// SCAN REPORT

Net

39 tools. 7 can modify or destroy data without limits.

7 write tools that can modify data. Rate limits recommended.

Last updated: 30 Jun 2026

7 can modify or destroy data

32 read-only

39 tools total

Community server · catalogue entry verified 30/06/2026

How to control Net ↓

TOOL MAP

What Net exposes to your agents

Read (32) Write / Execute (7) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Net tools

Execute · Medium local_whois The tool runs a whois lookup locally, meaning it executes a system-level process on the host machine. Execute · High local_curl The name 'local_curl' strongly implies executing a curl command locally, which would trigger external HTTP/network operations whose effects depend on arguments. Execute · Medium local_dig The name implies running a local 'dig' command (a DNS diagnostic tool), which would constitute executing an external process. Execute · Medium local_mtr MTR is a network diagnostic tool that combines traceroute and ping by executing system-level commands.

7 of Net's 39 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Net

PolicyLayer is an MCP gateway — it sits between your AI agents and Net, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "bgp_asn_info": {
    "limits": [
      {
        "counter": "bgp_asn_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Net — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON NET →

Instant setup, no code required.

FULL CATALOGUE

All 39 Net tools

EXECUTE 7 tools

Execute local_curl local_curl Execute local_dig local_dig Execute local_mtr local_mtr Execute local_nmap local_nmap Execute local_ping local_ping Execute local_traceroute local_traceroute Execute local_whois Run a whois lookup from the local machine.

READ 32 tools

Read bgp_asn_info Get information about an Autonomous System. Read bgp_hijacks bgp_hijacks Read bgp_historical_lookup bgp_historical_lookup Read bgp_leaks bgp_leaks Read bgp_prefix_origin Find which AS(es) originate a given prefix. Read bgp_route_lookup bgp_route_lookup Read bogon_check bogon_check Read dns_lookup dns_lookup Read dns_trace dns_trace Read ip_contains ip_contains Read irr_as_set_expand irr_as_set_expand Read irr_autnum irr_autnum Read irr_route_lookup irr_route_lookup Read local_arp Show the ARP table (IP-to-MAC address mappings). Read local_connections Show active network connections and listening ports. Read local_interfaces Show network interfaces and their IP addresses on the local machine. Read local_netstat_stats Show network protocol statistics (TCP, UDP, ICMP counters). Read local_public_ip Get the public IP address of the local machine. Read local_routes Show the local routing table. Read mrt_search mrt_search Read peeringdb_facility Search for data center facilities in PeeringDB. Read peeringdb_ix peeringdb_ix Read peeringdb_network Look up a network in PeeringDB by ASN. Read prefix_overlap prefix_overlap Read ris_collectors ris_collectors Read rpki_aspa_changes rpki_aspa_changes Read rpki_aspa_lookup rpki_aspa_lookup Read rpki_roa_lookup Look up RPKI ROAs for a prefix or ASN. Read rpki_validate rpki_validate Read subnet_info Get detailed information about an IP prefix or address. Read subnet_split subnet_split Read supernet_aggregate Try to aggregate a list of IP prefixes into a supernet.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Net

Is the Net MCP server safe to use without restrictions? +

The Net server is primarily read-only with 32 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Net MCP server expose? +

39 tools across 3 categories: Execute, Read, Write. 32 are read-only. 7 can modify, create, or delete data.

How do I enforce a policy on Net? +

Register the Net MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Net tool call.

Deterministic rules across all 39 Net tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON NET →

Instant setup, no code required.

39 Net tools catalogued and risk-classified — across an index of 43,000+ MCP servers.