | no | — |
Compare registration, renewal, and transfer prices for a TLD across major registrars, or for a single domain name across many TLDs — returns sorted reference pricing so agents can find the cheapest place to register, budget domain…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| tld | string | no | — |
| name | string | no | — |
Generate common typo and look-alike variations of a domain and check which are already registered — catches character swaps, omissions, additions, homoglyphs, and alternate TLDs so agents can detect typosquatting and brand-impersonation…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
| limit | number | no | — |
Classify text into your own categories — zero-shot: supply 2–20 labels and Claude Haiku returns the best-matching category with confidence and per-label scores. Route, tag, triage, and detect intent or topic with your own taxonomy in one call.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| labels | array | yes | — |
| multi_label | boolean | no | — |
Moderate text content using Claude Haiku — flags categories like harassment, hate, sexual content, violence, self-harm, and spam with per-category severity and an overall allow/flag/block recommendation, so agents can screen user-generated…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
Extract named entities from text using Claude Haiku — people, organizations, locations, dates, emails, URLs, money amounts, and products — returned as structured typed arrays so agents can pull structured signals out of unstructured text…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| types | array | no | — |
Analyze the sentiment of text using Claude Haiku — returns overall polarity (positive/negative/neutral/mixed), a -1 to +1 score, detected emotions, and optional per-aspect sentiment, so agents can gauge tone in reviews, messages, and…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| aspects | array | no | — |
Summarize any text or web page into a concise summary plus key bullet points using Claude Haiku — accepts raw text or a URL (which it fetches and extracts), enforces an input cap, and returns a clean structured summary so agents can…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | no | — |
| url | string | no | — |
| max_points | number | no | — |
Translate up to 2000 words between languages using Claude Haiku — auto-detects source, supports 30+ target languages, preserves formatting, for larger documents and articles. For short snippets use the cheaper /translate/short.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| target | string | yes | — |
| source | string | no | — |
Translate up to 500 words between languages using Claude Haiku — auto-detects source language, supports 30+ target languages, preserves formatting, and returns the translation with detected source so agents can localize short content…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| target | string | yes | — |
| source | string | no | — |
One call combines domain availability, heuristic value appraisal, and TLD pricing into a single acquisition brief — tells an agent whether a name is available, what it's worth, and what it costs across TLDs, concurrently and with graceful…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
One premium call returns a complete six-part domain profile — DNS records, SSL certificate, WHOIS registration, cloud fingerprint, technology stack, and security headers — each section run concurrently with graceful partial-failure…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
One call combines domain email authentication (SPF/DKIM/DMARC), email-address intelligence (deliverability, disposable/role detection), and an optional password breach check into a single email-trust report — each section run concurrently…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| string | yes | — | |
| password | string | no | — |
One premium call returns a complete five-part IP profile — geolocation, ASN/network ownership, multi-DNSBL blacklist status, threat reputation, and an aggregate risk verdict — run concurrently with graceful partial-failure handling, so…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ip | string | yes | — |
One call vets a URL end to end — traces its full redirect chain, checks it against malware/phishing databases, audits its security headers, and inspects its SSL certificate — concurrent with graceful partial-failure handling, so agents get…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Parse and normalize a freeform address string using Claude Haiku — splits it into street, city, state/region, postal code, and country, plus a normalized single-line form, so agents can clean and standardize messy address data for…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | — |
Extract structured contact details from text, an email signature, or webpage text using Claude Haiku — returns name, title, company, email, phone, and address as clean JSON so agents can turn unstructured contact blocks into CRM-ready…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
Extract structured data from invoice or receipt text using Claude Haiku — returns vendor, invoice number, dates, line items, subtotal, tax, total, and currency as clean JSON so agents can automate accounts-payable, expense processing, and…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
Extract structured data from resume/CV text using Claude Haiku — returns name, contact info, skills, work experience, and education as clean JSON arrays so agents can automate applicant screening, candidate databases, and recruiting…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
Extract tabular data from messy text or HTML using Claude Haiku — detects columns and rows in unstructured content and returns clean structured JSON (columns + rows) so agents can turn pasted tables, HTML tables, and delimited text into…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
