Skip to main content
Glama

WHOIS / RDAP / DNS / network / Web3 lookup

lookup_target
Read-onlyIdempotent

Look up one domain, IP address, CIDR block, ASN (AS15169) or Web3 name (ENS .eth, Unstoppable, SPACE ID .bnb, Handshake hns:) and get a compact fact sheet. Domains: registrar, dates, status, nameservers, DNS records, overall mail-security grade, third-party services seen in DNS, possibly dangling records. IPs, CIDRs and ASNs: network owner, origin AS, RIR, cloud / CDN provider, Tor or iCloud Private Relay tag, geolocation, abuse contact, local reputation. Web3 names: registration status, addresses, records. A look-alike warning is added when the name uses deceptive letters.

Use it first for any question about who owns, runs, hosts or registered something. Prefer check_mail_security when you need each email check rather than the grade, and check_lookalike to screen many names without network calls.

Behavior: queries registries, DNS and (for Web3) blockchain RPC live, usually in 1-5 s, at most about 12 s. If one source fails, the rest is still returned and the failure is listed under errors. Reputation covers local blocklists only: no match is not a clean bill of health. Queries are not logged or stored. The result ends with details_url, the full page with every record and its provenance.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
queryYeswhat to look up: a domain (example.com, münchen.de), IPv4 / IPv6 address, CIDR (8.8.8.0/24), ASN written as AS15169 (a bare number is not an ASN), or a Web3 name (vitalik.eth, brad.crypto, spaceid.bnb, hns:name)
namespaceNooptional; force a Web3 namespace (ens, unstoppable, spaceid or hns) when a name could belong to several, e.g. a TLD that is both an ICANN TLD and a Web3 namespace. Leave empty and the namespace is detected from the name

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
typeYestarget type: domain, ipv4, ipv6, cidr, asn or web3_name
cloudNocloud / CDN provider
queryYesnormalized query
errorsNoprovider failures; the rest of the result is still valid
countryNo
networkNocovering CIDR or network range
warningsNolook-alike, special-purpose and namespace-collision warnings
addressesNoWeb3 addresses as network:address
origin_asNoorigin AS number for an IP
registrarNo
anonymizerNotor_exit or private_relay
created_atNo
expires_atNo
reputationNoverdict from local lists; absent when no list is loaded
details_urlNofull result page
nameserversNo
web3_statusNo
availabilityNoregistered, available or unknown (domains and Web3 names)
organizationNo
mail_securityNostrong, fair, weak or no_mail

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, openWorld and idempotent, yet the description adds real value beyond them: live registry/DNS/RPC queries, 1-5 s typical and ~12 s worst case, partial results with failures surfaced under errors, local-blocklist-only reputation with the explicit caveat that no match is not a clean bill of health, and no query logging.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense paragraphs, front-loaded with the resource list and result summary before routing advice and behavior. Slightly long, and the per-resource fact-sheet enumeration borders on cataloging, but every sentence carries decision-relevant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists and the description still notes the trailing details_url provenance link. Combined with live-query timing, partial-failure handling and reputation caveats, nothing an agent needs to call this correctly or interpret the result is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description goes further by tying each accepted query form to the result shape the agent will get back (registrar/dates/DNS vs. network owner/ASN/geo vs. Web3 registration), which helps the agent decide what to pass. The namespace parameter itself is not discussed in the description, so it is not a full 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb ('look up') plus every resource class it accepts (domain, IP, CIDR, ASN, Web3 name) and states the returned artifact ('compact fact sheet'). An agent can distinguish it from check_lookalike or check_mail_security without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit routing: 'use it first for any question about who owns, runs, hosts or registered something,' then names both alternatives with the condition that selects them (check_mail_security for per-check detail, check_lookalike for bulk screening without network calls). Both when-to-use and when-to-prefer-something-else are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources