English Français العربية

AdminKit

السجل الرسمي البحث والويب

Network, DNS, mail-auth and MCP endpoint security checks for AI agents, backed by adminkit.net.

الشيفرة المصدرية الموقع التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

PYPI package adminkit-mcp
Claude Code 
claude mcp add adminkit -e 'ADMINKIT_API_KEY=<your adminkit_api_key>' -- uvx adminkit-mcp==0.1.0
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "adminkit": {
            "command": "uvx",
            "args": [
                "adminkit-mcp==0.1.0"
            ],
            "env": {
                "ADMINKIT_API_KEY": "<your adminkit_api_key>"
            }
        }
    }
}

متغيرات البيئة

  • ADMINKIT_API_KEY سري Optional AdminKit API key (explain_report, higher limits)

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. AdminKit MCP server + MCP endpoint scan Action
  2. Tools
  3. Install
  4. GitHub Action: scan your MCP endpoint
  5. Development
  6. Licence

AdminKit MCP server + MCP endpoint scan Action

Open-source Model Context Protocol server that gives AI agents (Claude, ChatGPT, Cursor, VS Code, any MCP client) real network, DNS and mail checks from AdminKit, plus a read-only GitHub Action that scans your own MCP endpoint for anonymous-access exposure.

Every tool returns real data from the live AdminKit Check API (https://api.adminkit.net) or pure local computation. When a check cannot be reached, the tool says so; it never invents a result.

Tools

ToolWhat it does
check_ipYour own public IP, ASN and a CGNAT hint (only the caller's own IP).
dns_lookupA / AAAA / MX / TXT / NS / CAA / PTR / SOA / CNAME lookup.
check_mail_authSPF and DMARC posture for a domain.
check_domainAggregate domain health: whois, TLS certificate, HTTP security headers.
check_owned_portsPort exposure check for targets you have verified you own.
check_mcp_endpointExposure probe for an MCP server (initialize + tools/list only).
explain_reportPlain-language AI explanation of a shared AdminKit report (needs an API key).
get_radarAggregated honeypot / telemetry trends from AdminKit Radar.
subnet_calc, ip_info, ipv6_info, mac_vendor, user_agentOffline utilities: subnet math, address info, OUI vendor lookup, User-Agent parsing.

Install

Python 3.12+.

pip install "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0"

or run it without installing, with uv:

uvx --from "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0" adminkit-mcp
Claude Desktop / Claude Code / Cursor (stdio)
{
  "mcpServers": {
    "adminkit": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0", "adminkit-mcp"]
    }
  }
}
Streamable HTTP
adminkit-mcp --http 127.0.0.1:8080
Configuration (environment only)
VariableDefaultPurpose
ADMINKIT_API_BASEhttps://api.adminkit.netCheck API base URL.
ADMINKIT_SITE_BASEhttps://adminkit.netSite base URL (fallback for some checks).
ADMINKIT_API_KEYunsetOptional AdminKit API key (explain_report, higher limits). Never logged.
ADMINKIT_MCP_TIMEOUT_SECONDS10Per-request timeout.
ADMINKIT_MCP_RATE_LIMIT_PER_SECOND5Client-side rate limit.

GitHub Action: scan your MCP endpoint

Checks one MCP endpoint for: initialize accepted without credentials, tool list readable anonymously, tool names that look like shell/file/network access, and no TLS. It only sends initialize and tools/list and never calls tools/call, so it is safe against a live server. Outputs a 0-100 exposure score, a job summary, and score / findings-json outputs.

- name: Scan our MCP endpoint
  id: scan
  uses: netbasecorp/adminkit-mcp@v0.1.0
  with:
    url: https://mcp.example.com/mcp
    fail-on: critical # none | warning | critical
- run: echo "score ${{ steps.scan.outputs.score }}"
InputDefaultDescription
url(required)MCP endpoint URL to scan.
fail-oncriticalnone, warning (any finding) or critical (high/critical finding).
api-key""Reserved for sending results to the AdminKit dashboard; never sent to the target.
allow-privatefalseAllow a private/loopback target (only for CI fixtures you started yourself).

An unreachable target always fails the step. A private target refused with allow-private: false is reported as skipped. Full workflow: examples/scan-mcp-endpoint.yml.

The same probe runs from the command line:

adminkit-mcp probe https://mcp.example.com/mcp

Scan only endpoints you own or are authorised to test.

Development

pip install -e ".[dev]"
pytest            # every test runs against local fakes on 127.0.0.1, no network
ruff check . && mypy
bash action/test/test_action.sh

Licence

MIT, see LICENSE. The AdminKit website, API and platform are separate proprietary services operated by Netbase JSC; this repository contains only the open-source client.

الأسئلة الشائعة

ما هو AdminKit؟

Network, DNS, mail-auth and MCP endpoint security checks for AI agents, backed by adminkit.net.

كيف أثبّت AdminKit؟

يعمل على جهازك. في Claude Code: claude mcp add adminkit -e 'ADMINKIT_API_KEY=<your adminkit_api_key>' -- uvx adminkit-mcp==0.1.0. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج AdminKit إلى مفتاح API؟

نعم. يتطلب ADMINKIT_API_KEY، وتضبطها في إعداداته.

هل AdminKit مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون AdminKit؟

ينشره netbasecorp. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.