English Français العربية

AdminKit

Official registry Search and web

Network, DNS, mail-auth and MCP endpoint security checks for AI agents, backed by adminkit.net.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package adminkit-mcp
Claude Code 
claude mcp add adminkit -e 'ADMINKIT_API_KEY=<your adminkit_api_key>' -- uvx adminkit-mcp==0.1.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "adminkit": {
            "command": "uvx",
            "args": [
                "adminkit-mcp==0.1.0"
            ],
            "env": {
                "ADMINKIT_API_KEY": "<your adminkit_api_key>"
            }
        }
    }
}

Environment variables

  • ADMINKIT_API_KEY secret Optional AdminKit API key (explain_report, higher limits)

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. AdminKit MCP server + MCP endpoint scan Action
  2. Tools
  3. Install
  4. GitHub Action: scan your MCP endpoint
  5. Development
  6. Licence

AdminKit MCP server + MCP endpoint scan Action

Open-source Model Context Protocol server that gives AI agents (Claude, ChatGPT, Cursor, VS Code, any MCP client) real network, DNS and mail checks from AdminKit, plus a read-only GitHub Action that scans your own MCP endpoint for anonymous-access exposure.

Every tool returns real data from the live AdminKit Check API (https://api.adminkit.net) or pure local computation. When a check cannot be reached, the tool says so; it never invents a result.

Tools

ToolWhat it does
check_ipYour own public IP, ASN and a CGNAT hint (only the caller's own IP).
dns_lookupA / AAAA / MX / TXT / NS / CAA / PTR / SOA / CNAME lookup.
check_mail_authSPF and DMARC posture for a domain.
check_domainAggregate domain health: whois, TLS certificate, HTTP security headers.
check_owned_portsPort exposure check for targets you have verified you own.
check_mcp_endpointExposure probe for an MCP server (initialize + tools/list only).
explain_reportPlain-language AI explanation of a shared AdminKit report (needs an API key).
get_radarAggregated honeypot / telemetry trends from AdminKit Radar.
subnet_calc, ip_info, ipv6_info, mac_vendor, user_agentOffline utilities: subnet math, address info, OUI vendor lookup, User-Agent parsing.

Install

Python 3.12+.

pip install "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0"

or run it without installing, with uv:

uvx --from "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0" adminkit-mcp
Claude Desktop / Claude Code / Cursor (stdio)
{
  "mcpServers": {
    "adminkit": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/netbasecorp/adminkit-mcp@v0.1.0", "adminkit-mcp"]
    }
  }
}
Streamable HTTP
adminkit-mcp --http 127.0.0.1:8080
Configuration (environment only)
VariableDefaultPurpose
ADMINKIT_API_BASEhttps://api.adminkit.netCheck API base URL.
ADMINKIT_SITE_BASEhttps://adminkit.netSite base URL (fallback for some checks).
ADMINKIT_API_KEYunsetOptional AdminKit API key (explain_report, higher limits). Never logged.
ADMINKIT_MCP_TIMEOUT_SECONDS10Per-request timeout.
ADMINKIT_MCP_RATE_LIMIT_PER_SECOND5Client-side rate limit.

GitHub Action: scan your MCP endpoint

Checks one MCP endpoint for: initialize accepted without credentials, tool list readable anonymously, tool names that look like shell/file/network access, and no TLS. It only sends initialize and tools/list and never calls tools/call, so it is safe against a live server. Outputs a 0-100 exposure score, a job summary, and score / findings-json outputs.

- name: Scan our MCP endpoint
  id: scan
  uses: netbasecorp/adminkit-mcp@v0.1.0
  with:
    url: https://mcp.example.com/mcp
    fail-on: critical # none | warning | critical
- run: echo "score ${{ steps.scan.outputs.score }}"
InputDefaultDescription
url(required)MCP endpoint URL to scan.
fail-oncriticalnone, warning (any finding) or critical (high/critical finding).
api-key""Reserved for sending results to the AdminKit dashboard; never sent to the target.
allow-privatefalseAllow a private/loopback target (only for CI fixtures you started yourself).

An unreachable target always fails the step. A private target refused with allow-private: false is reported as skipped. Full workflow: examples/scan-mcp-endpoint.yml.

The same probe runs from the command line:

adminkit-mcp probe https://mcp.example.com/mcp

Scan only endpoints you own or are authorised to test.

Development

pip install -e ".[dev]"
pytest            # every test runs against local fakes on 127.0.0.1, no network
ruff check . && mypy
bash action/test/test_action.sh

Licence

MIT, see LICENSE. The AdminKit website, API and platform are separate proprietary services operated by Netbase JSC; this repository contains only the open-source client.

Frequently asked questions

What is AdminKit?

Network, DNS, mail-auth and MCP endpoint security checks for AI agents, backed by adminkit.net.

How do I install AdminKit?

It runs on your machine. In Claude Code: claude mcp add adminkit -e 'ADMINKIT_API_KEY=<your adminkit_api_key>' -- uvx adminkit-mcp==0.1.0. For other clients, paste the JSON configuration from this page into their MCP settings.

Does AdminKit need an API key?

Yes. It expects ADMINKIT_API_KEY, which you set in its configuration.

Is AdminKit open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains AdminKit?

It is published by netbasecorp. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.