Netintel MCP Server
netintel-mcp
npm
v1.1.48
Published by kjgueye — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([netintel_page_extract, netintel_rss_parser, netintel_web, netintel_web_fetch, netintel_web_search, netintel_exa_answer]) co-exist with external-action tools ([netintel_calendar]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [netintel_page_extract, netintel_rss_parser, netintel_web, netintel_web_fetch, netintel_web_search, netintel_exa_answer] → sinks [netintel_calendar]
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow netintel_page_extract → netintel_calendar
Tools 122
Each tool and what it can reach — statically extracted from the published source.
netintel_calendarnetwork egressnetintel_exa_answeringests untrusted inputnetintel_page_extractingests untrusted inputnetintel_rss_parseringests untrusted inputnetintel_webingests untrusted inputnetintel_web_fetchingests untrusted inputnetintel_web_searchingests untrusted inputnetintel_ai_imageno sensitive capabilitynetintel_asn_lookupno sensitive capabilitynetintel_breach_checkno sensitive capability
Show 112 more tools ↓
netintel_bulk_domainno sensitive capabilitynetintel_cert_transparencyno sensitive capabilitynetintel_classifyno sensitive capabilitynetintel_cloud_fingerprintno sensitive capabilitynetintel_content_moderateno sensitive capabilitynetintel_convertno sensitive capabilitynetintel_cron_parserno sensitive capabilitynetintel_crypto_marketno sensitive capabilitynetintel_crypto_ohlcno sensitive capabilitynetintel_crypto_priceno sensitive capabilitynetintel_currency_exchangeno sensitive capabilitynetintel_currency_exchange_batchno sensitive capabilitynetintel_currency_exchange_historyno sensitive capabilitynetintel_dns_lookupno sensitive capabilitynetintel_dns_propagationno sensitive capabilitynetintel_dnssec_validateno sensitive capabilitynetintel_domainno sensitive capabilitynetintel_domain_ageno sensitive capabilitynetintel_domain_appraiseno sensitive capabilitynetintel_domain_availabilityno sensitive capabilitynetintel_domain_due_diligenceno sensitive capabilitynetintel_domain_reportno sensitive capabilitynetintel_domain_report_fullno sensitive capabilitynetintel_domain_vetno sensitive capabilitynetintel_email_authno sensitive capabilitynetintel_email_intelno sensitive capabilitynetintel_email_reportno sensitive capabilitynetintel_email_verifyno sensitive capabilitynetintel_embeddingsno sensitive capabilitynetintel_entity_extractno sensitive capabilitynetintel_event_classifyno sensitive capabilitynetintel_event_extractno sensitive capabilitynetintel_exa_contentsno sensitive capabilitynetintel_exa_searchno sensitive capabilitynetintel_extractno sensitive capabilitynetintel_extract_contactno sensitive capabilitynetintel_extract_invoiceno sensitive capabilitynetintel_extract_resumeno sensitive capabilitynetintel_extract_tableno sensitive capabilitynetintel_gas_priceno sensitive capabilitynetintel_github_intelno sensitive capabilitynetintel_holidaysno sensitive capabilitynetintel_iban_validateno sensitive capabilitynetintel_ip_blacklistno sensitive capabilitynetintel_ip_geono sensitive capabilitynetintel_ip_reportno sensitive capabilitynetintel_ip_reputationno sensitive capabilitynetintel_ip_riskno sensitive capabilitynetintel_jsonno sensitive capabilitynetintel_jwt_inspectorno sensitive capabilitynetintel_lang_detectno sensitive capabilitynetintel_markdownno sensitive capabilitynetintel_market_snapshotno sensitive capabilitynetintel_messagesno sensitive capabilitynetintel_moneyno sensitive capabilitynetintel_name_genno sensitive capabilitynetintel_normalizeno sensitive capabilitynetintel_npm_intelno sensitive