DomScan MCP Server

Follow URL redirect chains. Detect HTTPS upgrades, domain changes, and landing pages. (costs 2 credits)

Detect 500+ verified website technologies across 80+ categories for a public URL or domain. Supports fast HTTP inspection, isolated JavaScript rendering, and up to five same-origin pages with stable IDs, confidence, sanitized evidence scoped to each page, caveats, provenance, and complete or partial signal coverage. Send targets (array) instead of url or domain to run the bulk check. (Fast scans cost 3 credits, one-page JavaScript-rendered scans cost 6, and deep scans of up to five same-origin pages cost 9; targets: Each valid target costs 3 credits. Invalid targets cost zero)

Retrieve one public web page with bounded redirects and response size. Standard requests use one attempt, resilient requests may use one eligible retry, and rendered modes execute page JavaScript in an isolated browser. Free accounts can use standard mode with lower request, concurrency, daily, monthly, and response-size limits. CAPTCHA solving and premium proxy selection are not offered. Target-site failures remain billable after processing starts; verified platform failures are refunded. (Standard costs 1 credit, resilient costs 2, rendered costs 10, and rendered resilient costs 20. Billing is based on processing effort, not target-site success. Invalid targets cost zero and verified platform failures are refunded.)

Create a durable asynchronous technology scan job for up to 100 public targets. Supports fast, JavaScript-rendered, and bounded same-origin deep modes with item-level billing and refunds. (Each target costs 3 credits in fast mode, 6 in rendered mode, or 9 in deep mode. There is no bulk discount.)

Queue 1 to 100 public page scrapes for asynchronous processing. Batch jobs are available to paid accounts, require an idempotency key, allow up to three active jobs and 300 queued items per account, and bill each accepted URL at the selected mode price. CAPTCHA solving and premium proxy selection are not offered. (Each accepted URL uses the selected mode price. Target-site failures remain billed; only verified platform failures are refunded.)

Read asynchronous scrape jobs: get (status, settlement and expiry for job_id), results (page results for job_id; expire after 24 hours). (every action 0 credits)

Read asynchronous technology scan jobs: list (your jobs, cursor paginated), get (status for job_id), results (records for job_id; expire after seven days). Cancel with cancel_tech_scan_job. (every action 0 credits)

Cancel unstarted technology scan work and settle item-level refunds. Work already in progress may finish and remains available in the job results. (costs 0 credits)

Classify websites into DomScan IAB-inspired categories using multi-signal analysis: keywords, schema.org, Open Graph, TLD heuristics, URL patterns, and HTML structure. Send urls (array) instead of url or domain to run the bulk check. (costs 3 credits; urls: 3 credits per item)

Extract normalized metadata, preview fields, structured-data types, security headers, and public identities from a URL. Send urls (array) instead of url to run the bulk check. (costs 2 credits; urls: 2 credits per item)

Score a public website across four agent-readiness dimensions with transparent checks, confidence, evidence, caveats, and prioritized recommendations. (costs 3 credits)

Fetch and parse a site robots.txt (RFC 9309): crawler groups and rules, declared sitemaps, an allow or disallow verdict for a user agent and path, and root access for 14 AI crawlers such as GPTBot and ClaudeBot. Failed or blocked fetches return unknown, never allowed. The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. (costs 1 credit)

Test URLs (max 100) against user agents (max 10) with a pasted robots_txt or the live file of url. Returns allowed, the deciding rule and line, and syntax issues. unknown is never allowed. (costs 1 credit)

Discover and audit a website XML sitemaps: follows robots.txt declarations and sitemap indexes within a bounded budget, and returns URL counts, lastmod freshness, extensions and protocol issues. Counts cover the files fetched only. The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. (costs 2 credits)

Page and site checks. unknown is never a clean result. (audit: 2 credits, 6 rendered | render_diff: 7 credits | structured_data: 2 credits, 6 rendered | keyword_density: 2 credits, 6 rendered | links: 2 credits, 6 rendered or checked | hreflang: 3 credits | ads_txt: 2 credits, 5 with verify_sellers=true | duplicate_content: 5 credits for up to 10 URLs | site_audit: 10 credits for 10 pages, 20 for 25 and 35 for 50 | screenshot: 10 credits | accessibility: 8 credits | cookie_scan: 8 credits | page_weight: 6 credits)

Detect hosting provider, CDN, WAF, DNS provider, and email infrastructure for a domain. Send domains (array) instead of domain to run the bulk check. (costs 3 credits; domains: 3 credits per item)