Convert messy HTML or text into clean, well-structured Markdown using Claude Haiku — strips boilerplate, fixes heading hierarchy, normalizes lists and links, and returns readable Markdown so agents can feed clean docs into downstream…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
Conform messy or inconsistent JSON to a target schema using Claude Haiku — renames keys, coerces types (string→number, "true"→boolean, etc.), and fills missing fields with null, returning JSON that matches the exact shape the caller…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| data | string | yes | — |
| schema | object | yes | — |
Turn unstructured text into structured JSON matching a caller-supplied schema using Claude Haiku — the agent declares the fields and types it wants, and gets back populated JSON with values pulled from the text and coerced to the right…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| schema | object | yes | — |
Extract text from a web page or PDF as clean Markdown — HTML to Markdown for any URL: strips scripts, nav, ads, and boilerplate while preserving headings, links, lists, tables, code blocks, and blockquotes; extracts the text layer from PDFs. Returns the Markdown body, title, word count, and a…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Normalize any messy money string into a typed decimal amount plus ISO 4217 currency — handles symbols, locale separators ($1,234.56 vs €1.234,56), magnitude suffixes (1.2M), accounting notation, and natural-language amounts — so agents can…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| locale_hint | string | no | — |
| default_currency | string | no | — |
| allow_llm | boolean | no | — |
Turn event fields into a valid RFC 5545 .ics calendar file — handles timed and all-day events, escaping, line folding, and a deterministic UID for idempotent re-import — so agents can publish events that import cleanly into Google, Apple…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| title | string | yes | — |
| starts_at | string | yes | — |
| ends_at | string | no | — |
| all_day | boolean | no | — |
| timezone | string | no | — |
| location | string | no | — |
| description | string | no | — |
| url | string | no | — |
| organizer | string | no | — |
Cheap, fast "is this a dateable event?" filter for social and web text — one tiny Haiku call returns is_event, confidence, and a one-line reason, so agents can screen every post for free-ish and only pay for full extraction on the ones…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| posted_at | string | no | — |
| timezone | string | no | — |
Extract a normalized calendar event from any caption, announcement, or page text using Claude Haiku — resolves relative dates ("this Saturday 7pm") against the post time and timezone, handles all-day and multi-day events, and returns…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| posted_at | string | no | — |
| timezone | string | no | — |
| city | string | no | — |
OpenAI-compatible chat completions over x402, answered by Claude Sonnet 4.6 — send a messages array and get an assistant reply for Q&A, reasoning, agent planning, coding help, summarization, extraction, classification, and chatbot…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| model | string | no | — |
| messages | array | yes | — |
| max_tokens | number | no | — |
| temperature | number | no | — |
| top_p | number | no | — |
Generate agent-ready image assets (icons, logos, social graphics, thumbnails, banners) with gpt-image-1. Claude refines the prompt, screens content, adds alt text and a score. Returns image_url as a base64 PNG data URI. Flat $0.25; n=1…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| prompt | string | yes | — |
| use_case | string | no | — |
| aspect_ratio | string | no | — |
| style | string | no | — |
| brand_colors | array | no | — |
Convert any physical measurement to another — length, mass, volume, temperature, area, speed, pressure, energy, time, data, and angle. Auto-detects the unit category, handles US/imperial ambiguity, and returns the exact converted value…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| value | number | yes | — |
| from | string | yes | — |
| to | string | yes | — |
| system | string | no | — |
| base | string | no | — |
Composite 0-100 trust/risk score for a domain in one call — blends domain age, SSL/TLS, DNS health, email auth (SPF/DKIM/DMARC), IP reputation, and certificate transparency into a single "safe to do business with this domain?" verdict with…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Translate structured content — JSON, HTML, Markdown, templates, UI strings — without breaking structure. Preserves keys, tags, markdown, URLs, emails, variables, placeholders, code blocks, and brand names, honors a caller glossary, and…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| content | object | yes | — |
| content_type | string | no | — |
| target | string | yes | — |
| source | string | no | — |
| glossary | object | no | — |
| protected_values | array | no | — |
| formality | string | no | — |
| tone | string | no | — |
| locale | string | no | — |
Translate many independent strings in one request — each with a caller ID preserved in the response — with per-item status, glossary and tone support, and partial success so one bad item never fails the batch, so agents can localize whole…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| items | array | yes | — |
| target | string | yes | — |
| source | string | no | — |
| glossary | object | no | — |
| protected_values | array | no | — |
| tone | string | no | — |
| formality | string | no | — |
Repair malformed JSON into valid JSON — fixes code fences, trailing commas, single quotes, unquoted keys, bad escapes, duplicate keys, truncation, and JSON buried in prose. A deterministic tokenizer runs first (no LLM cost), with an…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input | string | yes | — |
| schema | object | no | — |
| allow_llm | boolean | no | — |
| coerce | boolean | no | — |
Validate data against a supplied schema — checks required fields, nested objects, arrays, enums, string formats, numeric ranges, lengths, and additional-property rules deterministically, with optional type coercion and repair, returning…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| data | string | yes | — |
| schema | object | yes | — |
| coerce | boolean | no | — |
| repair | boolean | no | — |
| allow_llm | boolean | no | — |
Transform a source object into a target schema — matches fields by alias and structure deterministically, uses an LLM only for semantic mapping when needed, and supports mapping hints, transforms, and defaults, so agents can reshape data…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| source | object | yes | — |
| target_schema | object | yes | — |
| hints | object | no | — |
| transforms | object | no | — |
| defaults | object | no | — |
| mode | string | no | — |
| allow_llm | boolean | no | — |
Vet and pick a domain in one call — give candidate names, get back a ranked verdict on which to use and whether it's safe to build on: availability across TLDs, name quality, typosquat exposure, and a factual brand-collision check against…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| candidates | array | yes | — |
| tlds | array | no | — |
| use_case | string | no | — |
| deep_check_top_n | number | no | — |
Call OpenAI's gpt-4o via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.10 per request in USDC. Vision: messages may carry up to 4 https image_url parts per call (detail low/high/auto). Every call is bounded by a 16000-token combined input budget plus a…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_tokens | number | no | — |
| temperature | number | no | — |
| top_p | number | no | — |
Call OpenAI's gpt-4.1 via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.09 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms: OpenAI…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_tokens | number | no | — |
| temperature | number | no | — |
| top_p | number | no | — |
Call OpenAI's gpt-4.1-mini via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.005 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms:…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_tokens | number | no | — |
| temperature | number | no | — |
| top_p | number | no | — |
Call OpenAI's gpt-4o-mini via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.005 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms: OpenAI…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_tokens | number | no | — |
| temperature | number | no | — |
| top_p | number | no | — |
Call OpenAI's gpt-4.1-nano via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.005 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms:…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_tokens | number | no | — |
| temperature | number | no | — |
| top_p | number | no | — |
Call OpenAI's gpt-5.5 via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.65 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms: OpenAI…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5.4 via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.25 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms: OpenAI…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5.4-mini via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.04 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms:…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5.4-nano via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.005 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms:…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5.1 via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.15 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms: OpenAI…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5-nano via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.005 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms: OpenAI…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5.2 via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.20 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms: OpenAI…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5.6-sol via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.65 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms: OpenAI…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5.6-terra via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.25 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms:…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
Call OpenAI's gpt-5.6-luna via a single pay-per-call x402 endpoint — no OpenAI account or API key needed, pay $0.06 per request in USDC. Standard OpenAI chat.completions request/response shape, capped input and output. Search terms:…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| messages | array | yes | — |
| max_completion_tokens | number | no | — |
OpenAI-compatible text embeddings API — standard /v1/embeddings request shape: input as a string or a batch of up to 128 strings (64000 chars total on text-embedding-3-small, the default; 24000 on text-embedding-3-large). Flat $0.005 per…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input | yes | — | |
| model | string | no | — |
| dimensions | number | no | — |
Semantic similarity ranking — send a query plus up to 100 candidate texts, get the candidates back ranked by semantic similarity with scores. No vectors, no cosine math, no embedding model to manage: one call, one price, ranked results…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | — |
| candidates | array | yes | — |
| model | string | no | — |
| top_k | number | no | — |
| min_score | number | no | — |
