Domainintel MCP server
Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.
0 stars49 downloads/wk
Reviews
Write oneNobody has reviewed Domainintel yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Domainintel tools (7, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
dns_recordsResolves A, AAAA, MX, TXT, NS and CNAME records, plus CAA records, SPF/DMARC presence and common DNS misconfiguration warnings.
domain_reputationChecks the domain/IP against DNS blocklists (DNSBL, Spamhaus) and returns a reputation score and any listings.
full_domain_reportwrite actionRuns every analyzer (WHOIS, DNS, SSL, security headers, reputation, subdomains) in parallel and returns a combined report with an overall security score and A+ to F rating.
security_headersFetches HTTP response headers and scores security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) with recommendations.
ssl_certificateInspects the live TLS certificate: validity, issuer, subject, expiration, days remaining, protocol/cipher and certificate warnings.
subdomain_discoveryDiscovers subdomains via Certificate Transparency logs (crt.sh) and common-prefix probing, with DNS resolution status for each.
whois_lookupRegistration data for a domain: registrar, creation/expiry/updated dates, registrant country, privacy/redaction status, and name servers.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 64 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/server.mjs: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…
How Domainintel compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 80/100
- higher than 64% of 915 Security servers
- Tools
- 7
- the typical Security server has 6
- Tools that change things
- 14%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 49
- more than 41% of 248 Security servers with a package
What its tools let an agent do: 6 read · 1 change
Install Domainintel in Claude Code, Cursor or VS Code
Runs npx -y @domainintel/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add domainintel-mcp -- npx -y @domainintel/mcp
What the publisher says
From the Domainintel repository's README, as published. We do not edit it. Read it on GitHub
@domainintel/mcp
An MCP server that gives AI agents live domain intelligence: WHOIS, DNS, SSL/TLS, HTTP security headers, reputation, and subdomain discovery for any domain. It is the same analysis engine that powers DomainIntel.app.
Tools
Every tool except analyzeemailheaders takes a single domain argument; protocol, www., and paths are stripped automatically. analyzeemailheaders takes a headers string (a pasted raw header block) instead.
Requirements
- Node.js 18 or newer
Install
Claude Code
claude mcp add domainintel -- npx -y @domainintel/mcpClaude Desktop
Add to claudedesktopconfig.json (Settings → Developer → Edit Config):
{
"mcpServers": {
"domainintel": {
"command": "npx",
"args": ["-y", "@domainintel/mcp"]
}
}
}Any other MCP client
The server speaks MCP over stdio:
npx -y @domainintel/mcpExample prompts
- "Run a full domain report on stripe.com"
- "What are the MX records for github.com, and does it have DMARC?"
- "Is the SSL certificate for example.org close to expiring?"
Development
Run from source (no build needed):
git clone <repo> && cd domainintel.app
npm install
npm run mcp # node mcp/server.mjsBuilding & publishing
The published package is a single self-contained bundle (the analyzers and all JS dependencies are bundled with esbuild; Node built-ins resolve at runtime).
npm run build:mcp # from repo root -> mcp/dist/server.mjs
cd mcp && npm publish # prepublishOnly rebuilds the bundleLicense
MIT
Nothing above is checked by us. What we check is on the safety report.
Domainintel: common questions
- Is Domainintel MCP server safe?
- Mostly: it is graded B (80/100). Read the Domainintel safety report
- How do I install Domainintel?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Domainintel need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Domainintel maintained?
- The last commit was 103 days ago (2026-07-24). The latest release is v1.0.2.
- What can I use instead of Domainintel?
- Servers from other publishers that do the same job: Dechonet MCP server, Security Suite MCP server and Security Suite MCP server.
- How does Domainintel compare with other Security MCP servers?
- safety score 80/100 (higher than 64% of 915 Security servers); tools 7 (the typical Security server has 6); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Domainintel
Same job from other publishers: the closest match first, then the best rated.
- Dechonet30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.not reviewedGrowingA
- Security SuiteEvery GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNSnot reviewedGrowingA
- Security SuiteBundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligencenot reviewedGrowingA
- npm Registry MCP Servernpm registry MCP server — package intelligence, security audits, dependency analysisnot reviewedGrowingB
- JikidaSecurity tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.not reviewedGrowingA