Check if a domain is parked, showing placeholder/ad pages, or listed for sale on aftermarket platforms like Sedo, Afternic, Dan.com, etc. The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. (costs 2 credits)

Check if a domain name is available across multiple TLDs. The primary HTTP format uses "name" plus "tlds". The "name" parameter is the domain label WITHOUT the TLD (e.g., "google" not "google.com"). The "tlds" parameter is a comma-separated string of TLD extensions (up to 50). The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. Send domains (array) instead of domain or name to run the bulk check. (costs 1 credit; domains: 1 credit per item)

Free reference data: coverage (supported sources and limits), score_info, dns_servers (resolvers used for propagation), email_blacklist (paginated disposable-domain feed), email_blacklist_download, mac_info, social_info (supported platforms), tlds (TLD catalog with filters), registrars (pricing sources), pricing (credit and plan pricing), categorization_taxonomy. (every action 0 credits)

Generate domain name suggestions based on keywords. Great for brainstorming available domains. (2 credits when check=false; 5 credits when availability is checked.)

Estimate the market value of a domain name based on length, keywords, TLD, brandability, and market factors. Send domains (array) instead of domain to run the bulk check. (costs 2 credits; domains: 2 credits per item)

Run comprehensive health checks on a domain including DNS, SSL, live TLS grading, HTTP version support, HSTS posture, SMTP TLS reachability, and MX FCrDNS. (costs 3 credits)

Fast health check with essential metrics only. (costs 1 credit)

Compare multiple domains side-by-side. Returns availability, valuation, brand score, and recommendations. (costs 3 credits)

Calculate an overall domain quality score based on multiple factors. (costs 1 credit)

Compare up to 50 candidate brand names and return ranked scores. (costs 2 credits)

Get normalized RDAP registration data: registrar, dates, nameservers, DNSSEC status. Send domains (array) instead of domain to run the bulk check. (costs 3 credits; domains: 3 credits per item)

Aggregate DNS, RDAP registration, health, reputation, and popularity observations. Unknown values are null, and component_freshness explains degraded or cached evidence. (costs 5 credits)

Get a domain's current Tranco rank and bucket with source date, cache state, checked timestamp, and optional lookup-driven history. Unknown upstream results remain distinct from unranked domains. (costs 2 credits)

Read prior Tranco observations recorded by DomScan lookups. This is a lookup-driven history, not a complete daily rank series. (costs 1 credit)

Queue a bounded asynchronous search for available single-word domains. Poll the returned batch with get_batch and retrieve results with get_batch_results. Unknown outcomes remain distinct from available. (Each word-TLD pair uses the normal /v1/status credit cost, currently 1 credit. Billing and any eligible item refunds follow /v1/status behavior.)

Get WHOIS/RDAP registration data for a domain including registrar, dates, nameservers, and status. Send domains (array) instead of domain to run the bulk check. (costs 3 credits; domains: 3 credits per item)

Merge normalized RDAP registration data with available traditional WHOIS enrichment for a domain. (costs 3 credits)

Query normalized WHOIS observations recorded by DomScan from qualifying fresh RDAP-backed single-domain lookups. Returns a limit-scoped window and detected changes in registrar name, expiry value, nameservers, status, DNSSEC, transfer lock, and privacy or redaction detection. This is not a global archive and does not prove ownership or transfer. (costs 3 credits)

Get raw RDAP response for a domain, IP address, or autonomous system number. Send queries (array) instead of query or domain to run the bulk check. (costs 2 credits; queries: 2 credits per item)

Get domain lifecycle information including registration date, expiration date, domain age, days until expiry, and current lifecycle phase. (costs 2 credits)

Check a name across domains, platform handles and package registries. Returns verdict, score and per-item status; unknown is never available. (costs 5 credits)

Get detailed information about a TLD including pricing, restrictions, trust score, and use cases. (costs 1 credit)

Read daily standard-TLD price snapshots from verified official registrar sources. Each unique TLD and selected registrar pair costs 1 credit, regardless of request size. Duplicate TLDs and registrar IDs count once, and registrar filters reduce the number of billed pairs. (The input catalog is free when tlds is omitted. Each unique normalized TLD and selected registrar pair costs exactly 1 credit. Duplicate TLDs and registrar IDs count once, and registrar filters reduce the planned and charged pair count.)

Read daily standard-price rows for one TLD, with registrar filters, provenance, freshness, and pair-based billing. (1 credit per selected registrar pair for this TLD. Registrar filters reduce the planned and charged pair count.)

Read daily standard-price rows for up to 50 unique TLDs in one request. Each unique TLD and selected registrar pair costs 1 credit. Duplicate TLDs and registrar IDs count once, and registrar filters reduce the number of billed pairs. (1 credit per unique normalized TLD and selected registrar pair. Duplicate TLDs and registrar IDs count once, and registrar filters reduce the planned and charged pair count.)

Compare daily standard-TLD rows and separate credential-backed exact-domain quotes without inferring missing operation prices. (Each unique TLD and selected registrar pair costs exactly 1 credit. Standard rows and exact-domain quotes for the same pair are returned separately but billed once total. A failed or unknown exact quote is refunded 1 credit only when no standard row for that pair is returned.)

Lookup DNS records for a domain. Returns A, AAAA, MX, TXT, NS, CNAME, and other record types plus TXT classification and additive warnings. (costs 1 credit)

Get all major DNS record types for a domain in a single call with IPv6 parity, TXT classification, wildcard probe, and warning signals. (costs 2 credits)

Analyze DNS security configuration including SPF, DKIM, DMARC, DNSSEC, CAA, MTA-STS, TLS-RPT, resolver latency, and AXFR exposure. The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. (costs 3 credits)

Compare answers from DomScan's configured public recursive resolvers. This is a resolver comparison, not a geographic or worldwide propagation measurement. Send domains (array) instead of domain to run the bulk check. (costs 2 credits; domains: 2 credits per item)

Get the lookup-driven DNS observation log for a domain. Returns day-level added and removed events from prior successful DomScan DNS lookups, not internet-wide passive DNS history. (costs 3 credits)

Return best-effort public hostname evidence from passive sources. Results are incomplete and include provenance. Send domains (array) instead of domain to run the bulk check. (4 credits by default; 5 credits when verify=true; domains: 4 credits per item by default; 5 credits per item when verify=true)

Get geolocation, ASN data, provider security flags, coarse hosting classification, and FCrDNS for an IP or resolved domain. PTR-based classification uses the IP reverse record, not the input domain. (costs 1 credit)

Lookup MAC address metadata and vendor/OUI information. (costs 1 credit)

Build a DNS TXT record from configuration options without any lookup: spf (all is required; include, ip4, ip6, a, mx, redirect) or dmarc (policy is required; subdomain_policy, percentage, rua, ruf, adkim, aspf). (every action 1 credit)

Check published email authentication records: spf_validate and dmarc_validate (send record or domain), spf_flatten (domain; resolves includes to IP addresses), dkim_check (domain and selector), dkim_discover (domain; tries common selectors). (spf_validate: 1 credit | spf_flatten: 2 credits | dmarc_validate: 1 credit | dkim_check: 1 credit | dkim_discover: 2 credits)

Typosquatting analysis for a domain: check (generate variants, optionally check_registered), quick (registered variants with risk levels), threats (registered threats with evidence), report (full report with recommendations), score (brand protection score). The classification field gives present, absent or unknown; never treat unknown as absent. (check: 2 credits by default; 3 credits when check_registered=true | quick: 6 credits | threats: 12 credits | report: 18 credits | score: 1 credit)

Calculate a comprehensive reputation score for a domain based on DNS security, SSL, web presence, blacklist, parking, and email factors, including confidence metadata. (costs 3 credits)

Search Certificate Transparency logs to find all SSL certificates issued for a domain. Useful for discovering subdomains, monitoring certificate issuance, and security auditing. Send domains (array) instead of domain to run the bulk check. (costs 2 credits; domains: 2 credits per item)

SSL/TLS checks for a domain: audit (certificate and configuration audit), grade (letter grade with HSTS preload context), chain (certificate chain validation), expiring (expiry against days or threshold_days), deep_scan (protocol and cipher scan; returns a polling token while it runs). The classification field gives present, absent or unknown; never treat unknown as absent. (audit: 5 credits | grade: 3 credits | chain: 3 credits | expiring: 1 credit | deep_scan: 10 credits)

Check email authentication configuration (SPF, DKIM, DMARC) plus MTA-STS, TLS-RPT, and recursive SPF behavior for a domain. The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. Send domains (array) instead of domain to run the bulk check. (costs 3 credits; domains: 3 credits per item)

Provider-oriented sender readiness report for Google/Gmail and Microsoft Outlook.com high-volume requirements, using SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, DNSSEC, CAA, and mail security checks. (costs 6 credits)

Check if an email domain is on disposable/temporary email blacklists. Send emails (array) instead of email to run the bulk check. (costs 1 credit; emails: 1 credit per item)

Run a passive, evidence-first vulnerability snapshot for a public domain or URL. Exact detected versions are correlated with authoritative public advisories and exploitation-priority data. The scan does not send exploit payloads. (Standard passive scans cost 8 credits. Deep scans add isolated JavaScript rendering and cost 12 credits.)

Compare domains for similarity. Detect typosquatting with multiple algorithms. (costs 2 credits)

Audit a page HTTP security headers (HSTS, CSP, frame protection, nosniff, Referrer-Policy, Permissions-Policy, COOP, COEP, CORP, version disclosure, cookie flags) and return per-check results, a score, a grade and recommendations. Error or challenge responses are analysed but not graded. The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. (costs 1 credit)

Fetch and validate a domain security.txt (RFC 9116), trying /.well-known/security.txt and the legacy /security.txt only after a 404. Returns parsed contact, expiry and policy fields, a valid, invalid, not_found or unknown status, and coded errors and warnings. Signatures are detected but not verified. The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. (costs 1 credit)

security_rating (domain): A-F grade from TLS, security headers, SPF/DMARC, DNSSEC/CAA, blocklists and security.txt. legal_compliance (url, render, verify_links): privacy policy, terms, imprint, privacy choices, consent manager and trackers. Unknown signals are excluded, never failures. (security_rating: 5 credits | legal_compliance: 2 credits, 6 rendered)

Analyse an internationalized domain name: Unicode and punycode forms, per-label scripts, mixed-script and invisible-character detection, lookalike characters, a confusable skeleton and a homograph risk level. Uses a curated subset of Unicode confusables. (costs 1 credit)

Verify if an email address is real and deliverable. Checks syntax, MX/null MX records, reserved/test domains, common provider typos, MX provider fingerprints, SPF/DMARC/MTA-STS/TLS-RPT evidence, local-part/domain risk signals, toxicity/do-not-mail, confidence, deliverability status, and recommendations. Mailbox-level SMTP probing is deprecated. Send emails (array) instead of email to run the bulk check. (costs 2 credits; emails: 2 credits per item)

Validate, normalize, and enrich a phone number using offline numbering-plan and official allocation data, including US NANPA and Canadian CNA/CNAC NPA-NXX status. Returns a country-specific coverage level, standard formats, region and type, possible time zones, numbering-plan location, original prefix carrier, portability support, dialing guidance, short-number signals, service classification, source provenance, and explicit limitations. Original carrier and allocated range are not current-carrier or individual-number claims. Send phones (array) instead of phone to run the bulk check. (costs 1 credit; phones: 1 credit per item)

Offline validation, no third-party lookup: bank (iban, bic, routing_number: structure, check digits, bank and branch codes, SEPA, BIC/IBAN country match) or national_id (id: Spanish DNI, NIE or NIF/CIF control character and entity type). Valid means well formed, not that the account or person exists. (every action 1 credit)

Live official register checks: vat (vat, optional country and requester; EU/XI and NO live, GB/CH/AU format only), npi (number with optional name, state, taxonomy to verify) or npi_search (first_name/last_name or organization_name, optional city, state, postal_code, taxonomy_description). unknown means the register did not answer, never invalid or not found. (every action 1 credit)

Screen a name against OFAC SDN and consolidated, UN, EU and UK sanctions lists, with optional type, country and date_of_birth. potential_match lists scored entries; no_match only when all lists are current; unknown otherwise. A match needs human review. (costs 2 credits)

Extract source-backed organization metadata, declared social links, MX-inferred email provider, confidence, and provenance from a public website and DNS. (costs 3 credits)

Extract source-backed logo, favicon, preview, manifest, theme color, and declared social profile assets from a public website. Send domains (array) instead of domain to run the bulk check. (costs 2 credits; domains: 2 credits per item)

Resolve a domain into evidence-backed public profiles explicitly declared by its website. Send domains (array) instead of domain to run the bulk check. (costs 2 credits; domains: 2 credits per item)

Check username availability or resolve a scoped platform resource such as a repository, subreddit, invite, profile, or federated account. The classification field gives present, absent or unknown (with a reason) plus evidence; never treat unknown as absent. Send handles (array) instead of handle to run the bulk check. (costs 2 credits; handles: 2 credits per item)

Find a verified avatar for email, username (optional platform: github, bluesky, mastodon, keybase) or a logo for domain. Returns present, absent or unknown per source; unknown is never absent. (costs 2 credits)

Estimate how many credits a DomScan API request would charge before running it. Pass method, path, and optional query and body exactly as the real request would send them. Returns credits, a breakdown and notes; when the charge depends on the outcome the value is a maximum. Costs nothing. (costs 0 credits)

Queue up to 100 supported GET API requests for asynchronous processing. Each item keeps normal endpoint pricing and refund rules. Target-site outcomes remain billed, while verified service failures are refunded independently. (Each accepted item uses the normal credit cost of its target endpoint.)

Read asynchronous API batches: list (batches for the account), get (status for job_id), results (item results for job_id, paginated with after). Cancel with cancel_batch. (every action 0 credits)

Cancel unstarted work in an asynchronous API batch. (costs 0 credits)

Read asynchronous jobs of every kind: list (optionally filtered by kind, cursor paginated), get (status for job_id), results (results for job_id, cursor paginated). Cancel with cancel_job. (every action 0 credits)

Cancel an asynchronous job by its id. Unstarted items are refunded. Scrape jobs cannot be cancelled. (costs 0 credits)

Complete domain acquisition analysis with registration, valuation, health, and brand protection insights. Saves 6 credits vs individual calls. (costs 12 credits)

Pre-launch checklist for brand domains including DNS, SSL, email auth, and social availability. Saves 4 credits. (costs 10 credits)

Comprehensive typosquatting and brand threat analysis for security teams. Saves 22 credits. (costs 18 credits)

AI-powered domain discovery with filtering and availability checking. Saves 13 credits. (costs 12 credits)

Competitor domain infrastructure analysis including tech stack and DNS configuration. Saves 5 credits. (costs 15 credits)

Audit entire domain portfolio for health, valuation, and optimization opportunities. Saves up to 275 credits. Send domains as an array for larger lists. (costs 25 credits; domains: costs 25 credits)

Complete email authentication and deliverability analysis (SPF, DKIM, DMARC). Saves 5 credits. (costs 10 credits)

Pre-migration checklist and current DNS configuration snapshot. Saves 5 credits. (costs 7 credits)

Complete infrastructure mapping and attack surface analysis. Saves 10 credits. (costs 15 credits)

Brand protection through strategic domain acquisition recommendations. Saves 8 credits. (costs 12 credits)

Evidence collection and analysis for suspected phishing domains. Saves 10 credits. (costs 12 credits)

Get your domain watchlist. (costs 1 credit)

Add a domain to your watchlist. (costs 1 credit)

Remove a domain from your watchlist. (costs 0 credits)

Check the domains on your watchlist: expiring (domains expiring within days), available (domains that have become available). List the watchlist itself with get_watchlist. (every action 1 credit)

Read brand monitoring: list (your monitor configurations), status (scan and alert status for a monitored domain). (every action 1 credit)

Start brand protection work for a domain: create (new monitor with optional alert_email and alert_webhook), scan (run a brand protection scan now). Each call creates something new. (create: 3 credits | scan: 6 credits)

Stop monitoring a domain for brand threats. (costs 1 credit)

Change an existing brand monitor for a domain: alerts (set alert_email and alert_webhook), reset_baseline (accept the current state as the new baseline). Repeating a call changes nothing further. Stop monitoring with delete_brand_monitor. (every action 1 credit)

Read alert webhook endpoints: list (endpoints, event types and delivery price), deliveries (recent deliveries for webhook_id with charged or refunded credits). (every action 0 credits)

Register an HTTPS endpoint that receives signed monitoring alerts. Returns the signing secret once. Delivered alerts cost 2 credits each. (Creating an endpoint is free. Each alert delivered with a 2xx response costs 2 credits. Failed deliveries are refunded and test events are free.)

Enable, disable, or change the subscribed events of an alert webhook endpoint. (costs 0 credits)

Delete an alert webhook endpoint and cancel its pending deliveries. (costs 0 credits)

Send a free signed test event to an alert webhook endpoint. (costs 0 credits)

Rotate the signing secret of an alert webhook endpoint. Returns the new secret once; the previous secret also signs deliveries for 24 hours. (Rotating a signing secret is free.)

List your certificate, price, DNS and lookalike alert subscriptions. (costs 0 credits)

Subscribe to certificate, price drop, DNS change or lookalike alerts. Free to create; delivered alerts cost 2 credits each. (Creating a subscription and running its checks is free. Each alert delivered to a webhook endpoint with a 2xx response costs 2 credits. Failed deliveries and unknown checks are never charged.)

Get one alert subscription with its observed evidence and recent events. (costs 0 credits)

Pause, resume or change the events and thresholds of an alert subscription. (costs 0 credits)

Delete an alert subscription. (costs 0 credits)