capabilitynetintel_og_scraperno sensitive capabilitynetintel_openaino sensitive capabilitynetintel_openai_gpt_4_1no sensitive capabilitynetintel_openai_gpt_4_1_minino sensitive capabilitynetintel_openai_gpt_4_1_nanono sensitive capabilitynetintel_openai_gpt_4o_minino sensitive capabilitynetintel_openai_gpt_5_1no sensitive capabilitynetintel_openai_gpt_5_2no sensitive capabilitynetintel_openai_gpt_5_4no sensitive capabilitynetintel_openai_gpt_5_4_minino sensitive capabilitynetintel_openai_gpt_5_4_nanono sensitive capabilitynetintel_openai_gpt_5_5no sensitive capabilitynetintel_openai_gpt_5_6_lunano sensitive capabilitynetintel_openai_gpt_5_6_solno sensitive capabilitynetintel_openai_gpt_5_6_terrano sensitive capabilitynetintel_openai_gpt_5_nanono sensitive capabilitynetintel_phone_intelno sensitive capabilitynetintel_prediction_marketno sensitive capabilitynetintel_prediction_marketsno sensitive capabilitynetintel_redirect_traceno sensitive capabilitynetintel_robots_txtno sensitive capabilitynetintel_schemano sensitive capabilitynetintel_schema_mapno sensitive capabilitynetintel_schema_parseno sensitive capabilitynetintel_security_headersno sensitive capabilitynetintel_semantic_rankno sensitive capabilitynetintel_sentimentno sensitive capabilitynetintel_sitemap_parserno sensitive capabilitynetintel_ssl_analyzeno sensitive capabilitynetintel_ssl_certno sensitive capabilitynetintel_subnet_calcno sensitive capabilitynetintel_tech_fingerprintno sensitive capabilitynetintel_text_chunkno sensitive capabilitynetintel_text_statsno sensitive capabilitynetintel_text_summarizeno sensitive capabilitynetintel_text_to_jsonno sensitive capabilitynetintel_tld_priceno sensitive capabilitynetintel_token_infono sensitive capabilitynetintel_translateno sensitive capabilitynetintel_translate_batchno sensitive capabilitynetintel_translate_shortno sensitive capabilitynetintel_translate_structuredno sensitive capabilitynetintel_typosquatno sensitive capabilitynetintel_url_safetyno sensitive capabilitynetintel_url_safety_fullno sensitive capabilitynetintel_username_checkno sensitive capabilitynetintel_v1_chat_completionsno sensitive capabilitynetintel_v1_embeddingsno sensitive capabilitynetintel_wallet_balanceno sensitive capabilitynetintel_wallet_intelno sensitive capabilitynetintel_wayback_lookupno sensitive capabilitynetintel_weather_currentno sensitive capabilitynetintel_weather_forecastno sensitive capabilitynetintel_whois_lookupno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (122 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 9
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.1.48 latest |
A 96/100 | 1 | 1.13.0 | 2026-09-07 |
v1.1.47 |
A 96/100 | 1 | 1.13.0 | 2026-09-05 |
v1.1.44 |
A 96/100 | 1 | 1.13.0 | 2026-09-01 |
v1.1.40 |
A 96/100 | 1 | 1.13.0 | 2026-08-31 |
v1.1.38 |
A 96/100 | 1 | 1.13.0 | 2026-08-29 |
Show 4 more versions ↓
v1.1.35 |
A 96/100 | 1 | 1.12.1 | 2026-08-01 |
v1.1.34 |
A 96/100 | 1 | 1.12.1 | 2026-07-29 |
v1.1.33 |
A 96/100 | 1 | 1.9.0 | 2026-07-24 |
v1.1.32 |
A 100/100 | 0 | 1.5.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan netintel-mcp --onlineMore in Security & Testing
The Stripe Agent Toolkit enables popular agent frameworks including LangChain and Vercel's AI SDK to integrate with Stripe APIs through function calling.
MCP (Model Context Protocol) server for AgentGate. Enables Claude and other MCP-compatible AI assistants to request approvals.
Scan any website for AI agent readiness, payment protocols, and discovery endpoints
MCP server for aigently security guardrails — reads static catalog-data JSON, zero API dependency
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.