DomScan MCP Server

Follow URL redirect chains. Detect HTTPS upgrades, domain changes, and landing pages. Endpoint: GET /v1/redirects. (costs 2 credits)

Detect 500+ verified website technologies across 80+ categories for a public URL or domain. Supports fast HTTP inspection, isolated JavaScript rendering, and up to five same-origin pages with stable IDs, confidence, sanitized evidence scoped to each page, caveats, provenance, and complete or partial signal coverage. (Fast scans cost 3 credits, one-page JavaScript-rendered scans cost 6, and deep scans of up to five same-origin pages cost 9.)

Retrieve one public web page with bounded redirects and response size. Standard requests use one attempt, resilient requests may use one eligible retry, and rendered modes execute page JavaScript in an isolated browser. Free accounts can use standard mode with lower request, concurrency, daily, monthly, and response-size limits. CAPTCHA solving and premium proxy selection are not offered. Target-site failures remain billable after processing starts; verified platform failures are refunded. Endpoint: POST /v1/scrape. (Standard costs 1 credit, resilient costs 2, rendered costs 10, and rendered resilient costs 20. Billing is based on processing effort, not target-site success. Invalid targets cost zero and verified platform failures are refunded.)

Run up to 10 ordered fast technology scans in one request. Each attempted target is billed independently, including target-site failures. Verified DomScan service failures are refunded independently. Endpoint: POST /v1/tech/bulk. (Each valid target costs 3 credits. Invalid targets cost zero.)

Create a durable asynchronous technology scan job for up to 100 public targets. Supports fast, JavaScript-rendered, and bounded same-origin deep modes with item-level billing and refunds. Endpoint: POST /v1/tech/jobs. (Each target costs 3 credits in fast mode, 6 in rendered mode, or 9 in deep mode. There is no bulk discount.)

Queue 1 to 100 public page scrapes for asynchronous processing. Batch jobs are available to paid accounts, require an idempotency key, allow up to three active jobs and 300 queued items per account, and bill each accepted URL at the selected mode price. CAPTCHA solving and premium proxy selection are not offered. Endpoint: POST /v1/scrape/jobs. (Each accepted URL uses the selected mode price. Target-site failures remain billed; only verified platform failures are refunded.)

Get owner-scoped progress, item counts, billing settlement, and expiration details. Endpoint: GET /v1/scrape/jobs/:job_id. (costs 0 credits)

Get ordered, paginated results for an owner-scoped scrape job. Full page results expire after 24 hours. Endpoint: GET /v1/scrape/jobs/:job_id/results. (costs 0 credits)

List recent short-lived technology scan jobs for the authenticated account. Endpoint: GET /v1/tech/jobs. (costs 0 credits)

Get owner-scoped progress, item counts, billing settlement, and expiration details for a technology scan job. Endpoint: GET /v1/tech/jobs/:job_id. (costs 0 credits)

Get ordered, signed-cursor-paginated results for a technology scan job. Full results expire after 48 hours and operational job records expire after seven days. Endpoint: GET /v1/tech/jobs/:job_id/results. (costs 0 credits)

Cancel unstarted technology scan work and settle item-level refunds. Work already in progress may finish and remains available in the job results. Endpoint: DELETE /v1/tech/jobs/:job_id. (costs 0 credits)

Classify websites into DomScan IAB-inspired categories using multi-signal analysis: keywords, schema.org, Open Graph, TLD heuristics, URL patterns, and HTML structure. Endpoint: GET /v1/categorize. (costs 3 credits)

List the DomScan IAB-inspired category IDs, response category names, taxonomy names, and subcategories returned by the Website Categorization API. Endpoint: GET /v1/categorize/taxonomy. (costs 0 credits)

Categorize up to 10 websites in parallel with caching. Endpoint: POST /v1/categorize/bulk. (3 credits per item)

Extract normalized metadata, preview fields, structured-data types, security headers, and public identities from a URL. (costs 2 credits)

Extract normalized URL intelligence for up to 10 URLs in one request. (2 credits per item)

Detect hosting provider, CDN, WAF, DNS provider, and email infrastructure for a domain. (costs 3 credits)

Detect hosting, CDN, WAF, DNS, and email infrastructure for up to 10 domains. (3 credits per item)

Check if a domain is parked, showing placeholder/ad pages, or listed for sale on aftermarket platforms like Sedo, Afternic, Dan.com, etc. (costs 2 credits)

Check if a domain name is available across multiple TLDs. The primary HTTP format uses "name" plus "tlds". The "name" parameter is the domain label WITHOUT the TLD (e.g., "google" not "google.com"). The "tlds" parameter is an array of TLD extensions. (costs 1 credit)

Check multiple complete domain names at once. Each domain must include the TLD (e.g., "google.com"). (1 credit per item)

Get information about which TLDs are supported by this API. (costs 0 credits)

Generate domain name suggestions based on keywords. Great for brainstorming available domains. (2 credits when check=false; 5 credits when availability is checked.)

Estimate the market value of a domain name based on length, keywords, TLD, brandability, and market factors. (costs 2 credits)

Get value estimates for multiple domains at once. Endpoint: POST /v1/value/bulk. (2 credits per item)

Run comprehensive health checks on a domain including DNS, SSL, live TLS grading, HTTP version support, HSTS posture, SMTP TLS reachability, and MX FCrDNS. (costs 3 credits)

Fast health check with essential metrics only. Endpoint: GET /v1/health/quick. (costs 1 credit)

Compare multiple domains side-by-side. Returns availability, valuation, brand score, and recommendations. (costs 3 credits)

Calculate an overall domain quality score based on multiple factors. Endpoint: GET /v1/score. (costs 1 credit)

Compare up to 50 candidate brand names and return ranked scores. Endpoint: POST /v1/score/compare. (costs 2 credits)

Returns scoring dimensions, grade scale, and related scoring endpoints. Endpoint: GET /v1/score/info. (costs 0 credits)

Get normalized RDAP registration data: registrar, dates, nameservers, DNSSEC status. Endpoint: GET /v1/profile. (costs 3 credits)

Get normalized registration profiles for up to 10 domains while preserving input order and per-domain errors. (3 credits per item)

Aggregate DNS, RDAP registration, health, reputation, and popularity observations. Unknown values are null, and component_freshness explains degraded or cached evidence. (costs 5 credits)

Get a domain's current Tranco rank and bucket with source date, cache state, checked timestamp, and optional lookup-driven history. Unknown upstream results remain distinct from unranked domains. (costs 2 credits)

Read prior Tranco observations recorded by DomScan lookups. This is a lookup-driven history, not a complete daily rank series. Endpoint: GET /v1/popularity/history. (costs 1 credit)

Queue a bounded asynchronous search for available single-word domains. Poll the returned batch with get_batch and retrieve results with get_batch_results. Unknown outcomes remain distinct from available. (Each word-TLD pair uses the normal /v1/status credit cost, currently 1 credit. Billing and any eligible item refunds follow /v1/status behavior.)

Get WHOIS/RDAP registration data for a domain including registrar, dates, nameservers, and status. (costs 3 credits)

Merge normalized RDAP registration data with available traditional WHOIS enrichment for a domain. (costs 3 credits)

Get WHOIS data for multiple domains at once. Endpoint: POST /v1/whois/bulk. (3 credits per item)

Query normalized WHOIS observations recorded by DomScan from qualifying fresh RDAP-backed single-domain lookups. Returns a limit-scoped window and detected changes in registrar name, expiry value, nameservers, status, DNSSEC, transfer lock, and privacy or redaction detection. This is not a global archive and does not prove ownership or transfer. (costs 3 credits)

Get raw RDAP response for a domain, IP address, or autonomous system number. Endpoint: GET /v1/rdap. (costs 2 credits)

Get raw RDAP data for up to 10 homogeneous domain, IP, CIDR, or autonomous-system queries. (2 credits per item)

Get domain lifecycle information including registration date, expiration date, domain age, days until expiry, and current lifecycle phase. (costs 2 credits)

List all supported TLDs with optional filtering by type or trust tier. (costs 0 credits)

Get detailed information about a TLD including pricing, restrictions, trust score, and use cases. (costs 1 credit)

Read daily standard-TLD price snapshots from verified official registrar sources. One credit is charged per unique TLD and selected registrar pair. Endpoint: GET /v1/prices. (The input catalog is free when tlds is omitted. Otherwise, 1 credit is charged per unique TLD and selected registrar pair. Registrar filters reduce the planned and charged pair count.)

Read daily standard-price rows for one TLD, with registrar filters, provenance, freshness, and pair-based billing. Endpoint: GET /v1/prices/tld/:tld. (1 credit per selected registrar pair for this TLD. Registrar filters reduce the planned and charged pair count.)

Read daily standard-price rows for multiple TLDs. Each unique TLD and selected registrar pair costs one credit. Endpoint: POST /v1/prices/bulk. (1 credit per unique TLD and selected registrar pair. Registrar filters reduce the planned and charged pair count.)

List registrar metadata and identify which registrars currently have integrated DomScan pricing sources. Endpoint: GET /v1/prices/registrars. (costs 0 credits)

Compare daily standard-TLD rows and separate credential-backed exact-domain quotes without inferring missing operation prices. Endpoint: GET /v1/prices/compare. (1 credit per selected registrar pair for the exact domain. Standard rows and exact quotes remain separate.)

Get credit costs per endpoint and API pricing information. Endpoint: GET /v1/pricing. (costs 0 credits)

Lookup DNS records for a domain. Returns A, AAAA, MX, TXT, NS, CNAME, and other record types plus TXT classification and additive warnings. (costs 1 credit)

Get all major DNS record types for a domain in a single call with IPv6 parity, TXT classification, wildcard probe, and warning signals. Endpoint: GET /v1/dns/all. (costs 2 credits)

Analyze DNS security configuration including SPF, DKIM, DMARC, DNSSEC, CAA, MTA-STS, TLS-RPT, resolver latency, and AXFR exposure. (costs 3 credits)

Compare answers from DomScan's configured public recursive resolvers. This is a resolver comparison, not a geographic or worldwide propagation measurement. (costs 2 credits)

Compare configured public recursive DNS resolver answers for up to 10 domains. This is not a worldwide geographic propagation test. (2 credits per item)

List the public recursive DoH providers used for resolver comparison. These are global anycast services, not geographic probes. Endpoint: GET /v1/dns/servers. (costs 0 credits)

Get the lookup-driven DNS observation log for a domain. Returns day-level added and removed events from prior successful DomScan DNS lookups, not internet-wide passive DNS history. (costs 3 credits)

Return best-effort public hostname evidence from passive sources. Results are incomplete and include provenance. (4 credits by default; 5 credits when verify=true.)

Return best-effort passive hostname evidence for up to 10 domains. Coverage is incomplete and each result identifies its source. (4 credits per item by default; 5 credits per item when verify=true.)

Get geolocation, ASN data, provider security flags, coarse hosting classification, and FCrDNS for an IP or resolved domain. PTR-based classification uses the IP reverse record, not the input domain. (costs 1 credit)

Lookup MAC address metadata and vendor/OUI information. (costs 1 credit)

Returns parameter help and an example response for the MAC address lookup endpoint. Endpoint: GET /v1/mac/info. (costs 0 credits)

Build an SPF record from configuration options. (costs 1 credit)

Validate an SPF record syntax and check for common issues. (costs 1 credit)

Flatten an SPF record by resolving includes to IP addresses. (costs 2 credits)

Build a DMARC record from configuration options. (costs 1 credit)

Validate a DMARC record syntax and configuration. (costs 1 credit)

Check a DKIM selector and validate the public key record. (costs 1 credit)

Discover DKIM selectors by checking common selector names. (costs 2 credits)

Detect potential typosquatting domains for a given domain. Registered-domain checks are optional and slower. (2 credits by default; 3 credits when check_registered=true.)

Generate up to 500 typo variants, live-check at most 75 supported variants, and return registered domains, active DNS signals, risk scores, coverage metadata, and defensive registration opportunities. Endpoint: GET /v1/typos/threats. (costs 12 credits)

Generate up to 300 typo variants, live-check at most 60 supported variants, and return an executive summary, coverage metadata, prioritized defensive registrations, and monitoring recommendations. Endpoint: GET /v1/typos/report. (costs 18 credits)

Check up to 200 typo variants and return only registered domains with risk levels. Endpoint: GET /v1/typos/quick. (costs 6 credits)

Calculate how vulnerable a domain is to typosquatting attacks. Returns a protection score and recommendations. (costs 1 credit)

Calculate a comprehensive reputation score for a domain based on DNS security, SSL, web presence, blacklist, parking, and email factors, including confidence metadata. (costs 3 credits)

Search Certificate Transparency logs to find all SSL certificates issued for a domain. Useful for discovering subdomains, monitoring certificate issuance, and security auditing. (costs 2 credits)

Search Certificate Transparency data for up to 10 domains in one request. (2 credits per item)

Run a comprehensive live SSL/TLS audit for a domain, combining certificate, chain, revocation, HSTS, HTTP version, and TLS posture data. (costs 5 credits)

Run a premium cached deep SSL/TLS scan for a domain. Returns a fresh cached result immediately when available, or starts a long-running scan and returns a signed polling token. Endpoint: GET /v1/ssl/deep-scan. (costs 10 credits)

Analyze SSL/TLS configuration for a domain and get a letter grade with detailed scoring and HSTS preload audit context. (costs 3 credits)

Get certificate chain details including issuer, validity dates, and trust chain. (costs 3 credits)

Check if a domain SSL certificate is expiring soon. (costs 1 credit)

Check email authentication configuration (SPF, DKIM, DMARC) plus MTA-STS, TLS-RPT, and recursive SPF behavior for a domain. (costs 3 credits)

Check email authentication and mail transport policies for up to 10 domains in one request. (3 credits per item)

Provider-oriented sender readiness report for Google/Gmail and Microsoft Outlook.com high-volume requirements, using SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, DNSSEC, CAA, and mail security checks. Endpoint: GET /v1/email/compliance. (costs 6 credits)

Check if an email domain is on disposable/temporary email blacklists. Endpoint: GET /v1/email/check. (costs 1 credit)

Check multiple email domains against blacklists at once. Endpoint: POST /v1/email/check/bulk. (1 credit per item)

Browse the disposable email domain dataset as a paginated data feed. Endpoint: GET /v1/email/blacklist. (costs 0 credits)

Download the full disposable email domain dataset in various formats. Endpoint: GET /v1/email/blacklist/download. (costs 0 credits)

Run a passive, evidence-first vulnerability snapshot for a public domain or URL. Exact detected versions are correlated with authoritative public advisories and exploitation-priority data. The scan does not send exploit payloads. (Standard passive scans cost 8 credits. Deep scans add isolated JavaScript rendering and cost 12 credits.)

Compare domains for similarity. Detect typosquatting with multiple algorithms. Endpoint: GET /v1/similarity. (costs 2 credits)

Verify if an email address is real and deliverable. Checks syntax, MX/null MX records, reserved/test domains, common provider typos, MX provider fingerprints, SPF/DMARC/MTA-STS/TLS-RPT evidence, local-part/domain risk signals, toxicity/do-not-mail, confidence, deliverability status, and recommendations. Mailbox-level SMTP probing is deprecated. (costs 2 credits)

Verify multiple email addresses at once. Max 100 emails per request. Endpoint: POST /v1/email/verify/bulk. (2 credits per item)

Validate, normalize, and enrich a phone number using offline numbering-plan and official allocation data, including US NANPA and Canadian CNA/CNAC NPA-NXX status. Returns a country-specific coverage level, standard formats, region and type, possible time zones, numbering-plan location, original prefix carrier, portability support, dialing guidance, short-number signals, service classification, source provenance, and explicit limitations. Original carrier and allocated range are not current-carrier or individual-number claims. (costs 1 credit)

Validate and enrich up to 100 phone numbers with offline numbering-plan and regulator-allocation data. Accepts strings or per-item objects with parsing, dialing-country, and language context, preserves order and duplicates, and performs no current-carrier, reachability, subscriber, or live-portability checks. (1 credit per item)

Extract source-backed organization metadata, declared social links, MX-inferred email provider, confidence, and provenance from a public website and DNS. (costs 3 credits)

Extract source-backed logo, favicon, preview, manifest, theme color, and declared social profile assets from a public website. (costs 2 credits)

Extract website identity assets for up to 10 domains in one request. (2 credits per item)

Resolve a domain into evidence-backed public profiles explicitly declared by its website. (costs 2 credits)

Resolve declared public identities for up to 10 domains in one request. (2 credits per item)

Check username availability or resolve a scoped platform resource such as a repository, subreddit, invite, profile, or federated account. (costs 2 credits)

Check up to 10 social handles or scoped resource identifiers. Valid items cost 2 credits each, with no bulk discount. (2 credits per item)

Returns supported username platforms, resource types, parameters, and examples for the social intelligence endpoint. Endpoint: GET /v1/social/info. (costs 0 credits)

Queue up to 100 supported GET API requests for asynchronous processing. Each item keeps normal endpoint pricing and refund rules. Target-site outcomes remain billed, while verified service failures are refunded independently. Endpoint: POST /v1/batches. (Each accepted item uses the normal credit cost of its target endpoint.)

List unexpired asynchronous API batches for the active customer account. Endpoint: GET /v1/batches. (costs 0 credits)

Get progress and billing settlement for an asynchronous API batch. (costs 0 credits)

Get ordered JSON results for an asynchronous API batch. (costs 0 credits)

Cancel unstarted work in an asynchronous API batch. (costs 0 credits)

Complete domain acquisition analysis with registration, valuation, health, and brand protection insights. Saves 6 credits vs individual calls. Endpoint: GET /v1/recipes/due-diligence. (costs 12 credits)

Pre-launch checklist for brand domains including DNS, SSL, email auth, and social availability. Saves 4 credits. Endpoint: GET /v1/recipes/brand-launch. (costs 10 credits)

Comprehensive typosquatting and brand threat analysis for security teams. Saves 22 credits. Endpoint: GET /v1/recipes/threat-assessment. (costs 18 credits)

AI-powered domain discovery with filtering and availability checking. Saves 13 credits. Endpoint: GET /v1/recipes/domain-finder. (costs 12 credits)

Competitor domain infrastructure analysis including tech stack and DNS configuration. Saves 5 credits. Endpoint: GET /v1/recipes/competitor-intel. (costs 15 credits)

Audit entire domain portfolio for health, valuation, and optimization opportunities. Saves up to 275 credits. Endpoint: GET /v1/recipes/portfolio-audit. (costs 25 credits)

Audit domain portfolio via POST for larger domain lists. Endpoint: POST /v1/recipes/portfolio-audit. (costs 25 credits)

Complete email authentication and deliverability analysis (SPF, DKIM, DMARC). Saves 5 credits. Endpoint: GET /v1/recipes/email-deliverability. (costs 10 credits)

Pre-migration checklist and current DNS configuration snapshot. Saves 5 credits. Endpoint: GET /v1/recipes/dns-migration. (costs 7 credits)

Complete infrastructure mapping and attack surface analysis. Saves 10 credits. Endpoint: GET /v1/recipes/infrastructure-discovery. (costs 15 credits)

Brand protection through strategic domain acquisition recommendations. Saves 8 credits. Endpoint: GET /v1/recipes/defensive-registration. (costs 12 credits)

Evidence collection and analysis for suspected phishing domains. Saves 10 credits. Endpoint: GET /v1/recipes/phishing-investigation. (costs 12 credits)

Get your domain watchlist. Endpoint: GET /v1/watchlist. (costs 1 credit)

Add a domain to your watchlist. Endpoint: POST /v1/watchlist. (costs 1 credit)

Remove a domain from your watchlist. Endpoint: DELETE /v1/watchlist. (costs 0 credits)

Get domains from your watchlist that are expiring soon. Endpoint: GET /v1/watchlist/expiring. (costs 1 credit)

Get domains from your watchlist that have become available. Endpoint: GET /v1/watchlist/available. (costs 1 credit)

Get your brand monitoring configurations. Endpoint: GET /v1/brand-monitor. (costs 1 credit)

Create a new brand monitoring configuration. Endpoint: POST /v1/brand-monitor. (costs 3 credits)

Manually trigger a brand protection scan. Endpoint: POST /v1/brand-monitor/scan. (costs 6 credits)

Stop monitoring a domain for brand threats. Endpoint: DELETE /v1/brand-monitor. (costs 1 credit)

Get detailed threat, baseline, and alert status for a monitored domain. Endpoint: GET /v1/brand-monitor/status. (costs 1 credit)

Acknowledge current threats by resetting the monitored domain baseline. Endpoint: POST /v1/brand-monitor/reset-baseline. (costs 1 credit)

Update email and webhook alert destinations for a monitored domain. Endpoint: PUT /v1/brand-monitor/alerts. (costs 1 credit)