Domain & Company Intel MCP
Domain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.
Should I use this
Quality & Safety
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"domain-dns-whois": {
"url": "https://domain.datakoot.com/mcp"
}
}
}Remote endpoints
https://domain.datakoot.com/mcpstreamable-httpWhat it can do
Tool inventory
Tools (6)
🟢domain_report(domain)
One-call full dossier on a domain: registration (RDAP), DNS records, email deliverability, and website tech stack, combined into a single report. Use for fast lead qualification, company research, or recon without four separate calls.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain name, e.g. stripe.com"
}
},
"required": [
"domain"
]
}Output Schema
{
"type": "object",
"properties": {
"domain": {},
"registration": {},
"dns": {},
"email": {},
"tech": {},
"_datakoot_note": {},
"free_tier_note": {},
"provenance": {
"type": "object",
"description": "Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.",
"properties": {
"served_at": {
"type": "string",
"format": "date-time"
},
"upstream": {
"type": "array",
"items": {
"type": "string"
}
},
"publisher": {
"type": "string"
},
"may_be_cached": {
"type": "boolean"
}
}
}
},
"additionalProperties": true
}🟢domain_intel(domain)
Registration intelligence for a domain via RDAP (the modern WHOIS). Returns registrar, creation/expiration/last-changed dates, domain age in years, EPP status codes, nameservers, DNSSEC state, and abuse contact. Use to vet a company, assess a lead, or judge how established a domain is.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain name, e.g. stripe.com (no scheme)"
}
},
"required": [
"domain"
]
}Output Schema
{
"type": "object",
"properties": {
"domain": {},
"found": {},
"registrar": {},
"created": {},
"expires": {},
"last_changed": {},
"age_years": {},
"status": {},
"nameservers": {},
"dnssec_signed": {},
"abuse_contact": {},
"provenance": {
"type": "object",
"description": "Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.",
"properties": {
"served_at": {
"type": "string",
"format": "date-time"
},
"upstream": {
"type": "array",
"items": {
"type": "string"
}
},
"publisher": {
"type": "string"
},
"may_be_cached": {
"type": "boolean"
}
}
}
},
"additionalProperties": true
}🟢dns_lookup(domain, types)
Look up DNS records for a domain via Cloudflare DNS-over-HTTPS. Returns A, AAAA, MX, NS, TXT, CNAME, and SOA records. Use to see where a domain is hosted, who runs its mail and DNS, and what verification/policy TXT records it publishes.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain name, e.g. stripe.com"
},
"types": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional subset of record types, e.g. [\"MX\",\"TXT\"]. Defaults to all common types."
}
},
"required": [
"domain"
]
}Output Schema
{
"type": "object",
"properties": {
"domain": {},
"records": {},
"provenance": {
"type": "object",
"description": "Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.",
"properties": {
"served_at": {
"type": "string",
"format": "date-time"
},
"upstream": {
"type": "array",
"items": {
"type": "string"
}
},
"publisher": {
"type": "string"
},
"may_be_cached": {
"type": "boolean"
}
}
}
},
"additionalProperties": true
}🟢email_deliverability(domain_or_email)
Assess whether a domain (or the domain of an email address) can receive mail and how strong its sender authentication is. Returns MX presence, SPF and DMARC policy, whether it's a free consumer provider (gmail, etc.) or a known disposable/temp-mail provider, and an overall verdict. Use to qualify leads and flag throwaway signups.
Input Schema
{
"type": "object",
"properties": {
"domain_or_email": {
"type": "string",
"description": "A domain (stripe.com) or an email address ([email protected])"
}
},
"required": [
"domain_or_email"
]
}Output Schema
{
"type": "object",
"properties": {
"domain": {},
"can_receive_mail": {},
"mx_hosts": {},
"spf": {},
"spf_checked": {},
"dmarc_policy": {},
"dmarc_record": {},
"dmarc_checked": {},
"is_free_provider": {},
"is_disposable": {},
"auth_posture": {},
"verdict": {},
"provenance": {
"type": "object",
"description": "Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.",
"properties": {
"served_at": {
"type": "string",
"format": "date-time"
},
"upstream": {
"type": "array",
"items": {
"type": "string"
}
},
"publisher": {
"type": "string"
},
"may_be_cached": {
"type": "boolean"
}
}
}
},
"additionalProperties": true
}🟢tech_stack(domain)
Fingerprint the technology behind a website by fetching its homepage. Detects web server, CMS/framework (WordPress, Shopify, Next.js, etc.), CDN, analytics, and returns the page title, final URL after redirects, and key response headers. Use for competitive research and lead enrichment.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain or full URL, e.g. shopify.com"
}
},
"required": [
"domain"
]
}Output Schema
{
"type": "object",
"properties": {
"url": {},
"status": {},
"title": {},
"server": {},
"powered_by": {},
"cdn": {},
"generator": {},
"technologies": {},
"analytics": {},
"security_headers": {},
"provenance": {
"type": "object",
"description": "Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.",
"properties": {
"served_at": {
"type": "string",
"format": "date-time"
},
"upstream": {
"type": "array",
"items": {
"type": "string"
}
},
"publisher": {
"type": "string"
},
"may_be_cached": {
"type": "boolean"
}
}
}
},
"additionalProperties": true
}🟢subdomains(domain)
Discover a domain's public subdomains (app., api., staging., and so on) from Certificate Transparency logs, querying crt.sh and Cert Spotter in parallel and returning whichever answers first. Useful for mapping a company's public attack surface or infrastructure. If both sources are down the call returns an error rather than an empty list.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Registrable domain, e.g. stripe.com"
}
},
"required": [
"domain"
]
}Output Schema
{
"type": "object",
"properties": {
"domain": {},
"available": {},
"count": {},
"subdomains": {},
"truncated": {},
"source": {},
"_datakoot_note": {},
"free_tier_note": {},
"provenance": {
"type": "object",
"description": "Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.",
"properties": {
"served_at": {
"type": "string",
"format": "date-time"
},
"upstream": {
"type": "array",
"items": {
"type": "string"
}
},
"publisher": {
"type": "string"
},
"may_be_cached": {
"type": "boolean"
}
}
}
},
"additionalProperties": true
}Community
Evidence