domaintrack
OfficialThis server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
domaintrack
domaintrack looks up what is publicly known about a domain: its reputation snapshot, the AI crawler policy its robots.txt sets, and the list of data sources those answers are built from.
It is a forwarding client, not a data store. The answers live in Domduck's public store and are served by its keyless public endpoint; this package carries the endpoint's three-tool surface, serves the tool list locally, and forwards each call upstream, returning the upstream answer exactly as it arrives. There is no account and no API key: the public endpoint is the whole surface. Domduck's authenticated endpoint, with its dated history series, is separate and is not touched here — this client sends no credentials of any kind.
One behaviour is worth knowing before you automate against
it: asking about a domain nobody has looked up yet is not an
error. The snapshot comes back with hasReading set to
false, which is the store honestly saying it holds no reading
for that name yet.
Tools
lookup_domain— the stored reputation snapshot for one domain: Domain Rating, Tranco rank, OpenPageRank, registration date, TLS certificate state and AI crawler policy. Requiresdomain.get_ai_crawler_policy— for each of the eight tracked AI crawlers, whether the domain's robots.txt allows it, blocks it, or never mentions it, plus whether an llms.txt is published. Requiresdomain.list_sources— the catalogue of sources behind the other two tools and what each one means. No arguments; read it first if a snapshot field is unfamiliar.
Related MCP server: Trooth Network
CLI
npx @reneturcios/domaintrack lookup_domain '{"domain":"example.com"}'
npx @reneturcios/domaintrack get_ai_crawler_policy '{"domain":"example.com"}'
npx @reneturcios/domaintrack list_sources
npx @reneturcios/domaintrack --versionEach tool subcommand forwards one call and prints the result content as JSON. Exit codes: 0 on success, 1 when the upstream call comes back as an error result, 2 on a usage error (unknown subcommand, malformed JSON argument).
MCP server
npx @reneturcios/domaintrack mcpMCP client configuration:
{
"mcpServers": {
"domaintrack": {
"command": "npx",
"args": ["-y", "@reneturcios/domaintrack", "mcp"]
}
}
}The server answers tools/list itself and forwards every
tools/call to the public endpoint over a Streamable HTTP
session (initialize, then notifications/initialized, then the
call), reusing the session — and its Mcp-Session-Id, when
the endpoint issues one — for the life of the process.
Failures on the wire are reported in this package's own
words, as a text result starting with domaintrack error: —
a JSON-RPC error from upstream, a non-2xx HTTP status, an
unparseable response body, or a failed request each map to
that prefix followed by the detail.
Docker
docker run -i ghcr.io/cloudcorprecords/domaintrack # stdio MCP server
docker run --rm ghcr.io/cloudcorprecords/domaintrack lookup_domain '{"domain":"example.com"}'Configuration
DOMDUCK_MCP_URL— overrides the upstream endpoint, which defaults tohttps://domduck.com/api/mcp/public. (This override is a reconstruction on our side; the endpoint itself is the pinned public one.)
Development
npm install
npm run build # tsc -> dist/
npm test # node test runner via tsx; stubbed upstream, no network
npm run dev # run the CLI from sourceLicense
MIT — see LICENSE.
This server cannot be deployed
Maintenance
Related MCP Connectors
Check any domain for UCP support and resolve verified UCP storefronts. Read-only, keyless.
Is it DNS? Audit a site or domain that isn't working: one call says if it resolves and why. No key.
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables domain intelligence lookups including RDAP registration data, DNS records, and Certificate Transparency searches.1MIT

Trooth Networkofficial
AlicenseNot gradedqualityBmaintenanceRemote, read-only MCP connector to check any company's witnessed trust record on the Trooth Network, across identity, security, privacy, and AI practices. Also does a neutral read of a domain's public security surface and verifies signed Trust Ledger Tokens. No key, no account.1MIT- FlicenseNot gradedqualityBmaintenanceEnables domain overviews for security and sales, providing registration, infrastructure, and risk signal data through a simple API request.-

Breach Radarofficial
AlicenseAqualityCmaintenanceEnables MCP clients to look up data breaches and leaked passwords, search NVD CVEs and the CISA KEV catalogue, and generate passive attack-surface reports for a domain covering security headers, TLS, email/DNS security, and CT-log subdomains. All checks are read-only and passive, using only public third-party data sources.10MIT