# Domain Intelligence

A hosted MCP server that lets an agent pull WHOIS, DNS, TLS certificates, live subdomains and email-security records for a domain. Starts without a key.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 15
- Author: osiris-technical-institute
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/osiris-technical-institute/domain-intelligence-api/tree/HEAD/mcp
- Updated: 2026-10-05
- HTML: https://affpapa.org/en/nevibecode/mcp/domain-intelligence

## What it does

Six read-only tools sit behind one HTTP endpoint. `domain_lookup` bundles everything, `whois_lookup` returns registrar plus registration and expiry dates, `dns_records` covers A, AAAA, MX, TXT, NS, CAA and SOA. `ssl_certificate` performs a real TLS handshake and reports the issuer, validity window and SANs; `subdomains` lists hosts that actually answer, with their IPs. `email_security` digs out SPF, DMARC and DKIM keys across a set of frequent selectors. Nothing here writes to the target.

Keyless access is metered per IP each month; connectors such as Claude or ChatGPT share a single pool per provider, and anonymous traffic also hits a daily ceiling that resets at 00:00 UTC. Past that, pass a RapidAPI key in the `X-RapidAPI-Key` header (or as a Bearer token) and calls bill against your RapidAPI plan. Without the header you get a quota refusal, not a hint.

\`domain_lookup` trims long subdomain output via `subdomain_limit`, defaulting to 50 names. On the standalone `subdomains` tool, `wait=true` blocks until every source has replied — slower, but you see the whole set. Clients that only speak stdio, like Claude Desktop, go through `mcp-remote` launched by `npx`.

## Requirements
- Remote server: `https://oti-labs.com/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http domain-intelligence https://oti-labs.com/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add mcp --url https://oti-labs.com/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "mcp": {
            "url": "https://oti-labs.com/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "mcp": {
            "type": "http",
            "url": "https://oti-labs.com/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http mcp https://oti-labs.com/mcp
```

## When to use it
- find out who registered a domain and when it lapses
- capture current DNS records before a migration
- check how soon a TLS certificate expires
- enumerate answering subdomains and their IPs
- see whether SPF, DMARC and DKIM are in place

## Example prompts
- Who is the registrar for `example.com`, and when was it registered?
- Check the TLS certificate on `example.com` — issuer and days left.
- Give me the live subdomains of the site you just looked up, with IPs.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md