OpenAI-compatible chat completions gateway (POST /v1/chat/completions shape). The model in the body sets the price: POST unpaid and the 402 quotes that model's exact price in USDC via x402 — no OpenAI account or API key. A model the gateway does not serve returns a 400 naming its dedicated…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| model | string | yes | — |
| messages | array | yes | — |
| max_tokens | number | no | — |
| response_format | object | no | — |
Structured live crypto market data for ~50 top assets in one JSON call: spot price and 24h open/high/low/volume/change (Coinbase Exchange) plus market cap, rank and circulating/total/max supply (CoinGecko). Quote in USD, EUR or GBP. 60s…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| symbol | string | yes | — |
| vs | string | no | — |
Live gas prices across Base, Ethereum, Arbitrum, Optimism, and Polygon with USD cost estimates for a transfer, an ERC-20 send, and a swap — keyless, one call, all chains. Per chain: gas price + EIP-1559 base/priority fee in gwei…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chains | string | no | — |
Crypto prices for up to 25 coins in one call — live cryptocurrency spot prices for BTC, ETH, SOL and more in USD, EUR, or GBP from Coinbase with Kraken and CoinGecko fallback; no API key, one flat price. Per asset: price, 24h change when the source provides it, source, cache age.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| symbols | string | no | — |
| vs | string | no | — |
Historical OHLC candles for any major crypto asset — hourly or daily, up to 300 candles, with period stats (change %, high, low) — from Coinbase Exchange with Kraken fallback, no API key. Also a price-at-date mode: pass date=YYYY-MM-DD for…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| symbol | string | no | — |
| interval | string | no | — |
| days | number | no | — |
| date | string | no | — |
| vs | string | no | — |
Convert one base currency to up to 30 targets in a single call — fiat (~200 currencies incl. SAR, AED, COP) and major crypto — ECB reference rates + Coinbase spot, no API key. Per target: rate, converted amount, rate date, source. The…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| from | string | yes | — |
| to | string | yes | — |
| amount | number | no | — |
Daily historical exchange-rate series for any currency pair — fiat via ECB reference data, crypto via Coinbase daily closes — with min/max/average/change stats, no API key. Pass start/end dates or a days lookback (default 30). The history…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| from | string | yes | — |
| to | string | yes | — |
| start | string | no | — |
| end | string | no | — |
| days | number | no | — |
Full profile for any ERC-20 token by contract address — name, symbol, decimals, supply from the chain itself, plus live price, liquidity, and volume from DEX data — Base and Ethereum, no API key. Holder count included; identity read…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | — |
| chain | string | no | — |
Native + USDC + custom-token balances for any wallet on Base, Ethereum, or Solana — with USD estimates — straight from public RPCs, no API key. Raw units as decimal strings plus formatted numbers; add up to 10 ERC-20 contracts via tokens=…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | — |
| chain | string | no | — |
| tokens | string | no | — |
Counterparty due-diligence for any Base or Ethereum wallet — age, funding origin, USDC flow, activity pattern, and risk flags in one scored report. The domain-report of wallets: wallet age, first funder, in/out totals, distinct…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | — |
| chain | string | no | — |
Validate any IBAN offline — mod-97 check digits, per-country structure, bank/branch extraction, and pretty formatting for ~80 countries — deterministic, instant, no upstream. A structurally invalid IBAN is a real answer: valid:false +…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| iban | string | yes | — |
One-call market briefing for agents — BTC/ETH/SOL spot + 24h moves, major fiat crosses (USD/EUR, USD/GBP, USD/JPY, EUR/GBP), Base and Ethereum gas with USD transfer cost, and the crypto fear/greed index. Four sections fetched concurrently…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| symbols | string | no | — |
| vs | string | no | — |
Fetch any URL and get the raw body back — JSON parsed, everything else as text — from safe server-side egress. For data APIs (ArcGIS, government/open-data portals, blob storage) that /web/extract's markdown conversion mangles. No API key…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
| max_bytes | number | no | — |
Live weather + 3-day forecast for any city or lat/lon worldwide — temperature, feels-like, humidity, wind, precipitation, cloud cover, and a plain-language condition. Give a city name (geocoded for you) or coordinates. No API key, metric…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| city | string | no | — |
| latitude | number | no | — |
| longitude | number | no | — |
| units | string | no | — |
Multi-day weather forecast for any city or lat/lon worldwide — up to 16 days of daily highs/lows, precipitation & probability, UV, sunrise/sunset, wind, and plain-language conditions, plus optional next-24h hourly. Give a city name…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| city | string | no | — |
| latitude | number | no | — |
| longitude | number | no | — |
| days | number | no | — |
| hourly | boolean | no | — |
| units | string | no | — |
Live prediction-market odds from Polymarket — list the top active markets by volume, or search by keyword. Each result has the question, outcomes with current prices (implied probabilities), 24h/total volume, liquidity, and resolution…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | no | — |
| limit | number | no | — |
| status | string | no | — |
