
Subnet math, port and MAC lookups, DNS, DNSBL, TLS cert inspection, public IP. No account.
Public tool metadata for what this MCP can expose to an agent.
subnet_calcNetwork, mask, wildcard, broadcast, host range and counts for a CIDR — IPv4 and IPv6, /31 and /32 done rightNetwork, mask, wildcard, broadcast, host range and counts for a CIDR — IPv4 and IPv6, /31 and /32 done right
No parameter schema in public metadata yet.
ip_in_subnetIs this address inside that block?Is this address inside that block?
No parameter schema in public metadata yet.
ip_convertIPv4 as dotted, integer, hex, binary — from any of themIPv4 as dotted, integer, hex, binary — from any of them
No parameter schema in public metadata yet.
ipv6_normalizeExpanded and RFC 5952 compressed forms, and what kind of address it isExpanded and RFC 5952 compressed forms, and what kind of address it is
No parameter schema in public metadata yet.
mac_lookupVendor from the full IEEE registry (~40,000 assignments, bundled), plus the multicast and locally-administered bitsVendor from the full IEEE registry (~40,000 assignments, bundled), plus the multicast and locally-administered bits
No parameter schema in public metadata yet.
lookup_portWhat runs on a port, and whether to expose it — 100 ports written up by hand, searchable by serviceWhat runs on a port, and whether to expose it — 100 ports written up by hand, searchable by service
No parameter schema in public metadata yet.
dns_lookupA, AAAA, MX, TXT, NS, CNAME, CAA, SOA, PTR, SRV over DNS-over-HTTPSA, AAAA, MX, TXT, NS, CNAME, CAA, SOA, PTR, SRV over DNS-over-HTTPS
No parameter schema in public metadata yet.
reverse_dnsPTR for an IPv4 or IPv6 addressPTR for an IPv4 or IPv6 address
No parameter schema in public metadata yet.
dnsbl_checkFive common blocklists, honest about the ones that refuse public resolversFive common blocklists, honest about the ones that refuse public resolvers
No parameter schema in public metadata yet.
tls_inspectThe certificate a host actually serves: expiry, SANs, chain verification, protocol, cipherThe certificate a host actually serves: expiry, SANs, chain verification, protocol, cipher
No parameter schema in public metadata yet.
my_public_ipThe address the internet sees, edge location, ASN, reverse DNS, datacenter/VPN hintThe address the internet sees, edge location, ASN, reverse DNS, datacenter/VPN hint
No parameter schema in public metadata yet.
Sponsors
The whatismynetip.com toolbox as tools your coding agent can call. Subnet math, "what runs on this port and should it be open", MAC vendor lookups, DNS and blocklist checks, the certificate a host actually serves, and the IP the internet sees you as.
Free, MIT, no account, no telemetry. The site's own tools run in your browser; this runs the same logic next to your agent.
Pin the version.
Claude Code
claude mcp add netip -- npx -y github:getlarkwright/netip-mcp#v0.1.1
Claude Desktop, Cursor, or any client with a JSON config
{
"mcpServers": {
"netip": {
"command": "npx",
"args": ["-y", "github:getlarkwright/netip-mcp#v0.1.1"]
}
}
}
Docker
{
"mcpServers": {
"netip": {
"command": "docker",
"args": ["run", "-i", "--rm", "ghcr.io/getlarkwright/netip-mcp:0.1.1"]
}
}
}
Node 18 or newer for the npx route. Also in the official MCP registry as io.github.getlarkwright/netip-mcp.
ghcr.io/getlarkwright/netip-mcp:0.1.1