netintel-mcp 1.1.52 → 1.1.54

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Karim Gueye (NetIntel)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -4,6 +4,17 @@ MCP server for NetIntel — 122 network intelligence tools for AI agents.
 DNS, SSL, WHOIS, email security, cloud fingerprinting, OSINT and more.
 Pay-per-call via x402 — the NetIntel API accepts USDC on Base or Solana; this MCP server pays on Base. No API keys needed — just a wallet with USDC.
 
+## Install as a Claude Code plugin (recommended)
+
+The plugin installs the MCP server **and** a skill that knows which NetIntel endpoint fits a task and what it costs, and prompts once for the agent wallet key (stored in Claude Code's secure storage, never in settings files):
+
+```
+/plugin marketplace add kjgueye/netintel-mcp
+/plugin install netintel@netintel
+```
+
+Then just ask — "is this IP malicious?", "does this domain have DMARC?", "fetch this URL as JSON" — and the tools pay per call from that wallet.
+
 ## Install
 
 ```bash
@@ -26,8 +37,8 @@ Or add manually to your Claude Desktop config:
 ```
 
 ## Requirements
-- A wallet private key with USDC on Base mainnet
-- EVM_PRIVATE_KEY environment variable set
+- **Optional:** `EVM_PRIVATE_KEY` — a dedicated agent wallet holding USDC on Base mainnet (gasless; a few dollars is plenty). With it, every tool pays its listed price automatically.
+- **Without a wallet** the server still runs: `netintel_dns_lookup`, `netintel_ssl_cert`, `netintel_whois_lookup`, `netintel_subnet_calc` and `netintel_email_auth` work free (about 30 calls/hour per client, then the normal price), and paid tools reply with what they cost and how to fund. `netintel_wallet_status` shows the wallet, its USDC balance and the free tools.
 
 ## Tools
 
@@ -35,7 +46,7 @@ Or add manually to your Claude Desktop config:
 
 | Tool | Description | Price |
 |------|-------------|-------|
-| netintel_dns_lookup | DNS lookup / nslookup / dig API — resolve the common DNS record types… | $0.002 |
+| netintel_dns_lookup | DNS lookup for any domain — resolve A, AAAA, MX, TXT, NS, CNAME, SOA… | $0.002 |
 | netintel_ssl_analyze | Performs a TLS handshake to inspect the certificate chain, probes… | $0.007 |
 | netintel_redirect_trace | Follows a URL through its full redirect chain (up to 20 hops)… | $0.01 |
 | netintel_security_headers | Fetches a URL and evaluates 10 security-critical response headers (CSP… | $0.01 |
@@ -43,7 +54,7 @@ Or add manually to your Claude Desktop config:
 | netintel_cloud_fingerprint | Fingerprints a domain's cloud infrastructure — DNS records, HTTP… | $0.01 |
 | netintel_schema_parse | Extract structured data from any unstructured text into your own JSON… | $0.01 |
 | netintel_asn_lookup | Resolves an IP address or domain to its Autonomous System Number (ASN)… | $0.03 |
-| netintel_whois_lookup | WHOIS domain lookup via RDAP — registrar, creation/expiry/updated… | $0.003 |
+| netintel_whois_lookup | Domain registration lookup, WHOIS via RDAP — registrar, registration… | $0.003 |
 | netintel_cert_transparency | Query the crt.sh certificate transparency log database to enumerate all… | $0.01 |
 | netintel_subnet_calc | Calculates IPv4/IPv6 subnet details from CIDR notation —… | $0.005 |
 | netintel_dns_propagation | Query a domain's DNS record across 10 geographically distributed public… | $0.03 |
@@ -60,7 +71,7 @@ Or add manually to your Claude Desktop config:
 | netintel_rss_parser | Fetch and parse any RSS 2.0 or Atom feed URL and return structured… | $0.01 |
 | netintel_username_check | Check username availability across 20+ social platforms and developer… | $0.03 |
 | netintel_wayback_lookup | Query the Internet Archive Wayback Machine to check if a URL has ever… | $0.01 |
-| netintel_ip_reputation | Check an IP address against AbuseIPDB and AlienVault OTX threat feeds… | $0.05 |
+| netintel_ip_reputation | IP reputation and malicious-IP check — screens an address against… | $0.05 |
 | netintel_cron_parser | Parse any cron expression into a human-readable explanation, validate… | $0.03 |
