About netdiag MCP
netdiag MCP is an MCP server in the Security category: ping, traceroute, DNS lookup, HTTP check, SSL verify, port scan, MTR, WHOIS, and bandwidth test u2014 all from your AI agent. Works offline, no cloud dependency. Your network troubleshooter in a box.
Install
uvx netdiag-mcppip install netdiag-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (12)
asn_lookupASN + country-code lookup for an IP, or org info for an AS number, via Team Cymru's whois service — no API key or GeoIP database needed
Parameters not published.
current_timeCurrent date, time and weekday in an IANA timezone — the weekday is returned as data because deriving it from a date is arithmetic that fails silently. Also reports UTC and epoch, so it doubles as a clock check
Parameters not published.
dns_lookupResolve a DNS record via `dig` (A/AAAA/MX/TXT/NS/CNAME/SOA/PTR/CAA), optionally against a specific resolver and over plain DNS/DoT/DoH
Parameters not published.
dnssec_checkQuery a known-validating resolver and report whether the AD bit is set (plain/DoT/DoH) — the only reliable way to confirm DNSSEC validation, since an RRSIG being present in a plain `dig` reply does not by itself prove anything validated it
Parameters not published.
health_checkVersion and which wrapped binaries (`dig`/`ping`/`mtr`/`whois`) are present on PATH
Parameters not published.
http_checkHEAD/GET a URL and report status, redirect chain, and latency
Parameters not published.
http_getGET a URL and return the body. Textual types only (`text/*`, JSON, XML, JavaScript, YAML, `+json`/`+xml`), capped at 1 MiB. Refuses loopback, link-local and cloud-metadata destinations, including via redirect
Parameters not published.
ping_hostICMP ping (count clamped to 1-10)
Parameters not published.
tcp_port_checkIs a TCP port open — a plain socket connect, not a port scan
Parameters not published.
tls_cert_checkFetch the certificate a host presents and report subject/issuer/validity/SANs
Parameters not published.
traceroute_pathHop-by-hop path/loss report via `mtr --report` (fixed cycles, not a live/continuous run)
Parameters not published.
whois_lookupWHOIS lookup for a domain
Parameters not published.
Ask AI
Ask AI about netdiag MCP
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.