Full detail for ONE Polymarket prediction market by id or slug — question, description, every outcome with its current price (implied probability), volume, liquidity, open/close dates, resolution source, category, and status. No API key…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | no | — |
| slug | string | no | — |
SSL certificate check for any domain — issuer, subject, SANs, valid from/to, days until expiry, expired/self-signed flags, TLS version, chain length. One TLS handshake, sub-2-second answer. The light, cheap tier under netintel_ssl_analyze (full analysis, grading).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
| port | number | no | — |
Split text into overlapping chunks for RAG ingestion — by characters or words, with configurable chunk size and overlap. Deterministic (same input → same chunks), returns each chunk with its index and start/end offsets. No API key, no LLM…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
| chunk_size | number | no | — |
| overlap | number | no | — |
| unit | string | no | — |
Instant text statistics — characters (with/without spaces), words, unique words, sentences, paragraphs, average word/sentence length, longest word, reading and speaking time. Deterministic, no LLM, no API key. For agents sizing content…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | — |
Multilingual text embeddings (384-dim) served in-house, no OpenAI dependency, no API key. NetIntel's cheapest embeddings at $0.001/call, batches up to 256 texts. Supports query/passage input types for retrieval (e5). Pairs with /text/chunk…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input | string | yes | — |
| input_type | string | no | — |
| encoding_format | string | no | — |
Validate an email address — email verification before you send: syntax + MX + disposable/role/free-provider detection in one call, boolean-first (deliverable, safe_to_send) with a machine-readable reason. DNS-level check only, no SMTP mailbox probe. For a scored trust report instead of a yes/no…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| string | yes | — |
Exa neural web search for AI agents — POST or GET a query, get ranked live results (title, url, published_date, author, score) with optional highlight snippets. Filter by category (news, research paper, github, company, pdf…), domain…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | — |
| num_results | number | no | — |
| type | string | no | — |
| category | string | no | — |
| include_domains | array | no | — |
| start_published_date | string | no | — |
| end_published_date | string | no | — |
| snippets | string | no | — |
Web search for AI agents — one query in, ranked live results out (title, url, published_date, author, score, optional snippets). Neural + keyword modes, category/domain/date filters. For a direct answer use /exa/answer. Keyless x402, pay…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | — |
| num_results | number | no | — |
| type | string | no | — |
| category | string | no | — |
| include_domains | array | no | — |
| start_published_date | string | no | — |
| end_published_date | string | no | — |
| snippets | string | no | — |
Clean page text for up to 3 URLs in one call via Exa's index + live crawl — works on JS-rendered and bot-walled pages that direct fetch can't read. Returns title, author, published_date and text per URL, with per-URL status. Pairs with…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| urls | array | yes | — |
| max_characters | number | no | — |
| livecrawl | string | no | — |
Ask a question, get a direct answer grounded in a live web search, with numbered citations (title, url, published_date). One call replaces search + read + summarize. For ranked results instead of a synthesized answer use /exa/search…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | — |
| include_citation_text | boolean | no | — |
Parse a PDF to text and Markdown: send a PDF url or base64 file, get clean Markdown with paragraphs rebuilt from the text layer, per-page character offsets for citing pages, metadata (title, author, dates, page count) and the page numbers…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | no | — |
| file_base64 | string | no | — |
| pages | string | no | — |
| max_chars | number | no | — |
Find which x402 pay-per-call API endpoint fits a job, from ANY provider (not only NetIntel): ranks every endpoint in the Coinbase Bazaar catalog by fit, real paying demand, health and price, and returns each pick's URL, price, inputs and plain-words reasons. Free (60 searches an hour). Use it…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | The job, in plain words, e.g. "check SPF DKIM DMARC for a domain" |
| limit | integer | no | Results to return, 1-25 (default 5) |
Get the 3 best x402 endpoints for a job, from three different providers, each health-checked live just now: its live price quote, its input schema and the reasons. Paid per call; not charged when no candidate passes the live check. It does not call the endpoint for you: NetIntel picks map to the…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | The job, in plain words, e.g. "geocode an address to latitude and longitude" |
Check one x402 endpoint before relying on it: give its URL as the Coinbase Bazaar lists it and get a live payment-challenge check, its current price quote, its 7/30/90-day check history and paying-wallet trend, and a verdict: ok, slow, unstable or failing. Paid per call; not charged when the URL…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | The endpoint's resource URL, exactly as listed (netintel_route_search returns it as resource_url) |
| method | string | no | Only when the URL is listed under both methods |
Check the agent wallet this MCP server pays NetIntel with: whether a key is configured, its address, its USDC balance on Base, and the spending limits (per call and per session) with how much this session has authorized. Free and local (no NetIntel call). Use when a paid tool reports 'Payment…
No parameter schema on file.
