MCP server
What is the AdminKit MCP server?
AdminKit's Model Context Protocol server lets an AI agent call AdminKit's checks directly, instead of
guessing at a user's IP, DNS or MCP exposure. Open source —
github.com/netbasecorp/adminkit-mcp,
MIT licensed, version 0.1.0 — published on
PyPI as adminkit-mcp and
listed in the MCP Registry.
Prefer an endpoint hosted and maintained by Netbase? Talk to our team.
Updated
Tools
check_ip Look up the caller's own IP, ASN, approximate location and CGNAT hint.
dns_lookup Raw DNS record lookup for a name and record type.
check_mail_auth SPF and DMARC validation for a domain.
check_domain Aggregate whois, TLS and HTTP-header overview for a domain.
check_mcp_endpoint Probe an MCP server for anonymous access and auth/TLS posture.
check_owned_ports Open-port check limited to a target you've verified you own.
explain_report AI-generated, citation-backed explanation of a saved check report.
get_radar Aggregated honeypot/telemetry exposure trend data (k ≥ 5 only).
subnet_calc IPv4/IPv6 subnet details for a CIDR: network, usable range, flags.
ip_info Inspect any IP address: version, private/global/loopback flags, notation.
ipv6_info Inspect an IPv6 address: /64 network, reverse-pointer form, embedded IPv4.
mac_vendor Look up the registered vendor for a MAC address or OUI prefix.
user_agent Parse a User-Agent string into browser, OS, device family and bot flag.
Free connector
The free connector is real, tested, public code you can run yourself right now:
uvx adminkit-mcp
It is published on PyPI as
adminkit-mcp 0.1.0 (also installable with
pip install adminkit-mcp) and listed in the MCP Registry as
io.github.netbasecorp/adminkit-mcp. Prefer installing straight from the git tag instead? Run
uvx --from git+https://github.com/netbasecorp/[email protected] adminkit-mcp. By default it calls AdminKit's Check API (api.adminkit.net),
which is live in production — so all 13 tools return real data today, with a resilience fallback for three of
them and a clear "not available" result instead of fabricated data if a route is ever briefly unreachable.
See connect an AI agent to AdminKit's MCP server for
the full setup and per-tool breakdown.
check_mcp_endpoint Always works — tries the live Check API first, falls back to a local, self-contained probe either way.
check_ip Calls the live Check API; falls back to AdminKit's live site function if that route is ever unreachable.
dns_lookup Calls the live Check API; falls back to the live site function if that route is ever unreachable.
check_mail_auth Calls the live Check API; falls back to the live site function if that route is ever unreachable.
check_domain, check_owned_ports, get_radar Call the live Check API directly (no site fallback); report a clear "not available" result instead of fabricating one if a route is briefly unreachable.
explain_report Fetches a live, saved report and asks the live AI explainer — needs your own ADMINKIT_API_KEY, or it reports "not available."
subnet_calc, ip_info, ipv6_info, mac_vendor, user_agent Pure local computation, no network call at all — always available.
The same probe behind check_mcp_endpoint also
ships as a GitHub Action connector
for running the same check in CI, on every push or a schedule.
Example request
The request and response shapes below are not invented — they follow the
Model Context Protocol's base JSON-RPC 2.0 message format (specification version 2025-06-18) exactly, so
integrators can build against them. The examples use https://mcp.adminkit.net/mcp, the
address of the Netbase-hosted endpoint — talk to our team to have it set up for your organization.
1. Initialize the session
curl -s https://mcp.adminkit.net/mcp \
-H 'Content-Type: application/json' \
-H 'Accept: application/json, text/event-stream' \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "initialize",
"params": {
"protocolVersion": "2025-06-18",
"capabilities": {},
"clientInfo": { "name": "example-client", "version": "1.0.0" }
}
}'Expected response shape:
{
"jsonrpc": "2.0",
"id": 1,
"result": {
"protocolVersion": "2025-06-18",
"capabilities": { "tools": {} },
"serverInfo": { "name": "adminkit-mcp", "version": "0.1.0" }
}
}2. List available tools
curl -s https://mcp.adminkit.net/mcp \
-H 'Content-Type: application/json' \
-H 'Accept: application/json, text/event-stream' \
-d '{"jsonrpc": "2.0", "id": 2, "method": "tools/list"}'Expected response shape (trimmed to two tools):
{
"jsonrpc": "2.0",
"id": 2,
"result": {
"tools": [
{ "name": "check_ip", "description": "Look up IP, ASN, approximate location and CGNAT hint for an address." },
{ "name": "check_mcp_endpoint", "description": "Check whether an MCP server requires authentication." }
]
}
}Frequently asked questions
How do I connect an AI agent to the AdminKit MCP server?
Run the open-source connector yourself, or talk to our team via /contact/ about an endpoint hosted and maintained by Netbase. The self-hosted connector's repository (https://github.com/netbasecorp/adminkit-mcp, tag v0.1.0, MIT) is public, and it talks to AdminKit's Check API (api.adminkit.net), which went live in production on 01/11/2026 — see "Tools" below for what that means for each tool.
Does the MCP server require authentication?
The self-hosted connector works without an API key for every tool except explain_report, which needs your own ADMINKIT_API_KEY for the AI explanation step. For an endpoint hosted by Netbase, our team agrees authentication, rate limits and API keys with you as part of a custom plan.
Where is the MCP server hosted?
Wherever you run it: the connector runs on your own machine or server, and its source code is public and MIT-licensed. If you would rather have Netbase JSC host and maintain the endpoint for your team, talk to our team via /contact/ — see /legal/terms/ for how the open-source connector differs from AdminKit's own paid plans.
Can I run the MCP server myself?
Yes. Install it with `uvx adminkit-mcp` or `pip install adminkit-mcp` — the package is published on PyPI as `adminkit-mcp` 0.1.0 and listed in the MCP Registry as `io.github.netbasecorp/adminkit-mcp`. All 13 tools call a real backend; see our self-hosting guide for the full per-tool breakdown.
What happens if the Check API is briefly unreachable while a tool is running?
It depends on the tool: check_mcp_endpoint, check_ip, dns_lookup and check_mail_auth fall back to a local, self-contained probe or AdminKit's live site function, so they keep working. check_domain, check_owned_ports and get_radar call the Check API directly with no fallback — they report a clear "not available" result instead of guessing or returning fabricated data. subnet_calc, ip_info, ipv6_info, mac_vendor and user_agent never touch the network at all, so an API outage never affects them.
Install the MCP server today
The repository is public and MIT licensed. Want Netbase to host and maintain the endpoint for your team? Talk to our team via the contact page.