Skip to main content
Glama

Server Details

WHOIS, RDAP, DNS, IP/ASN/CIDR network data and Web3 names (ENS, Unstoppable, SPACE ID, Handshake) in one lookup, with mail-security grading and look-alike domain checks. No API key.

Ownership verified
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL

TDQS

A4.6/5.0

Scored across 4 tools

Disambiguation4/5

The four tools have broadly distinct roles, but check_lookalike and check_mail_security intentionally overlap with parts of lookup_target (the look-alike warning and the overall mail grade). The descriptions explicitly resolve this by stating when to use the narrow tool versus the aggregated lookup, so misselection is unlikely.

Naming Consistency5/5

All names follow a consistent verb_noun snake_case pattern: check_lookalike, check_mail_security, list_data_sources, lookup_target. The verb-first convention is predictable and readable throughout.

Tool Count5/5

Four tools is well-scoped for a whois/lookup service: one aggregated lookup plus three focused helpers (look-alike screening, mail-security detail, data-source freshness). Each tool clearly earns its place and none is redundant.

Completeness4/5

The surface covers the core lifecycle for domain, IP/CIDR, ASN and Web3 lookups, plus email-security and look-alike checks and a dataset-freshness view. Minor gaps exist (e.g. no bulk/reverse-WHOIS or historical DNS operations), but agents can work around them via lookup_target and details_url.

Available Tools

4 tools
check_lookalikeLook-alike (homograph) checkA
Read-onlyIdempotent
Inspect

Check whether one domain or Web3 name is a visual look-alike (homograph): letters from different scripts mixed in one label, or every non-ASCII letter having a Latin twin, so раураl.com reads as paypal.com. Returns the scripts used and the Latin name it imitates.

Use it to screen candidate or incoming names quickly (phishing triage, brand monitoring). lookup_target already includes this warning for the name it looks up, so there is no need to call both for one name.

Behavior: offline and instant; no DNS, registry or network call. It catches script tricks only, not typos or digit swaps such as paypa1.com, so a clean result does not mean the domain is safe.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesone domain or Web3 name, Unicode (раураl.com) or punycode (xn--...); a full URL is not accepted

Output Schema

ParametersJSON Schema
NameRequiredDescription
nameYesname in Unicode form
scriptsNoscripts the letters come from
look_alikeYes
looks_likeNothe Latin name it imitates
mixed_scriptNoone label mixes scripts

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-open-world), but the description adds materially more: the check is offline/instant with no DNS, registry or network call, and it catches script tricks only — not typos or digit swaps like paypa1.com — so a clean result is not a safety guarantee. That false-negative caveat is the kind of behavioral disclosure that changes agent behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight blocks: what it detects with an example, when to use it and the sibling overlap, then behavioral limits. The scoping caveat and the sibling exclusion are both front-loaded rather than buried, and no sentence is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read-only checker with an output schema, the definition covers purpose, routing, offline behavior, and the false-negative boundary. Return values need only brief mention, which it provides ('scripts used and the Latin name it imitates'). Nothing needed to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for the single parameter, so the schema already documents acceptable input (Unicode or punycode, no full URL). The description restates the same scope ('one domain or Web3 name') and the раураl.com example illustrates the tool rather than adding parameter syntax beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('check') and resource ('one domain or Web3 name') and names the exact failure mode it detects (homograph / mixed-script look-alike) with a concrete example. It also implicitly separates itself from lookup_target, which is a sibling it explicitly references.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit use cases ('phishing triage, brand monitoring') and an explicit when-not: lookup_target already includes this warning, so there is no need to call both for one name. That is exactly the routing guidance an agent needs against a sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_mail_securityMail security gradeA
Read-onlyIdempotent
Inspect

Grade one domain's email authentication and list every check: SPF (single record, the 10 DNS-lookup limit across includes, the all qualifier), DMARC (policy, inheritance from the organizational domain, pct, report addresses), MTA-STS, TLS-RPT, BIMI, DANE and null MX. The level is strong, fair, weak, no_mail (domain declares it sends no mail) or none (no MX, SPF or DMARC at all).

Use it for questions about spoofing, deliverability or a DMARC rollout. lookup_target gives only the overall grade; this tool gives the status and a one-line finding for each check.