 | netintel_currency_exchange | Convert any amount between 32 fiat currencies (live European Central… | $0.01 |
 | netintel_github_intel | Fetch public metadata for any GitHub repository — stars, forks, open… | $0.03 |
@@ -79,7 +90,7 @@ Or add manually to your Claude Desktop config:
 | netintel_name_gen | Generate brandable startup/product names from a keyword using prefixes… | $0.05 |
 | netintel_tld_price | Reference registration/renewal/transfer pricing from a curated table of… | $0.01 |
 | netintel_typosquat | Generate common typo and look-alike variations of a domain and check… | $0.05 |
-| netintel_classify | Text classification API — zero-shot text classifier / categorization:… | $0.005 |
+| netintel_classify | Classify text into your own categories — zero-shot: supply 2–20 labels… | $0.005 |
 | netintel_content_moderate | Moderate text content using Claude Haiku — flags categories like… | $0.005 |
 | netintel_entity_extract | Extract named entities from text using Claude Haiku — people… | $0.05 |
 | netintel_sentiment | Sentiment analysis API — analyze sentiment of text and get a text… | $0.002 |
@@ -99,7 +110,7 @@ Or add manually to your Claude Desktop config:
 | netintel_markdown | Convert messy HTML or text into clean, well-structured Markdown using… | $0.03 |
 | netintel_normalize | Conform messy or inconsistent JSON to a target schema using Claude… | $0.05 |
 | netintel_text_to_json | Turn unstructured text into structured JSON matching a caller-supplied… | $0.05 |
-| netintel_web | Extract article / main content from any URL or PDF to clean, LLM-ready… | $0.003 |
+| netintel_web | Extract text from a web page or PDF as clean Markdown — HTML to… | $0.003 |
 | netintel_money | Normalize any messy money string into a typed decimal amount plus ISO… | $0.01 |
 | netintel_calendar | Turn event fields into a valid RFC 5545 .ics calendar file — handles… | $0.005 |
 | netintel_event_classify | Cheap, fast "is this a dateable event?" filter for social and web text… | $0.02 |
@@ -134,7 +145,7 @@ Or add manually to your Claude Desktop config:
 | netintel_v1_chat_completions | OpenAI-compatible chat completions gateway — standard… | $0.005 |
 | netintel_crypto_market | Structured live crypto market data for ~50 top assets in one JSON call:… | $0.005 |
 | netintel_gas_price | Live gas prices across Base, Ethereum, Arbitrum, Optimism, and Polygon… | $0.002 |
-| netintel_crypto_price | Spot prices for up to 25 crypto assets in one call — USD, EUR, or GBP —… | $0.005 |
+| netintel_crypto_price | Crypto prices for up to 25 coins in one call — live cryptocurrency spot… | $0.005 |
 | netintel_crypto_ohlc | Historical OHLC candles for any major crypto asset — hourly or daily… | $0.02 |
 | netintel_currency_exchange_batch | Convert one base currency to up to 30 targets in a single call — fiat… | $0.02 |
 | netintel_currency_exchange_history | Daily historical exchange-rate series for any currency pair — fiat via… | $0.02 |
@@ -148,11 +159,11 @@ Or add manually to your Claude Desktop config:
 | netintel_weather_forecast | Multi-day weather forecast for any city or lat/lon worldwide — up to 16… | $0.003 |
 | netintel_prediction_markets | Live prediction-market odds from Polymarket — list the top active… | $0.005 |
 | netintel_prediction_market | Full detail for ONE Polymarket prediction market by id or slug —… | $0.003 |
-| netintel_ssl_cert | Fast SSL/TLS certificate facts for any domain — issuer, subject, SANs… | $0.003 |
+| netintel_ssl_cert | SSL certificate check for any domain — issuer, subject, SANs, valid… | $0.003 |
 | netintel_text_chunk | Split text into overlapping chunks for RAG ingestion — by characters or… | $0.001 |
 | netintel_text_stats | Instant text statistics — characters (with/without spaces), words… | $0.001 |
 | netintel_embeddings | Multilingual text embeddings (384-dim) served in-house, no OpenAI… | $0.001 |
-| netintel_email_verify | Verify an email address before you send: syntax + MX +… | $0.001 |
+| netintel_email_verify | Validate an email address — email verification before you send: syntax… | $0.001 |
 | netintel_exa_search | Exa neural web search for AI agents — POST or GET a query, get ranked… | $0.01 |
 | netintel_web_search | Web search for AI agents — one query in, ranked live results out… | $0.01 |
 | netintel_exa_contents | Clean page text for up to 3 URLs in one call via Exa's index + live… | $0.005 |

package/dist/client.js

@@ -1,18 +1,58 @@
 import { x402Client, wrapAxiosWithPayment } from "@x402/axios";
 import { registerExactEvmScheme } from "@x402/evm/exact/client";
 import { privateKeyToAccount } from "viem/accounts";
+import { createPublicClient, http, formatUnits } from "viem";
+import { base } from "viem/chains";
 import axios from "axios";
 // Canonical domain. The legacy netintel-production-440c.up.railway.app host
 // still serves the same app as a fallback, but new clients target netintel.dev.
 const BASE_URL = "https://netintel.dev";
+/** USDC on Base mainnet — the asset every NetIntel price is quoted in. */
+const USDC_BASE = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
+/** Tools that work with NO wallet: NetIntel's free tier (per-client quota, then the normal price). */
+export const FREE_TOOLS = [
+    "netintel_dns_lookup",
+    "netintel_ssl_cert",
+    "netintel_whois_lookup",
+    "netintel_subnet_calc",
+    "netintel_email_auth",
+];
+let walletAddress = null;
+/** The configured agent wallet's address, or null when the server runs wallet-less. */
+export function configuredWallet() {
+    return walletAddress;
+}
+/**
+ * The HTTP client every tool uses. With EVM_PRIVATE_KEY set, responses that
+ * demand payment are paid automatically (x402) and retried; without it, the
+ * server still starts — the free-tier tools work as-is and paid tools return
+ * an explanation of what a call costs and how to fund a wallet, instead of
+ * failing to boot for everyone who installed the plugin before funding one.
+ */
 export async function createClient() {
-    const key = process.env.EVM_PRIVATE_KEY;
+    const key = process.env.EVM_PRIVATE_KEY?.trim();
+    const plain = axios.create({ baseURL: BASE_URL });
     if (!key) {
-        throw new Error("EVM_PRIVATE_KEY environment variable is required. " +
-            "Set it to your wallet private key (with USDC on Base mainnet).");
+        console.error("[netintel-mcp] No EVM_PRIVATE_KEY set — running wallet-less. Free-tier tools work " +
+            `(${FREE_TOOLS.join(", ")}); paid tools will explain how to fund an agent wallet.`);
+        return plain;
     }
-    const client = new x402Client();
     const signer = privateKeyToAccount(key);
+    walletAddress = signer.address;
+    const client = new x402Client();
     registerExactEvmScheme(client, { signer });
-    return wrapAxiosWithPayment(axios.create({ baseURL: BASE_URL }), client);
+    return wrapAxiosWithPayment(plain, client);
+}
+/** USDC balance of the configured wallet on Base (keyless public RPC). */
+export async function walletUsdcBalance() {
+    if (!walletAddress)
+        return null;
+    const pc = createPublicClient({ chain: base, transport: http() });
+    const raw = await pc.readContract({
+        address: USDC_BASE,
+        abi: [{ type: "function", name: "balanceOf", stateMutability: "view", inputs: [{ name: "a", type: "address" }], outputs: [{ type: "uint256" }] }],
+        functionName: "balanceOf",
+        args: [walletAddress],
+    });
+    return formatUnits(raw, 6);
 }

package/dist/index.js

@@ -2,7 +2,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-import { createClient } from "./client.js";
+import { createClient, configuredWallet, walletUsdcBalance, FREE_TOOLS } from "./client.js";
 function ok(data) {
     return { content: [{ type: "text", text: JSON.stringify(data) }] };
 }
@@ -10,6 +10,16 @@ function err(e) {
     const ax = e;
     const status = ax.response?.status ?? "unknown";
     const msg = ax.message ?? String(e);
+    if (status === 402) {
+        // The one error a user can act on: the call needs a payment that did not
+        // happen. Say what it costs and exactly what to do, instead of "402".
+        const price = ax.response?.data?.accepts?.[0]?.price;
+        const cost = price ? `This tool costs ${price} per call (USDC on Base). ` : "This tool is paid per call (USDC on Base). ";
+        const fix = configuredWallet()
+            ? `The agent wallet ${configuredWallet()} is configured but the payment did not settle — usually an empty wallet. Run netintel_wallet_status to check its USDC balance, then fund it on Base.`
+            : `No agent wallet is configured, so it cannot be paid. Set EVM_PRIVATE_KEY to a wallet holding USDC on Base (or enter it in the Claude Code plugin config), then retry. Without a wallet these tools still work free, up to a quota: ${FREE_TOOLS.join(", ")}.`;
+        return { content: [{ type: "text", text: `Payment required. ${cost}${fix}` }], isError: true };
+    }
     return {
         content: [{ type: "text", text: `Error (${status}): ${msg}` }],
         isError: true,
@@ -25,7 +35,7 @@ function params(obj) {
 }
 function registerTools(server, api) {
     // 1. DNS Lookup
-    server.tool("netintel_dns_lookup", "Resolve all DNS records for a domain including A, MX, TXT, SPF, DKIM, DMARC. Returns propagation consistency across Google, Cloudflare and Quad9 resolvers.", { domain: z.string() }, async ({ domain }) => {
+    server.tool("netintel_dns_lookup", "DNS lookup for any domain — resolve A, AAAA, MX, TXT, NS, CNAME, SOA and PTR records in one call. Parses SPF/DMARC from TXT plus DKIM, and cross-checks A records across Google, Cloudflare and Quad9 resolvers for propagation consistency.", { domain: z.string() }, async ({ domain }) => {
         try {
             const res = await api.get("/dns/lookup", { params: { domain } });
             return ok(res.data);
@@ -105,7 +115,7 @@ function registerTools(server, api) {
         }
     });
     // 9. WHOIS Lookup
-    server.tool("netintel_whois_lookup", "Look up domain registration via RDAP — registrar, creation date, expiry date, nameservers, and domain trustworthiness score.", { domain: z.string() }, async ({ domain }) => {
+    server.tool("netintel_whois_lookup", "Domain registration lookup, WHOIS via RDAP — registrar, registration and expiry dates, last-updated date, nameservers, and status flags from the authoritative registry, plus an actionability score for domain trustworthiness, ownership, or availability risk.", { domain: z.string() }, async ({ domain }) => {
         try {
             const res = await api.get("/whois-rdap/lookup", { params: { domain } });
             return ok(res.data);
@@ -223,7 +233,7 @@ function registerTools(server, api) {
         }
     });
     // 20. Page Extract
-    server.tool("netintel_page_extract", "Fetch any article or web page and extract clean readable text stripped of ads and boilerplate. Returns content, word count, reading time, and language.", { url: z.string() }, async ({ url }) => {
+    server.tool("netintel_page_extract", "Fetch any article or web page and extract clean readable text stripped of ads and boilerplate. Returns content, word count, reading time, and language. For JavaScript-rendered or bot-walled pages a plain fetch can't read, use netintel_exa_contents instead.", { url: z.string() }, async ({ url }) => {
         try {
             const res = await api.get("/page-extract/read", { params: { url } });
             return ok(res.data);
@@ -287,7 +297,7 @@ function registerTools(server, api) {
         }
     });
     // 26. IP Reputation
-    server.tool("netintel_ip_reputation", "Check IP against AbuseIPDB and AlienVault OTX. Returns composite risk score, threat categories, and malware families.", { ip: z.string() }, async ({ ip }) => {
+    server.tool("netintel_ip_reputation", "IP reputation and malicious-IP check — screens an address against AbuseIPDB and AlienVault OTX threat feeds and returns a composite risk score, threat categories, malware families, and full source data.", { ip: z.string() }, async ({ ip }) => {
