English Français العربية

WhoisXML API MCP Server

Official registry Search and web

34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http whoisxml-api-mcp-server 'https://mcp-hosted.whoisxmlapi.com/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "whoisxml-api-mcp-server": {
            "type": "http",
            "url": "https://mcp-hosted.whoisxmlapi.com/mcp"
        }
    }
}
NPM package @whoisxmlapidotcom/mcp-whoisxmlapi
Claude Code 
claude mcp add whoisxml-api-mcp-server -e 'WHOISXMLAPI_TOKEN=<your whoisxmlapi_token>' -- npx -y @whoisxmlapidotcom/mcp-whoisxmlapi@1.11.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "whoisxml-api-mcp-server": {
            "command": "npx",
            "args": [
                "-y",
                "@whoisxmlapidotcom/mcp-whoisxmlapi@1.11.0"
            ],
            "env": {
                "WHOISXMLAPI_TOKEN": "<your whoisxmlapi_token>"
            }
        }
    }
}

Environment variables

  • WHOISXMLAPI_TOKEN required secret WhoisXML API key (get one at https://whoisxmlapi.com)

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. WhoisXML API MCP Server
  2. Hosted endpoint (no install)
  3. Run locally
  4. Tools (32)
  5. Example prompts

WhoisXML API MCP Server

The official WhoisXML API MCP server: 32 first-party tools for WHOIS, DNS, IP geolocation, threat intelligence, typosquatting, email verification, and native bulk lookups — in Claude, Cursor, VS Code, LobeChat, or any MCP client.

This repository is the public listing home for the server. Distribution is via the hosted endpoint, npm, and Docker Hub; the implementation source is maintained privately by Whois API, Inc.

Hosted endpoint (no install)

Connect any remote-capable MCP client to the hosted server — authentication is via OAuth with your WhoisXML API key:

https://mcp-hosted.whoisxmlapi.com/mcp
{
  "mcpServers": {
    "whoisxmlapi": {
      "url": "https://mcp-hosted.whoisxmlapi.com/mcp"
    }
  }
}

Run locally

Requires a WhoisXML API key — get one at https://whoisxmlapi.com.

npm:

{
  "mcpServers": {
    "whoisxmlapi": {
      "command": "npx",
      "args": ["-y", "@whoisxmlapidotcom/mcp-whoisxmlapi"],
      "env": { "WHOISXMLAPI_TOKEN": "at_YOUR_KEY" }
    }
  }
}

Docker:

docker run -i --rm -e WHOISXMLAPI_TOKEN=at_YOUR_KEY whoisxmlapidotcom/mcp-whoisxmlapi

Tools (32)

Domain intelligence
ToolWhat it does
whoisCurrent WHOIS/RDAP registration data for a domain — registrar, dates, nameservers, status, contacts.
whois_historyFull timeline of WHOIS changes — ownership transfers, registrar moves, nameserver swaps.
domain_infoEnriched WHOIS profile combining current + historical records to fill redacted fields.
reverse_whoisEvery domain whose WHOIS record contains a free-text term (name, email, org, address).
reverse_whois_advancedField-specific WHOIS searches (e.g. RegistrantContact.Organization), up to 4 terms.
domain_reputation0–100 trust score from live infrastructure and configuration checks.
typosquattingCheck whether a domain belongs to a typosquatting group, or expand the full group.
categorizationClassify a domain into IAB Content Taxonomy v3.1 categories.
DNS & infrastructure
ToolWhat it does
dns_lookupCurrent DNS records — A, AAAA, MX, NS, SOA, TXT, CNAME, PTR, SRV, CAA, DS, DNSKEY, or all.
dns_historyHistorical DNS records (forward) or domains historically on an IP (reverse).
reverse_dnsSearch DNS records by pattern and return matching domains.
reverse_ipEvery domain currently pointing at an IP, with first-/last-seen dates.
reverse_mxEvery domain using a specific MX server.
reverse_nsEvery domain delegated to a specific nameserver.
subdomain_lookupEnumerate up to 10,000 known subdomains of a domain with seen timestamps.
domain_and_subdomain_discoveryNewly-registered domains/subdomains containing search terms (wildcards supported).
ssl_certificatesTLS certificate details — issuer, validity, SANs, chain trust.
IP intelligence
ToolWhat it does
ipgeolocationCountry, region, city, ISP, ASN for an IP, domain, or email.
ip_netblocksCIDR ranges, ASN, organisation, and registration dates for IP/ASN/org.
Threat & brand protection
ToolWhat it does
threat_intelligenceCheck a domain, URL, IP, CIDR, or file hash against malware/phishing/spam/botnet feeds.
brand_alertNewly added/dropped/updated domains containing brand terms — typosquat & lookalike monitoring.
registrant_alertNew/changed domains whose WHOIS registrant fields match search terms.
Email
ToolWhat it does
email_verificationSyntax, MX, and SMTP deliverability checks; flags disposable/role/free/catch-all.
disposable_email_checkBoolean verdict on disposable/temporary email providers.
Screenshots
ToolWhat it does
website_screenshotCapture a web page screenshot, returned as a native image content block.
Native bulk
ToolWhat it does
bulk_whoisWHOIS for up to 10,000 domains in one call (native bulk, async job_id if long-running).
bulk_email_verificationEmail verification for up to 10,000 addresses (native bulk, async if long-running).
bulk_dns_lookupDNS lookups for up to 200 domains, fanned out concurrently.
bulk_ip_geolocationIP geolocation for up to 200 IPs, fanned out concurrently.
bulk_subdomain_lookupSubdomain discovery for up to 200 apex domains.
bulk_job_statusProgress of an in-flight bulk job.
bulk_job_resultsFull per-input results of a completed bulk job.

Example prompts

  • "Look up the WHOIS for suspicious-domain.com and tell me if it's suspicious."
  • "Find all subdomains of example.com and check their DNS history."
  • "Check the threat intelligence reputation of 203.0.113.7 and what's hosted there."

© Whois API, Inc. · https://www.whoisxmlapi.com · Support: https://whoisxmlapi.com/contact-us

Frequently asked questions

What is WhoisXML API MCP Server?

34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.

How do I install WhoisXML API MCP Server?

It runs as a remote server. In Claude Code: claude mcp add --transport http whoisxml-api-mcp-server 'https://mcp-hosted.whoisxmlapi.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does WhoisXML API MCP Server need an API key?

Yes. It expects WHOISXMLAPI_TOKEN, which you set in its configuration.

Is WhoisXML API MCP Server open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains WhoisXML API MCP Server?

It is published by whoisxmlapi. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.