Behavior: reads public DNS only and never connects to the domain's mail servers, so it cannot test SMTP TLS, certificates or whether a mailbox exists. Usually under 2 s.

ParametersJSON Schema
NameRequiredDescriptionDefault
domainYesregistered domain or subdomain whose mail setup to grade, e.g. example.com; Unicode or punycode. Not an email address and not a mail server host name

Output Schema

ParametersJSON Schema
NameRequiredDescription
levelYesstrong, fair, weak, no_mail, or none when the domain has no mail setup
checksYes
domainYes
details_urlNo

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/openWorld/idempotent, but the description adds materially more: it reads public DNS only, never connects to the domain's mail servers, and therefore cannot test SMTP TLS, certificates or mailbox existence, plus a typical runtime under 2 s. That explicitly bounds what the tool cannot prove, which is the failure mode an agent is most likely to hit.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the verb and scope, then usage, then behavioral limits. The long parenthetical enumeration of checks is dense but carries real scope information for a grading tool, so it mostly earns its space; it could be trimmed slightly without loss.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be explained, yet the description still tells the agent the grade levels (strong/fair/weak/no_mail/none) and that each check yields a status plus a one-line finding. Combined with the DNS-only limitation, an agent has everything needed to call it correctly and interpret results.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Only one parameter and schema description coverage is 100%, so the schema already defines 'domain' including the 'not an email address and not a mail server host name' exclusion. The description adds nothing about the parameter beyond the schema, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb ('Grade') plus resource ('one domain's email authentication') and an explicit enumeration of the checks performed (SPF, DMARC, MTA-STS, TLS-RPT, BIMI, DANE, null MX). It also defines the grade vocabulary, and explicitly says lookup_target gives only the overall grade, so an agent can separate it from the sibling without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

States the triggering contexts plainly ('questions about spoofing, deliverability or a DMARC rollout') and names the alternative tool plus the condition that should route to this one instead ('lookup_target gives only the overall grade; this tool gives the status and a one-line finding for each check'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_data_sourcesData sources and freshnessA
Read-onlyIdempotent
Inspect

List the local datasets and feeds behind lookup_target (RIR delegations, IANA, Public Suffix List, cloud / CDN ranges, Tor and Private Relay, reputation lists, GeoLite2) with state, record count, generation date and a stale flag.

Use it to judge how current a reputation, RIR, cloud or geolocation answer is, or to explain why such a section is missing from a lookup (dataset not loaded or stale). Registry, DNS and Web3 data are fetched live and are not listed here.

Behavior: takes no arguments and makes no external calls.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription
datasetsYes

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent and openWorldHint=false; the description reinforces this with 'takes no arguments and makes no external calls', which confirms the closed-world/no-side-effect profile. It also names the per-dataset fields returned (state, record count, generation date, stale flag), adding useful context, though this overlaps with the output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three compact paragraphs: dataset inventory first, then usage/routing, then runtime behavior. Front-loaded and every sentence carries information; no redundant filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be explained, yet the description still briefly names the fields, and it covers usage, exclusions and safety behavior. Nothing an agent needs to call this zero-arg tool correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters, so the baseline is 4; the description's 'takes no arguments' is consistent with the empty schema. No additional meaning is required for this dimension.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (List) and resource (local datasets/feeds behind lookup_target) and even enumerates the dataset families covered (RIR, IANA, PSL, cloud/CDN, Tor, reputation, GeoLite2). It clearly distinguishes itself from lookup_target by scoping to the local, pre-loaded data rather than live lookups.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use it ('judge how current a reputation, RIR, cloud or geolocation answer is, or explain why such a section is missing'), and gives an explicit exclusion ('Registry, DNS and Web3 data are fetched live and are not listed here'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

lookup_targetWHOIS / RDAP / DNS / network / Web3 lookupA
Read-onlyIdempotent
Inspect

Look up one domain, IP address, CIDR block, ASN (AS15169) or Web3 name (ENS .eth, Unstoppable, SPACE ID .bnb, Handshake hns:) and get a compact fact sheet. Domains: registrar, dates, status, nameservers, DNS records, overall mail-security grade, third-party services seen in DNS, possibly dangling records. IPs, CIDRs and ASNs: network owner, origin AS, RIR, cloud / CDN provider, Tor or iCloud Private Relay tag, geolocation, abuse contact, local reputation. Web3 names: registration status, addresses, records. A look-alike warning is added when the name uses deceptive letters.

