NetAPI MCP Server

Domain data for AI assistants: Claude, ChatGPT, Cursor and any other MCP client

The Model Context Protocol (MCP) lets an AI assistant call external tools. The NetAPI MCP server gives it our domain data: it can check whether a domain or IP is in the compromised feed, search domains registered in the last days, look up the statistics of a TLD, a registrar or a DNS provider, read the Top 1M ranking, and, with a NetAPI plan, look up single domains and IPs and request download links for the domain lists and datasets.

Server URL: https://mcp.netapi.com/mcp (no account: https://mcp.netapi.com/mcp/public)

Source code and change log: github.com/coderockers/netapi-mcp. Prefer plain HTTP? The same data is available as a JSON API.

What the assistant can do

Free, no account needed

Tool	What it answers
`check_compromised`	Is a domain or IP in the compromised feed (malware, phishing, abuse)? Seen in the last 24 hours or ever, block reason, registrar.
`search_new_domains`	Domains registered in the last 1 to 7 days that contain a string: brand monitoring, typosquatting, phishing campaigns, keyword trends.
`tld_stats`	Registry, active domains, new and deleted domains in 24 hours, growth over 7 to 365 days, abuse rate, Top 1M presence and policies of a TLD.
`domain_rank`	Rank of a domain in the NetAPI Top 1M and inside its TLD.
`top_websites`, `top_1m`	The most popular websites of a TLD, or a slice of the Top 1M.
`registrar_info`	Size, rank and abuse rate of a registrar.
`dns_provider_info`	Domains, market share and growth of a DNS provider.
`list_zones`	All 1,584 zones with their figures.

With a NetAPI plan

Tool	What it answers
`lookup_domain`	Nameservers, server IP and country, registration and expiration dates and the registrar of a domain.
`lookup_ip`	Domains hosted on an IP address (reverse IP).
`get_download_url`	A 24-hour link to a domain list or dataset file: active, new or deleted domains of one zone or of all zones (datasets need Plus or Pro).
`account_info`	Plan and request limits of the connected account.

How to connect

Add https://mcp.netapi.com/mcp as a remote MCP server. The client asks you to sign in to NetAPI (one-time code by email or Google), shows what the app will be able to do, and you click Allow access. A free account is enough; a plan unlocks the paid tools and raises the request limits.

claude.ai and Claude Desktop: Settings → Connectors → Add custom connector → paste the URL → Connect.
ChatGPT: Settings → Connectors → Add (developer mode) → MCP server URL, authentication OAuth.
Claude Code: claude mcp add --transport http netapi https://mcp.netapi.com/mcp, then /mcp to sign in.
Cursor, Windsurf, VS Code and others: add a remote MCP server of type "http" (Streamable HTTP) with the URL; sign in when asked, or put your API token from the dashboard in the headers as Authorization: Bearer YOUR_API_TOKEN.
Without an account: use https://mcp.netapi.com/mcp/public: the free tools with anonymous limits, no sign-in.

The app never sees your password or API token: it receives its own access token, which you can revoke at any time in the Connected apps section of your dashboard. It cannot change your account, email or billing.

Request limits

Limits are counted per account (per IP address without an account) and reset at 00:00 UTC; the assistant gets a clear message with the limit and when it resets.

Access	Point lookups (compromised check, stats)	Lists (top websites, Top 1M)	New-domain search	Domain / IP lookups	Download links
No account	30 / min, 1,000 / day	10 / min, 200 / day	6 / min, 100 / day, 100 results	—	—
Free account	60 / min, 5,000 / day	30 / min, 1,000 / day	30 / min, 500 / day, 500 results	—	—
Basic	60 / min	60 / min	2,000 / day, 1,000 results	2,000 / day	300 / day
Plus	60 / min	60 / min	5,000 / day, 5,000 results	5,000 / day	1,000 / day
Pro	120 / min	120 / min	no daily limit	no daily limit	no daily limit

The same limits apply to the API; switching between the API, the JSON API and the MCP server does not add up.

Questions

Is it free?

The free tools and the free datasets (Top 1M, compromised feeds, CC BY 4.0) cost nothing. Domain and IP lookups and downloads need a plan, like on the website.

What does the app get access to?

Reading NetAPI data with your plan and limits, and temporary download links for the files your plan includes. Nothing else: no account changes, no billing, no API token.

How do I disconnect an app?

Dashboard → Connected apps → Disconnect. Its tokens stop working immediately.

Can I build my own integration?

Yes: the server is a thin layer over the JSON API, and its code is on GitHub under the MIT license. Questions: contact us.