Free
$0 forever
- Every tool, no call limit
- No card, and mcprush charges nothing for it
- Source published under MIT
- Runs on your machine — nothing of it reaches our gateway
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Netintel or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATrust score 96 / 100
Release 1.1.60 · scanned 14 Oct 2026
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score96
Findings0 threat · 1 capability
Capabilitymoderate
Coveragesource
Verificationrepo
Surface digest988743b4f7c13955d92c7eaeb1abdb8390836ca1464f7558f739b6d5b8396be4
Score vectorthreat 100 → client 96
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| verification-discount | repo | publisher verification (public source) — no provenance, but the source is public and inspectable | −1 |
| coverage-honesty | source | inspection depth (source) — how much of the target the scan could see | −0 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
Tool surfaceread
Implementation sourceread
Package metadataread
Live transportnot available
Tools were statically extracted from the published source (127 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| netintel_dns_lookup | no tags | |
| netintel_ssl_analyze | no tags | |
| netintel_redirect_trace | no tags | |
| netintel_security_headers | no tags | |
| netintel_email_auth | external-sink | external-sink: handler sends an HTTP POST ( api.post("/email-auth") at dist/index.js:96 |
| netintel_cloud_fingerprint | no tags | |
| netintel_schema_parse | external-sink | external-sink: handler sends an HTTP POST ( api.post("/schema-parse/extract") at dist/index.js:116 |
| netintel_asn_lookup | no tags | |
| netintel_whois_lookup | no tags | |
| netintel_cert_transparency | no tags | |
| netintel_subnet_calc | no tags | |
| netintel_dns_propagation | no tags | |
| netintel_dnssec_validate | no tags | |
| netintel_ip_blacklist | no tags | |
| netintel_tech_fingerprint | no tags | |
| netintel_breach_check | no tags | |
| netintel_domain_availability | no tags | |
| netintel_email_intel | no tags | |
| netintel_og_scraper | no tags | |
| netintel_page_extract | untrusted-input | untrusted-input: keyword "fetch" |
| netintel_phone_intel | no tags | |
| netintel_robots_txt | untrusted-input | untrusted-input: keyword "fetch" |
| netintel_rss_parser | untrusted-input | untrusted-input: keyword "fetch" |
| netintel_username_check | no tags | |
| netintel_wayback_lookup | no tags | |
| netintel_ip_reputation | no tags | |
| netintel_cron_parser | no tags | |
| netintel_currency_exchange | no tags | |
| netintel_github_intel | no tags | |
| netintel_holidays | no tags | |
| netintel_ip_geo | no tags | |
| netintel_jwt_inspector | no tags | |
| netintel_lang_detect | external-sink | external-sink: handler sends an HTTP POST ( api.post("/lang-detect/analyze") at dist/index.js:392 |
| netintel_npm_intel | no tags | |
| netintel_sitemap_parser | no tags | |
| netintel_url_safety | no tags | |
| netintel_domain_age | no tags | |
| netintel_bulk_domain | external-sink | external-sink: handler sends an HTTP POST ( api.post("/bulk-domain/check") at dist/index.js:442 |
| netintel_domain_appraise | no tags | |
| netintel_domain_report | no tags | |
| netintel_ip_risk | no tags | |
| netintel_name_gen | no tags | |
| netintel_tld_price | no tags | |
| netintel_typosquat | no tags | |
| netintel_classify | external-sink | external-sink: handler sends an HTTP POST ( api.post("/classify") at dist/index.js:512 |
| netintel_content_moderate | external-sink | external-sink: handler sends an HTTP POST ( api.post("/content-moderate") at dist/index.js:522 |
| netintel_entity_extract | external-sink | external-sink: handler sends an HTTP POST ( api.post("/entity-extract") at dist/index.js:532 |
| netintel_sentiment | external-sink | external-sink: handler sends an HTTP POST ( api.post("/sentiment/analyze") at dist/index.js:542 |
| netintel_text_summarize | external-sink | external-sink: handler sends an HTTP POST ( api.post("/text-summarize") at dist/index.js:552 |
| netintel_translate | external-sink | external-sink: handler sends an HTTP POST ( api.post("/translate/long") at dist/index.js:562 |
| netintel_translate_short | external-sink | external-sink: handler sends an HTTP POST ( api.post("/translate/short") at dist/index.js:572 |
| netintel_domain_due_diligence | no tags | |
| netintel_domain_report_full | no tags | |
| netintel_email_report | no tags | |
| netintel_ip_report | no tags | |
| netintel_url_safety_full | no tags | |
| netintel_extract | external-sink | external-sink: handler sends an HTTP POST ( api.post("/extract/address") at dist/index.js:632 |
| netintel_extract_contact | external-sink | external-sink: handler sends an HTTP POST ( api.post("/extract/contact") at dist/index.js:642 |
| netintel_extract_invoice | external-sink | external-sink: handler sends an HTTP POST ( api.post("/extract/invoice") at dist/index.js:652 |
| netintel_extract_resume | external-sink | external-sink: handler sends an HTTP POST ( api.post("/extract/resume") at dist/index.js:662 |
| netintel_extract_table | external-sink | external-sink: handler sends an HTTP POST ( api.post("/extract/table") at dist/index.js:672 |
| netintel_markdown | external-sink | external-sink: handler sends an HTTP POST ( api.post("/markdown/clean") at dist/index.js:682 |
| netintel_normalize | external-sink | external-sink: handler sends an HTTP POST ( api.post("/normalize/json") at dist/index.js:692 |
| netintel_text_to_json | external-sink | external-sink: handler sends an HTTP POST ( api.post("/text-to-json") at dist/index.js:702 |
| netintel_web | untrusted-input | untrusted-input: keyword "fetch" |
| netintel_money | external-sink | external-sink: handler sends an HTTP POST ( api.post("/money/parse") at dist/index.js:722 |
| netintel_calendar | external-sink | external-sink: keyword "publish_event", handler sends an HTTP POST ( api.post("/calendar/ics") at dist/index.js:732 |
| netintel_event_classify | external-sink | external-sink: handler sends an HTTP POST ( api.post("/event-classify") at dist/index.js:742 |
| netintel_event_extract | external-sink | external-sink: handler sends an HTTP POST ( api.post("/event-extract") at dist/index.js:752 |
| netintel_messages | external-sink | external-sink: handler sends an HTTP POST ( api.post("/messages") at dist/index.js:762 |
| netintel_ai_image | external-sink | external-sink: handler sends an HTTP POST ( api.post("/ai-image/generate") at dist/index.js:772 |
| netintel_convert | no tags | |
| netintel_domain | external-sink | external-sink: handler sends an HTTP POST ( api.post("/domain/vendor-risk") at dist/index.js:792 |
| netintel_translate_structured | external-sink | external-sink: handler sends an HTTP POST ( api.post("/translate/structured") at dist/index.js:802 |
| netintel_translate_batch | external-sink | external-sink: handler sends an HTTP POST ( api.post("/translate/batch") at dist/index.js:812 |
| netintel_json | external-sink | external-sink: handler sends an HTTP POST ( api.post("/json/repair") at dist/index.js:822 |
| netintel_schema | external-sink | external-sink: handler sends an HTTP POST ( api.post("/schema/validate") at dist/index.js:832 |
| netintel_schema_map | external-sink | external-sink: handler sends an HTTP POST ( api.post("/schema/map") at dist/index.js:842 |
| netintel_domain_vet | external-sink | external-sink: handler sends an HTTP POST ( api.post("/domain/vet") at dist/index.js:852 |
| netintel_openai | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-4o") at dist/index.js:862 |
| netintel_openai_gpt_4_1 | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-4-1") at dist/index.js:872 |
| netintel_openai_gpt_4_1_mini | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-4-1-mini") at dist/index.js:882 |
| netintel_openai_gpt_4o_mini | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-4o-mini") at dist/index.js:892 |
| netintel_openai_gpt_4_1_nano | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-4-1-nano") at dist/index.js:902 |
| netintel_openai_gpt_5_5 | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-5") at dist/index.js:912 |
| netintel_openai_gpt_5_4 | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-4") at dist/index.js:922 |
| netintel_openai_gpt_5_4_mini | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-4-mini") at dist/index.js:932 |
| netintel_openai_gpt_5_4_nano | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-4-nano") at dist/index.js:942 |
| netintel_openai_gpt_5_1 | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-1") at dist/index.js:952 |
| netintel_openai_gpt_5_nano | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-nano") at dist/index.js:962 |
| netintel_openai_gpt_5_2 | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-2") at dist/index.js:972 |
| netintel_openai_gpt_5_6_sol | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-6-sol") at dist/index.js:982 |
| netintel_openai_gpt_5_6_terra | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-6-terra") at dist/index.js:992 |
| netintel_openai_gpt_5_6_luna | external-sink | external-sink: handler sends an HTTP POST ( api.post("/openai/gpt-5-6-luna") at dist/index.js:1002 |