Use it first for any question about who owns, runs, hosts or registered something. Prefer check_mail_security when you need each email check rather than the grade, and check_lookalike to screen many names without network calls.

Behavior: queries registries, DNS and (for Web3) blockchain RPC live, usually in 1-5 s, at most about 12 s. If one source fails, the rest is still returned and the failure is listed under errors. Reputation covers local blocklists only: no match is not a clean bill of health. Queries are not logged or stored. The result ends with details_url, the full page with every record and its provenance.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYeswhat to look up: a domain (example.com, münchen.de), IPv4 / IPv6 address, CIDR (8.8.8.0/24), ASN written as AS15169 (a bare number is not an ASN), or a Web3 name (vitalik.eth, brad.crypto, spaceid.bnb, hns:name)
namespaceNooptional; force a Web3 namespace (ens, unstoppable, spaceid or hns) when a name could belong to several, e.g. a TLD that is both an ICANN TLD and a Web3 namespace. Leave empty and the namespace is detected from the name

Output Schema

ParametersJSON Schema
NameRequiredDescription
typeYestarget type: domain, ipv4, ipv6, cidr, asn or web3_name
cloudNocloud / CDN provider
queryYesnormalized query
errorsNoprovider failures; the rest of the result is still valid
countryNo
networkNocovering CIDR or network range
warningsNolook-alike, special-purpose and namespace-collision warnings
addressesNoWeb3 addresses as network:address
origin_asNoorigin AS number for an IP
registrarNo
anonymizerNotor_exit or private_relay
created_atNo
expires_atNo
reputationNoverdict from local lists; absent when no list is loaded
details_urlNofull result page
nameserversNo
web3_statusNo
availabilityNoregistered, available or unknown (domains and Web3 names)
organizationNo
mail_securityNostrong, fair, weak or no_mail

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, openWorld and idempotent, yet the description adds real value beyond them: live registry/DNS/RPC queries, 1-5 s typical and ~12 s worst case, partial results with failures surfaced under errors, local-blocklist-only reputation with the explicit caveat that no match is not a clean bill of health, and no query logging.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense paragraphs, front-loaded with the resource list and result summary before routing advice and behavior. Slightly long, and the per-resource fact-sheet enumeration borders on cataloging, but every sentence carries decision-relevant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists and the description still notes the trailing details_url provenance link. Combined with live-query timing, partial-failure handling and reputation caveats, nothing an agent needs to call this correctly or interpret the result is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description goes further by tying each accepted query form to the result shape the agent will get back (registrar/dates/DNS vs. network owner/ASN/geo vs. Web3 registration), which helps the agent decide what to pass. The namespace parameter itself is not discussed in the description, so it is not a full 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb ('look up') plus every resource class it accepts (domain, IP, CIDR, ASN, Web3 name) and states the returned artifact ('compact fact sheet'). An agent can distinguish it from check_lookalike or check_mail_security without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit routing: 'use it first for any question about who owns, runs, hosts or registered something,' then names both alternatives with the condition that selects them (check_mail_security for per-check detail, check_lookalike for bulk screening without network calls). Both when-to-use and when-to-prefer-something-else are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updates
    • First observedcheck_lookalike
    • First observedcheck_mail_security
    • First observedlist_data_sources
    • First observedlookup_target

Publisher details

Operator
Not applicable
Operator website
https://whois.dc5.tech/
Vendor relationship
Independent
Trust center
Not applicable
Restrictions
Not applicable

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    Enables brand visibility monitoring across major AI platforms like ChatGPT, Claude, Gemini, and Perplexity. It allows users to track visibility scores, analyze competitor data, and receive actionable insights to improve AI-generated brand recommendations.
    16
    11 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Browse IndustryLens's published competitive-intelligence reports and head-to-head competitor comparisons from any AI agent — real, source-backed data.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources