Domain Intelligence
Server Details
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
- Status
- Healthy
- Uptime
- 90.5% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- osiris-technical-institute/domain-intelligence-api
- GitHub Stars
- 14
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 6 tools
The five specialized tools (dns_records, email_security, ssl_certificate, subdomains, whois_lookup) have clearly distinct purposes, but domain_lookup is an aggregate that duplicates all of them, creating some risk of misselection between the full report and individual components.
All names are lowercase snake_case, but the convention is mixed: some are plain noun phrases (dns_records, email_security, ssl_certificate, subdomains) while others use a _lookup suffix (domain_lookup, whois_lookup). It remains readable but not fully predictable.
Six tools is well-scoped for a domain intelligence server, with each specialized tool covering a clear reconnaissance area and one aggregate tool for convenience. No tool feels redundant enough to remove.
The surface covers the core domain intelligence areas: WHOIS, DNS, SSL, subdomains, email authentication, and a combined report. Minor gaps exist, such as reverse DNS/IP intelligence, HTTP security headers, and reputation/blacklist checks, but the main workflows are well covered.
Available Tools
6 toolsdns_recordsDNS recordsBRead-onlyIdempotentInspect
DNS records for a domain: A, AAAA, MX, TXT, NS, CAA and SOA, resolved in parallel.
Inputs: domain (required). Returns: object
domain_lookupFull domain lookupARead-onlyIdempotentInspect
Full report on a domain in one call: WHOIS/RDAP registration, DNS records, live SSL
certificate, subdomains (live hosts with IPs first) and email authentication (SPF, DMARC, DKIM).
Use it to triage a suspicious domain or profile a company's domain. If one section fails it comes
back as an object with an error field and the rest is unaffected. Set wait=true to wait for every
subdomain source (up to about 20 s) instead of the fast first result.
Inputs: domain (required), wait, subdomain_limit. Returns: object
email_securityEmail security (SPF, DMARC, DKIM)ARead-onlyIdempotentInspect
Email authentication for a domain: SPF and DMARC records, and DKIM keys found by probing about 29 common selectors (Google, Microsoft 365, Mailchimp, SendGrid and others). Custom selectors may not be found.
Inputs: domain (required). Returns: object
ssl_certificateSSL certificateARead-onlyIdempotentInspect
The certificate a domain serves on port 443, from a live TLS handshake: issuer, subject, valid_from, valid_to, days_until_expiry, SANs, signature algorithm and serial number.
Inputs: domain (required). Returns: object
subdomainsSubdomainsARead-onlyIdempotentInspect
Subdomains of a domain from certificate transparency logs, passive DNS and DNS brute force.
live lists hosts that resolve now, each with its IP; subdomains lists every name found, live
first; pools summarises large shared-infrastructure zones. The first lookup of a domain is a fast
snapshot and later ones are fuller; set wait=true to wait for every source (up to about 20 s).
Inputs: domain (required), wait, limit. Returns: object
whois_lookupWHOIS / RDAP lookupARead-onlyIdempotentInspect
Registration data for a domain: registrar, created, updated and expiry dates, nameservers and
status. RDAP first (rdap.org, IANA bootstrap, 22 fallback servers), then port-43 WHOIS for 60+
TLDs. _source says which one answered. Use it for domain age, expiry or registrar checks.
Inputs: domain (required). Returns: object
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
DNS records, SSL certificate, WHOIS/RDAP and website tech scan for any domain
Parsed WHOIS, RDAP, DNS, certificates, nameservers and domain history for any domain.
Domain intelligence for DNS, WHOIS/RDAP, TLS, reputation, valuation, and brand protection.
DNS monitoring and domain security: live DNS, propagation, WHOIS/RDAP, SSL and look-alike domains.
Related MCP Servers
- AlicenseAqualityDmaintenanceDomain intelligence for DNS, WHOIS/RDAP, SSL/TLS, subdomain discovery, availability, valuation, email security, and typosquatting and brand protection.12MIT
- AlicenseAqualityDmaintenanceProvides comprehensive domain research tools including RDAP, WHOIS, and DNS lookup capabilities, with automatic fallback and support for 50+ TLDs.110 npm1MIT
- AlicenseNot gradedqualityCmaintenanceWHOIS/RDAP domain lookup, IP geolocation and Punycode conversion. 1400+ TLDs including IDN. Public remote server, no API key.1MIT
- AlicenseAqualityCmaintenanceEnables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.12476 npmMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.