         try {
             const res = await api.get("/ip-reputation/analyze", { params: { ip } });
             return ok(res.data);
@@ -481,7 +491,7 @@ function registerTools(server, api) {
         }
     });
     // 45. Classify (POST)
-    server.tool("netintel_classify", "Classify text into caller-supplied categories using Claude Haiku — zero-shot classification where the agent provides the label set and gets back the best-matching category with confidence and per-label scores, so agents can route, tag, and…", { text: z.string(), labels: z.array(z.string()), multi_label: z.boolean().optional() }, async ({ text, labels, multi_label }) => {
+    server.tool("netintel_classify", "Classify text into your own categories — zero-shot: supply 2–20 labels and Claude Haiku returns the best-matching category with confidence and per-label scores. Route, tag, triage, and detect intent or topic with your own taxonomy in one call.", { text: z.string(), labels: z.array(z.string()), multi_label: z.boolean().optional() }, async ({ text, labels, multi_label }) => {
         try {
             const res = await api.post("/classify", { text, labels, multi_label });
             return ok(res.data);
@@ -681,7 +691,7 @@ function registerTools(server, api) {
         }
     });
     // 65. Web
-    server.tool("netintel_web", "Fetch any web page or PDF and convert it to clean, structured Markdown — strips scripts, nav, ads, and boilerplate while preserving headings, links, lists, tables, code blocks, and blockquotes; extracts the text layer from PDFs. Returns…", { url: z.string() }, async ({ url }) => {
+    server.tool("netintel_web", "Extract text from a web page or PDF as clean Markdown — HTML to Markdown for any URL: strips scripts, nav, ads, and boilerplate while preserving headings, links, lists, tables, code blocks, and blockquotes; extracts the text layer from PDFs. Returns the Markdown body, title, word count, and a quality grade. For JavaScript-rendered or bot-walled pages a plain fetch can't read, use netintel_exa_contents instead.", { url: z.string() }, async ({ url }) => {
         try {
             const res = await api.get("/web/extract", { params: { url } });
             return ok(res.data);
@@ -1031,7 +1041,7 @@ function registerTools(server, api) {
         }
     });
     // 100. Crypto
-    server.tool("netintel_crypto_price", "Spot prices for up to 25 crypto assets in one call — USD, EUR, or GBP — from Coinbase with Kraken and CoinGecko fallback; no API key, one flat price. Per asset: price, 24h change when the answering source provides it, source, cache age…", { symbols: z.string().optional(), vs: z.string().optional() }, async ({ symbols, vs }) => {
+    server.tool("netintel_crypto_price", "Crypto prices for up to 25 coins in one call — live cryptocurrency spot prices for BTC, ETH, SOL and more in USD, EUR, or GBP from Coinbase with Kraken and CoinGecko fallback; no API key, one flat price. Per asset: price, 24h change when the source provides it, source, cache age.", { symbols: z.string().optional(), vs: z.string().optional() }, async ({ symbols, vs }) => {
         try {
             const res = await api.get("/crypto/price", { params: params({ symbols, vs }) });
             return ok(res.data);
@@ -1172,7 +1182,7 @@ function registerTools(server, api) {
         }
     });
     // 115. Ssl (POST)
-    server.tool("netintel_ssl_cert", "Fast SSL/TLS certificate facts for any domain — issuer, subject, SANs, valid from/to, days until expiry, expired/self-signed flags, TLS version, chain length. One TLS handshake, sub-2-second answer. The light, cheap tier under /ssl/analyze…", { domain: z.string(), port: z.number().optional() }, async ({ domain, port }) => {
+    server.tool("netintel_ssl_cert", "SSL certificate check for any domain — issuer, subject, SANs, valid from/to, days until expiry, expired/self-signed flags, TLS version, chain length. One TLS handshake, sub-2-second answer. The light, cheap tier under netintel_ssl_analyze (full analysis, grading).", { domain: z.string(), port: z.number().optional() }, async ({ domain, port }) => {
