io.github.Bishop81/domainintel-mcp (DomainIntel MCP)

The MCP server io.github.Bishop81/domainintel-mcp provides live domain intelligence for agents, covering WHOIS, DNS, SSL/TLS, HTTP security headers, reputation, and subdomain discovery. It uses the same analysis engine as DomainIntel.app and exposes tools for domain lookup, DNS record inspection, and SSL certificate validity.

🛠️ Key Features

WHOIS: registrar, creation/expiry/updated dates, registrant country, privacy status, nameservers
DNS records: A/AAAA/MX/TXT/NS/CNAME/CAA + SPF/DMARC presence and misconfiguration warnings
SSL/TLS: certificate validity
HTTP security headers, reputation, subdomain discovery

🚀 Use Cases

Investigate domain registration details via WHOIS
Review DNS configurations and email/auth related signals (SPF/DMARC)
Check SSL/TLS certificate validity during domain assessment
Discover related subdomains and assess domain security posture

⚡ Developer Benefits

Tool-based access to WHOIS, DNS, and SSL/TLS data
Structured DNS outputs including SPF/DMARC presence and warnings

⚠️ Limitations

Tool list excerpt includes WHOIS, DNS, and SSL certificate validity; other features (security headers, reputation, subdomains) are described but not enumerated in the provided tool details.

Tools

Tool

Returns

whois_lookup

Registrar, creation/expiry/updated dates, registrant country, privacy status, nameservers

dns_records

A, AAAA, MX, TXT, NS, CNAME, CAA records + SPF/DMARC presence + misconfiguration warnings

ssl_certificate

Validity, issuer, expiration, days remaining, protocol, warnings

security_headers

HSTS, CSP, X-Frame-Options and others, scored with recommendations

domain_reputation

DNSBL / Spamhaus blocklist checks and a reputation score

subdomain_discovery

Subdomains via Certificate Transparency logs and common-prefix probing

full_domain_report

Every analyzer at once plus an overall A+ to F security score

analyze_email_headers

Parses a raw email header block: SPF/DKIM/DMARC results, the Received delivery path with timing, key envelope fields, and a From-vs-Return-Path spoofing flag

Every tool except analyze_email_headers takes a single domain argument; protocol, www., and paths are stripped automatically. analyze_email_headers takes a headers string (a pasted raw header block) instead.

Install

Claude Code

bash

claude mcp add domainintel -- npx -y @domainintel/mcp

Claude Desktop

Add to claude_desktop_config.json (Settings → Developer → Edit Config):

json

{
  "mcpServers": {
    "domainintel": {
      "command": "npx",
      "args": ["-y", "@domainintel/mcp"]
    }
  }
}

Any other MCP client

The server speaks MCP over stdio:

bash

npx -y @domainintel/mcp

io.github.Bishop81/domainintel-mcp