| netintel_v1_embeddings | external-sink | external-sink: handler sends an HTTP POST ( api.post("/v1/embeddings") at dist/index.js:1012 |
| netintel_semantic_rank | external-sink | external-sink: handler sends an HTTP POST ( api.post("/semantic/rank") at dist/index.js:1022 |
| netintel_v1_chat_completions | external-sink | external-sink: handler sends an HTTP POST ( api.post("/v1/chat/completions") at dist/index.js:1032 |
| netintel_crypto_market | no tags | |
| netintel_gas_price | no tags | |
| netintel_crypto_price | no tags | |
| netintel_crypto_ohlc | no tags | |
| netintel_currency_exchange_batch | no tags | |
| netintel_currency_exchange_history | no tags | |
| netintel_token_info | no tags | |
| netintel_wallet_balance | no tags | |
| netintel_wallet_intel | no tags | |
| netintel_iban_validate | external-sink | external-sink: handler sends an HTTP POST ( api.post("/iban/validate") at dist/index.js:1133 |
| netintel_market_snapshot | no tags | |
| netintel_web_fetch | untrusted-inputexternal-sink | untrusted-input: keyword "fetch"; external-sink: handler sends an HTTP POST ( api.post("/web/fetch") at dist/index.js:1153 |
| netintel_weather_current | external-sink | external-sink: handler sends an HTTP POST ( api.post("/weather/current") at dist/index.js:1163 |
| netintel_weather_forecast | external-sink | external-sink: handler sends an HTTP POST ( api.post("/weather/forecast") at dist/index.js:1173 |
| netintel_prediction_markets | external-sink | external-sink: handler sends an HTTP POST ( api.post("/prediction/markets") at dist/index.js:1183 |
| netintel_prediction_market | external-sink | external-sink: handler sends an HTTP POST ( api.post("/prediction/market") at dist/index.js:1193 |
| netintel_ssl_cert | external-sink | external-sink: handler sends an HTTP POST ( api.post("/ssl/cert") at dist/index.js:1203 |
| netintel_text_chunk | external-sink | external-sink: handler sends an HTTP POST ( api.post("/text/chunk") at dist/index.js:1213 |
| netintel_text_stats | external-sink | external-sink: handler sends an HTTP POST ( api.post("/text/stats") at dist/index.js:1223 |
| netintel_embeddings | external-sink | external-sink: handler sends an HTTP POST ( api.post("/embeddings") at dist/index.js:1233 |
| netintel_email_verify | external-sink | external-sink: handler sends an HTTP POST ( api.post("/email/verify") at dist/index.js:1243 |
| netintel_exa_search | untrusted-input | untrusted-input: keyword "web_search" |
| netintel_web_search | untrusted-input | untrusted-input: keyword "web_search" |
| netintel_exa_contents | untrusted-inputexternal-sink | untrusted-input: keyword "fetch"; external-sink: handler sends an HTTP POST ( api.post("/exa/contents") at dist/index.js:1273 |
| netintel_exa_answer | untrusted-inputexternal-sink | untrusted-input: keyword "web_search"; external-sink: handler sends an HTTP POST ( api.post("/exa/answer") at dist/index.js:1283 |
| netintel_pdf_parse | external-sink | external-sink: handler sends an HTTP POST ( api.post("/pdf/parse") at dist/index.js:1293 |
| netintel_route_search | external-sink | external-sink: keyword "call_api" |
| netintel_route_recommend | no tags | |
| netintel_route_vet | no tags | |
| netintel_wallet_status | no tags |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
flow-1
Untrusted input can drive an external action even though no sensitive source is exposed.
Supply chain and provenance
Integrityfirst-seen
Surface digest988743b4f7c13955
Scanned2026-10-14
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
Always latest — the install command names no version, so it installs the newest release when it runs; the current release on file is 1.1.60. Pin a release below and the command asks for exactly that one.
1.1.60
11 Oct 2026
latestNo release note was published with this version.
1.1.59
11 Oct 2026
No release note was published with this version.
1.1.58
10 Oct 2026
No release note was published with this version.
1.1.57
8 Oct 2026
No release note was published with this version.
1.1.56
25 Sep 2026
No release note was published with this version.
1.1.52
11 Sep 2026
No release note was published with this version.
1.1.51
8 Sep 2026
No release note was published with this version.
1.1.48
5 Sep 2026
No release note was published with this version.
1.1.47
undated
- The version this listing was on when mcprush began following its releases. The registry was not asked when it shipped, so this row carries no date.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish Netintel can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.