{
  "markdown": "# @domainintel/mcp\n\nAn [MCP](https://modelcontextprotocol.io) server that gives AI agents live domain intelligence: WHOIS, DNS, SSL/TLS, HTTP security headers, reputation, and subdomain discovery for any domain. It is the same analysis engine that powers [DomainIntel.app](https://domainintel.app).\n\n## Tools\n\n| Tool | Returns |\n|------|---------|\n| `whois_lookup` | Registrar, creation/expiry/updated dates, registrant country, privacy status, nameservers |\n| `dns_records` | A, AAAA, MX, TXT, NS, CNAME, CAA records + SPF/DMARC presence + misconfiguration warnings |\n| `ssl_certificate` | Validity, issuer, expiration, days remaining, protocol, warnings |\n| `security_headers` | HSTS, CSP, X-Frame-Options and others, scored with recommendations |\n| `domain_reputation` | DNSBL / Spamhaus blocklist checks and a reputation score |\n| `subdomain_discovery` | Subdomains via Certificate Transparency logs and common-prefix probing |\n| `full_domain_report` | Every analyzer at once plus an overall A+ to F security score |\n| `analyze_email_headers` | Parses a raw email header block: SPF/DKIM/DMARC results, the Received delivery path with timing, key envelope fields, and a From-vs-Return-Path spoofing flag |\n\nEvery tool except `analyze_email_headers` takes a single `domain` argument; protocol, `www.`, and paths are stripped automatically. `analyze_email_headers` takes a `headers` string (a pasted raw header block) instead.\n\n## Requirements\n\n- Node.js 18 or newer\n\n## Install\n\n### Claude Code\n\n```bash\nclaude mcp add domainintel -- npx -y @domainintel/mcp\n```\n\n### Claude Desktop\n\nAdd to `claude_desktop_config.json` (Settings → Developer → Edit Config):\n\n```json\n{\n  \"mcpServers\": {\n    \"domainintel\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@domainintel/mcp\"]\n    }\n  }\n}\n```\n\n### Any other MCP client\n\nThe server speaks MCP over stdio:\n\n```bash\nnpx -y @domainintel/mcp\n```\n\n## Example prompts\n\n- \"Run a full domain report on stripe.com\"\n- \"What are the MX records for github.com, and does it have DMARC?\"\n- \"Is the SSL certificate for example.org close to expiring?\"\n\n## Development\n\nRun from source (no build needed):\n\n```bash\ngit clone <repo> && cd domainintel.app\nnpm install\nnpm run mcp        # node mcp/server.mjs\n```\n\n## Building & publishing\n\nThe published package is a single self-contained bundle (the analyzers and all\nJS dependencies are bundled with esbuild; Node built-ins resolve at runtime).\n\n```bash\nnpm run build:mcp          # from repo root -> mcp/dist/server.mjs\ncd mcp && npm publish       # prepublishOnly rebuilds the bundle\n```\n\n## License\n\nMIT\n",
  "bytes": 2585,
  "sha": "22944a39c40b97e61c9ea2f245b794ec9680db9c2f17f18930f12ee3dad67766",
  "repo_slug": "bishop81/domainintel-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_bishop81_domainintel_mcp_a086a186/readme"
}