English Français العربية

AdminKit

Registre officiel Recherche et web

Network, DNS, mail-auth and MCP endpoint security checks for AI agents, backed by adminkit.net.

Code source Site web Documentation

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

PYPI package adminkit-mcp
Claude Code 
claude mcp add adminkit -e 'ADMINKIT_API_KEY=<your adminkit_api_key>' -- uvx adminkit-mcp==0.1.0
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "adminkit": {
            "command": "uvx",
            "args": [
                "adminkit-mcp==0.1.0"
            ],
            "env": {
                "ADMINKIT_API_KEY": "<your adminkit_api_key>"
            }
        }
    }
}

Variables d'environnement

  • ADMINKIT_API_KEY secret Optional AdminKit API key (explain_report, higher limits)

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. AdminKit MCP server + MCP endpoint scan Action
  2. Tools
  3. Install
  4. GitHub Action: scan your MCP endpoint
  5. Development
  6. Licence

AdminKit MCP server + MCP endpoint scan Action

Open-source Model Context Protocol server that gives AI agents (Claude, ChatGPT, Cursor, VS Code, any MCP client) real network, DNS and mail checks from AdminKit, plus a read-only GitHub Action that scans your own MCP endpoint for anonymous-access exposure.

Every tool returns real data from the live AdminKit Check API (https://api.adminkit.net) or pure local computation. When a check cannot be reached, the tool says so; it never invents a result.

Tools

ToolWhat it does
check_ipYour own public IP, ASN and a CGNAT hint (only the caller's own IP).
dns_lookupA / AAAA / MX / TXT / NS / CAA / PTR / SOA / CNAME lookup.
check_mail_authSPF and DMARC posture for a domain.
check_domainAggregate domain health: whois, TLS certificate, HTTP security headers.
check_owned_portsPort exposure check for targets you have verified you own.
check_mcp_endpointExposure probe for an MCP server (initialize + tools/list only).
explain_reportPlain-language AI explanation of a shared AdminKit report (needs an API key).
get_radarAggregated honeypot / telemetry trends from AdminKit Radar.
subnet_calc, ip_info, ipv6_info, mac_vendor, user_agentOffline utilities: subnet math, address info, OUI vendor lookup, User-Agent parsing.

Install

Python 3.12+.

pip install "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0"

or run it without installing, with uv:

uvx --from "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0" adminkit-mcp
Claude Desktop / Claude Code / Cursor (stdio)
{
  "mcpServers": {
    "adminkit": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0", "adminkit-mcp"]
    }
  }
}
Streamable HTTP
adminkit-mcp --http 127.0.0.1:8080
Configuration (environment only)
VariableDefaultPurpose
ADMINKIT_API_BASEhttps://api.adminkit.netCheck API base URL.
ADMINKIT_SITE_BASEhttps://adminkit.netSite base URL (fallback for some checks).
ADMINKIT_API_KEYunsetOptional AdminKit API key (explain_report, higher limits). Never logged.
ADMINKIT_MCP_TIMEOUT_SECONDS10Per-request timeout.
ADMINKIT_MCP_RATE_LIMIT_PER_SECOND5Client-side rate limit.

GitHub Action: scan your MCP endpoint

Checks one MCP endpoint for: initialize accepted without credentials, tool list readable anonymously, tool names that look like shell/file/network access, and no TLS. It only sends initialize and tools/list and never calls tools/call, so it is safe against a live server. Outputs a 0-100 exposure score, a job summary, and score / findings-json outputs.

- name: Scan our MCP endpoint
  id: scan
  uses: netbasecorp/adminkit-mcp@v0.1.0
  with:
    url: https://mcp.example.com/mcp
    fail-on: critical # none | warning | critical
- run: echo "score ${{ steps.scan.outputs.score }}"
InputDefaultDescription
url(required)MCP endpoint URL to scan.
fail-oncriticalnone, warning (any finding) or critical (high/critical finding).
api-key""Reserved for sending results to the AdminKit dashboard; never sent to the target.
allow-privatefalseAllow a private/loopback target (only for CI fixtures you started yourself).

An unreachable target always fails the step. A private target refused with allow-private: false is reported as skipped. Full workflow: examples/scan-mcp-endpoint.yml.

The same probe runs from the command line:

adminkit-mcp probe https://mcp.example.com/mcp

Scan only endpoints you own or are authorised to test.

Development

pip install -e ".[dev]"
pytest            # every test runs against local fakes on 127.0.0.1, no network
ruff check . && mypy
bash action/test/test_action.sh

Licence

MIT, see LICENSE. The AdminKit website, API and platform are separate proprietary services operated by Netbase JSC; this repository contains only the open-source client.

Questions fréquentes

Qu'est-ce que AdminKit ?

Network, DNS, mail-auth and MCP endpoint security checks for AI agents, backed by adminkit.net.

Comment installer AdminKit ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add adminkit -e 'ADMINKIT_API_KEY=<your adminkit_api_key>' -- uvx adminkit-mcp==0.1.0. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour AdminKit ?

Oui. Il attend ADMINKIT_API_KEY, à renseigner dans sa configuration.

AdminKit est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient AdminKit ?

Il est publié par netbasecorp. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.