Skip to main content
Glama

Domain Typosquat

domain_typosquat
Read-only

Generates lookalike domains of a brand (omission, transposition, repetition, bit-flip, homoglyph, vowel swap, hyphenation, TLD swap; technique list after dnstwist), checks up to 30 of them in DNS (A records), and reads MX records for up to 8 that resolve. Resolving in DNS is not proof of registration or abuse. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input Schema

NameRequiredDescriptionDefault
limitNoVariants to look up in DNS, 1-40 (default 40)
domainYesBrand domain, e.g. example.com (a host name with a dot, no scheme or path)

Output Schema

NameRequiredDescriptionDefault
noteNo
domainNo
lookedNo
sourceNo
checkedAtNo
resolvingNo
registeredNo
unresolvedNo
variantsGeneratedNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed9 schema fields changed
    • addedOutput schema / properties / checkedAt
      Added value: +{}
    • addedOutput schema / properties / domain
      Added value: +{}
    • addedOutput schema / properties / looked
      Added value: +{}
    • addedOutput schema / properties / note
      Added value: +{}
    • addedOutput schema / properties / registered
      Added value: +{}
    • addedOutput schema / properties / resolving
      Added value: +{}
    • addedOutput schema / properties / source
      Added value: +{}
    • addedOutput schema / properties / unresolved
      Added value: +{}
    • addedOutput schema / properties / variantsGenerated
      Added value: +{}
  2. Added

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and openWorldHint, and the description adds genuine behavioral context beyond them: the DNS/MX scope caps, the warning that resolution is not proof of registration or abuse, and the x402 payment model ($0.002 USDC, failed calls uncharged). The only blemish is the stated 'up to 30' DNS cap, which conflicts with the schema's 1-40 limit.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Dense but well front-loaded: capability first, caveat second, pricing last. The technique enumeration and scope caps are informative, though the parenthetical dnstwist attribution is slightly decorative.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the description covers scope, the key interpretation caveat, and the payment model. The limit-count mismatch (30 vs 40) is the one gap an agent could trip on.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters and the baseline is 3. The description restates the DNS lookup scope but introduces a '30' figure that clashes with the schema's 1-40 range, so it adds ambiguity rather than clarity.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (generates lookalike domains) plus the enumeration of techniques, the DNS A-record check, and the MX read. An agent can distinguish it from siblings like dns, domain, and subdomains without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The tool's use case (typosquat / brand-abuse reconnaissance) is implied by the technique list and caveat, but it never says when to pick this over dns or domain, nor any when-not condition. Usage is inferable rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources