netip-mcp is a free MCP server that wraps the network toolbox of whatismynetip.com into tools that coding agents can call directly. According to the project description, the website's own tools run in the browser, while this project runs the same logic alongside the agent, and the port data and calculators of the two remain consistent.
[Main capabilities] The capabilities listed by the project include: subnet calculation (IPv4/IPv6), port lookup, MAC vendor lookup, DNS and blacklist (DNSBL) checks, TLS certificate inspection, and public IP lookup. Port lookup supports searching by port number or keyword; for example, using lookup_port with query: "redis" can find 6379; passing detail: true returns the full port description and common questions. The port pages on the site take a clear stance, giving a conclusion for each port on whether it "should be open."
[How to use] It is suitable for Claude Desktop, Cursor, or any MCP client with JSON configuration. Running it via npx requires Node 18 or higher. The project is also listed in the official MCP registry under the identifier io.github.labaccessnow/netip-mcp. The project recommends pinning the version.
[Privacy and security design] According to the project description, using this service requires no account, registration, or key, and there is no telemetry and no usage data is collected; it does not read anything on the user's disk, and the only file it opens is its own bundled OUI table. Local tools do not open sockets; network tools only communicate with public services, including Cloudflare and Google's DNS-over-HTTPS resolvers, Cloudflare's trace endpoint, Team Cymru's ASN DNS, and the target host pointed to by tls_inspect. tls_inspect rejects any target that resolves to private or reserved address space, so it cannot be used to probe the user's own network.
[Limitations] The project clearly states that determining "whether my port is accessible from the outside" requires a machine outside the NAT to attempt a connection, which is done by whatismynetip.com/port-checker, and local tools cannot do this.
[Other information] The project uses the MIT license, and the author is James Son, a network, security, and automation engineer; the project welcomes corrections and additions to port descriptions. The official materials do not provide information such as pricing, paid plans, specific installation command examples, or version numbers.
