The same checks, as an API and an MCP server
The AdminKit Check API runs the same DNS, mail, TLS, HTTP header, port, MQTT, Modbus and MCP endpoint checks as the free tool pages and returns a structured result with status, findings, evidence and fix hints at api.adminkit.net, plus an open-source MCP server, for CI/CD pipelines, AI agent builders and MSPs.
Updated
At a glance
POST https://api.adminkit.net/v1/check/{kind}, documented in the OpenAPI reference.uvx adminkit-mcp) calls the same API.What problem does the Check API solve?
AdminKit’s free tools — DNS lookups, mail authentication checks, TLS checks, port checks, MQTT and Modbus exposure checks — are built as web pages for a person to read in a browser. That works for a one-off question, but it doesn’t help a developer who wants the same check in a CI/CD pipeline, or an AI agent that needs to call a check and act on the result.
Running the same check for many hosts through a web page means opening it repeatedly by hand, which doesn’t scale for an MSP managing dozens of client networks or a team that wants checks to run automatically on every deploy.
A web page is also hard for code to read reliably. Automation needs a stable, structured pass/fail outcome with the evidence attached.
Who is the Check API for?
Developers and DevOps teams
Run DNS, TLS, header and mail checks on every deploy and fail the build when a record or certificate breaks.
See the solution →
AI agent builders
Give an agent a check it can call through MCP and act on, instead of scraping a web page.
See the solution →
MSPs
Script the same checks across dozens of client domains and IPs instead of opening tool pages one at a time.
See the solution →
How does the Check API work?
Your code or AI agent sends the check kind and a target to the Check API. AdminKit runs the same check that powers the matching tool page and returns a structured result: a status, the findings with their severity and a fix hint, and the evidence behind each finding. The contract follows the OpenAPI Specification, so you can generate a client from it.
AI agents reach the same checks through the open-source AdminKit MCP server, which speaks the Model Context Protocol. Install it with uvx adminkit-mcp, add it to your MCP client, and each tool call goes to the Check API. See the MCP server overview for the tool list.
Pick a check
Choose the kind: dns, mail, whois, tls, http-headers, mcp-endpoint, ports, mqtt, modbus or rtsp.
Send the target
POST /v1/check/{kind} with a JSON body such as {"target": "example.com"}. No key for small volumes; send X-API-Key for higher limits.
AdminKit runs it
The same engine behind the free tool pages runs the check. Port, MQTT, Modbus and RTSP checks only run on your own IP or verified assets.
Act on the result
Your pipeline or agent reads the status, findings and fix hints. Errors, including rate limits, come back as RFC 9457 problem documents.
curl -s -X POST https://api.adminkit.net/v1/check/dns -H 'Content-Type: application/json' -d '{"target": "example.com"}'
# Every result has the same JSON shape (CheckResultResponse in the OpenAPI reference):
check which check ran, e.g. "dns.lookup"
target example.com
status ok | warn | fail | error | skipped
summary one-line result
findings id, severity, title, detail, fix_hint, evidence
evidence the raw data behind the findings
duration_ms how long the check took
# Response headers: RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset
What do you get with the Check API?
Ten check kinds, one endpoint
DNS, mail authentication, WHOIS/RDAP, TLS, HTTP security headers and MCP endpoint checks on any public domain or URL; ports, MQTT, Modbus and RTSP on your own IP or verified assets.
POST /v1/check/{kind}
Results your code can branch on
Every call returns one of five statuses and a one-line summary, so a pipeline or agent decides without parsing HTML.
status: ok, warn, fail, error, skipped
A fix hint with every finding
Each finding carries a severity, a detail line and a fix hint, so a failed check tells your team what to change.
findings[].fix_hint
Start without a key
Anonymous calls are accepted and rate-limited per IP. A free account gives you an API key with higher limits.
X-API-Key header, RateLimit-* response headers
Built for AI agents
The open-source AdminKit MCP server exposes the same checks as MCP tools for any MCP client.
uvx adminkit-mcp (MIT, on PyPI)
Predictable errors
Invalid targets, refused assets and rate limits all come back in one machine-readable error format.
application/problem+json (RFC 9457)
What can you call today?
| Capability | How you use it |
|---|---|
| DNS, mail authentication, WHOIS/RDAP, TLS and HTTP header checks on any public domain | POST /v1/check/{kind} — see the OpenAPI reference |
| MCP endpoint exposure check on any public URL | POST /v1/check/mcp-endpoint, same as mcp-check |
| The public IP your call comes from | GET /v1/check/my-ip |
| Port, MQTT, Modbus and RTSP checks | Your own public IP, or assets your account has verified |
| Higher rate limits | Free account and API key from sign-up |
| AI agent access | Open-source AdminKit MCP server (MIT) |
| Every check in a browser | The free tool pages |
Active protocol checks (ports, MQTT, Modbus, RTSP) are limited to your own IP or verified assets by design, so the API can’t be used to probe someone else’s network. Need custom volumes, a dedicated deployment or checks wired into your own platform? Talk to our team.
