Content
# DomScan MCP Server
> Domain intelligence for AI agents. Connect [DomScan](https://domscan.net) to Claude, Cursor, VS Code and any [Model Context Protocol](https://modelcontextprotocol.io/) client to run DNS, WHOIS/RDAP, SSL/TLS, subdomain, availability, valuation, email-security and brand-protection lookups straight from your assistant.
DomScan is a domain intelligence platform that exposes its data over one REST API and a hosted MCP server. This repository documents the MCP server: how to connect it, what tools it exposes, and how to use it in agent pipelines.
- Website: https://domscan.net
- MCP endpoint: `https://domscan.net/mcp` (Streamable HTTP)
- Transport: Streamable HTTP (remote)
- Auth: OAuth discovery (recommended) or a DomScan API key
## Quick start
### OAuth-aware clients
Add `https://domscan.net/mcp` as a remote MCP server. DomScan publishes OAuth protected-resource and authorization-server metadata, so compatible clients can discover and complete authentication without a manually configured API key.
```json
{
"mcpServers": {
"domscan": {
"url": "https://domscan.net/mcp"
}
}
}
```
### Claude Desktop / Claude Code with an API key
Add to your MCP config (`claude_desktop_config.json` or `.mcp.json`):
```json
{
"mcpServers": {
"domscan": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://domscan.net/mcp",
"--header",
"Authorization: Bearer ${DOMSCAN_API_KEY}"
],
"env": { "DOMSCAN_API_KEY": "your-api-key" }
}
}
}
```
### Native remote URL with an API key
```json
{
"mcpServers": {
"domscan": {
"url": "https://domscan.net/mcp",
"headers": { "Authorization": "Bearer your-api-key" }
}
}
}
```
Get an API key from the [DomScan dashboard](https://domscan.net/dashboard). OAuth is preferred when the client supports it. API keys remain available for clients that need explicit header authentication.
## Local MCP wrapper
This repository includes a runnable stdio wrapper for clients that cannot connect directly to the hosted Streamable HTTP endpoint. It forwards requests to `https://domscan.net/mcp` using `DOMSCAN_API_KEY`.
```bash
npm install
DOMSCAN_API_KEY=your-api-key npm start
```
If no API key is configured, the wrapper still starts and exposes only the read-only `domscan_mcp_status` tool. This lets MCP registries inspect and validate the server without granting access to domain-intelligence operations.
### Docker
```bash
docker build -t domscan-mcp .
docker run --rm -i -e DOMSCAN_API_KEY=your-api-key domscan-mcp
```
The local wrapper uses API-key authentication. Clients that support remote Streamable HTTP and OAuth should continue connecting directly to `https://domscan.net/mcp`; OAuth remains the recommended option for those clients.
## What it can do
The server exposes domain-intelligence tools across these areas:
- **DNS**: record lookups (A, AAAA, MX, TXT, NS, CNAME, CAA), full record dumps, propagation checks, DNS security.
- **WHOIS / RDAP**: registration data, WHOIS history, reverse WHOIS, RDAP.
- **SSL/TLS**: certificate audit, chain inspection, grade, expiry checks, deep scan, certificate search.
- **Subdomains**: subdomain enumeration and discovery.
- **Availability and valuation**: domain availability (single and bulk), appraisal, name suggestions.
- **Email security**: SPF, DKIM, DMARC validation and DNSSEC posture.
- **Brand protection**: typosquatting detection, brand monitors and scans.
- **Infrastructure**: IP lookup, hosting detection, ASN, technology/stack detection, MAC vendor lookup.
See the [DomScan API documentation](https://domscan.net/docs) and [MCP setup guide](https://domscan.net/mcp-domain-checker).
## Why MCP
MCP lets an AI assistant call DomScan directly: ask "is acme.io available, and who owns the look-alikes?" and the agent runs availability, WHOIS and typosquatting tools and answers in one turn. The same server powers automated workflows (monitoring, due diligence, brand protection) without custom integration code.
## Links
- Product: https://domscan.net
- API documentation: https://domscan.net/docs
- MCP setup guide: https://domscan.net/mcp-domain-checker
- MCP spec: https://modelcontextprotocol.io/
- Datasets and APIs: https://domscan.net/tools
## License
MIT. See [LICENSE](LICENSE).