         try {
             const res = await api.post("/ssl/cert", { domain, port });
             return ok(res.data);
@@ -1212,7 +1222,7 @@ function registerTools(server, api) {
         }
     });
     // 119. Email (POST)
-    server.tool("netintel_email_verify", "Verify an email address before you send: syntax + MX + disposable/role/free-provider detection in one call, boolean-first (deliverable, safe_to_send) with a machine-readable reason. DNS-level check only — does not confirm the individual…", { email: z.string() }, async ({ email }) => {
+    server.tool("netintel_email_verify", "Validate an email address — email verification before you send: syntax + MX + disposable/role/free-provider detection in one call, boolean-first (deliverable, safe_to_send) with a machine-readable reason. DNS-level check only, no SMTP mailbox probe. For a scored trust report instead of a yes/no gate, see netintel_email_intel.", { email: z.string() }, async ({ email }) => {
         try {
             const res = await api.post("/email/verify", { email });
             return ok(res.data);
@@ -1262,6 +1272,27 @@ function registerTools(server, api) {
         }
     });
 }
+// Wallet status — free, local: lets an agent (or a human) tell "no wallet",
+// "empty wallet" and "funded" apart before spending a call on finding out.
+// Deliberately OUTSIDE registerTools(): scripts/sync-ecosystem.ts pairs each
+// server.tool() in there with the api.get/post path that follows it, and this
+// tool makes no API call.
+function registerWalletTool(server) {
+    server.tool("netintel_wallet_status", "Check the agent wallet this MCP server pays NetIntel with: whether a key is configured, its address, and its USDC balance on Base. Free and local (no NetIntel call). Use when a paid tool reports 'Payment required', before funding, or to confirm a top-up arrived. Also lists the tools that work with no wallet at all.", {}, async () => {
+        const address = configuredWallet();
+        const free = { free_without_wallet: [...FREE_TOOLS], note: "Free tools are rate-limited per client (about 30/hour); over the quota they cost their normal price." };
+        if (!address) {
+            return ok({ wallet_configured: false, how_to_fund: "Set EVM_PRIVATE_KEY (or the plugin's wallet config) to a dedicated agent wallet, then send it a few dollars of USDC on Base mainnet — no ETH needed, settlement is gasless.", ...free });
+        }
+        try {
+            const usdc = await walletUsdcBalance();
+            return ok({ wallet_configured: true, address, usdc_balance_base: usdc, funded: Number(usdc) > 0, top_up: Number(usdc) > 0 ? undefined : `Send USDC on Base to ${address}`, ...free });
+        }
+        catch (e) {
+            return ok({ wallet_configured: true, address, usdc_balance_base: null, balance_error: String(e.message).slice(0, 160), ...free });
+        }
+    });
+}
 async function main() {
     const api = await createClient();
     const server = new McpServer({
@@ -1269,6 +1300,7 @@ async function main() {
         version: "1.1.0",
     });
     registerTools(server, api);
+    registerWalletTool(server);
     const transport = new StdioServerTransport();
     await server.connect(transport);
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "netintel-mcp",
-  "version": "1.1.52",
+  "version": "1.1.54",
   "mcpName": "io.github.kjgueye/netintel-mcp",
   "repository": {
     "type": "git",
     "url": "https://github.com/kjgueye/netintel-mcp.git"
   },
-  "description": "MCP server for NetIntel \u2014 DNS, SSL, WHOIS, email security, OSINT via x402 micropayments",
+  "description": "MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments",
   "main": "dist/index.js",
   "bin": {
     "netintel-mcp": "dist/index.js"