Which risks do the checks map to?
The MCP endpoint check looks for the exposure patterns behind several risks in the OWASP Top 10 for LLM Applications, such as tools anyone can call without authentication (excessive agency). The DNS, mail, TLS and header checks test against the public standards that define each record or protocol.
What does the Check API work with?
Standards it speaks
- HTTPS and JSON
- OpenAPI 3.1 contract
- RFC 9457 problem details
- Model Context Protocol
Using and able to integrate
- Any CI/CD runner that can make an HTTPS call
- MCP clients, via uvx adminkit-mcp
- Clients generated from the OpenAPI contract
Who builds and supports the Check API?
AdminKit is a product of Netbase JSC, a software company founded in 2012 that delivers its projects remotely. The same team that wrote the Check API runs the API and answers your questions. Read more about Netbase JSC and AdminKit.
What Netbase JSC's clients say
Reviews of Netbase JSC's project work, not of AdminKit — AdminKit is a newer product from the same company.
"They had nice and good solutions for all of our requests."
Daniel Popescu
Owner, Digital Art Studio · Romania
Source: Clutch"They’re good listeners, are understanding, and they remember things very well."
Syed Ali
Partner, Oriental Overseas Exports · India
Source: Clutch"Their Quick response in every step was impressive."
Olof Christensson
CEO, Skelderwikens Brygghus AB · Sweden
Source: ClutchCan Netbase set the Check API up for you?
The Check API is self-serve, but you don't have to wire it in alone: Netbase can connect it to your pipeline, agent platform or internal tools as a scoped engagement.
Netbase expert service
Check API integration by Netbase
Netbase wires the Check API into your CI/CD, agent platform or internal tools, or sets up custom volumes and a dedicated deployment, scoped and quoted per project.
Does the Check API fit a larger organisation?
- Custom volumes above the self-serve rate limits, quoted by our team.
- A dedicated deployment of the Check API, set up by Netbase.
- Checks wired into your own platform, CI/CD or internal tools.
- Active protocol checks limited to assets your organisation has verified it owns.
Talk to an expert
Huy Nguyen (David), Founder & CEO, Netbase JSC
Ask about the Check API for your organisation: scope, timeline or a quote.
What do people ask about the Check API?
Where does the Check API run?
At https://api.adminkit.net, the same production API the free tool pages on adminkit.net call. You send POST /v1/check/{kind} with a target, and you get JSON back. The full contract is on the OpenAPI reference at /developers/openapi/.
Do I need an API key?
No key is needed for small volumes: anonymous calls are accepted and rate-limited per IP, the same way the free tool pages are. For higher limits, create a free account at /account/signup/ and send your API key. Custom volumes are quoted by our team.
What does a result look like?
Each call returns the check name, the target, a status (ok, warn, fail, error or skipped), a short summary, a list of findings with severity, detail and a fix hint, and the raw evidence behind them. Your code or agent can act on the status without scraping a web page.
How do I use the checks from an AI agent?
Install the open-source AdminKit MCP server (MIT, published on PyPI as adminkit-mcp) with uvx adminkit-mcp and add it to your MCP client. Its tools call the same Check API. Setup steps are on /developers/mcp/.
Can I scan any IP for open ports or exposed MQTT and Modbus?
No. Port, MQTT, Modbus and RTSP checks only run against your own public IP or an asset your account has verified it owns. DNS, mail, TLS, HTTP header and MCP endpoint checks take any public domain or URL.
Where should you go next?
All AdminKit products →Product
Agent Trust API: Score MCP Servers Before Calling
AdminKit's Agent Trust API scores an MCP endpoint before an AI agent connects, returning a 0-100 score, a verdict and the evidence behind it.
Solution
Check your site's certificate, headers, and MCP endpoints before a user does
Developers can check TLS certificate expiry, security headers, and MCP endpoint exposure for free. Script the same checks in CI/CD with the AdminKit Check API.
Guide
Connect an AI agent to AdminKit's MCP server
AdminKit's open-source adminkit-mcp connector is published on PyPI (MIT): 13 real tools backed by AdminKit's live Check API. Install with uvx adminkit-mcp.
Start using the Check API
Small volumes work without a key. Create a free account for an API key, or ask our team about custom volumes and a dedicated deployment.
How AdminKit works with you
- Delivered remotely — Netbase JSC, the company behind AdminKit, has worked with clients in 80 countries.
- Contracts and invoices are issued by Netbase JSC; payment goes to the company by bank transfer to Netbase JSC's company account or PayPal Business.
- Talk to the CEO, Huy Nguyen (David), directly on WhatsApp or by email at [email protected].