WhoisXML API MCP Server

27 WHOIS, DNS, IP, threat intelligence, and bulk tools for AI agents — backed by 28.7B+ historic WHOIS records, 50B+ domains, and 116B+ DNS records.

От сообществаРаботаетБез входаГлобальныйБесплатноТолько чтение

Что умеет

  • Bulk Dns Lookup: Run DNS lookups for up to 200 domain names per call. Emulated bulk (no native upstream bulk endpoint): the server fans out single DNS lookups concurrently and returns a unified envelo
  • Bulk Email Verification: Run email verification for up to 10,000 emails per call. Native bulk (uses WhoisXML's Bulk Email Verification API). Each email consumes 1 credit. Returns inline if completes w
  • Bulk Ip Geolocation: Run IP geolocation lookups for up to 200 IP addresses per call. Emulated bulk (no native upstream bulk endpoint exists; the WhoisXML bulk-IP-geo product is CSV-only via web UI). T

Какие данные видит

Нужен ли аккаунт

Не нужен: сервер работает без входа

27 WHOIS, DNS, IP, threat intelligence, and bulk tools for AI agents — backed by 28.7B+ historic WHOIS records, 50B+ domains, and 116B+ DNS records.

Capabilities

  • WHOIS / Domain: whois, whois_history, reverse_whois, reverse_whois_advanced, bulk_whois, domain_info
  • DNS: dns_lookup, dns_history, reverse_dns, reverse_ns, reverse_mx, bulk_dns_lookup
  • IP / Network: ipgeolocation, ip_netblocks, reverse_ip, bulk_ip_geolocation
  • Subdomain / Discovery: subdomain_lookup, domain_and_subdomain_discovery, bulk_subdomain_lookup
  • Threat / Brand intel: threat_intelligence, typosquatting, categorization, ssl_certificates
  • Email: email_verification, bulk_email_verification
  • Bulk-job admin: bulk_job_status, bulk_job_results
  • Meta: tool_search (deferred-loading helper for context-constrained agents)

Auth: OAuth 2.0 (PKCE/S256, dynamic client registration). Sign in once with your WhoisXML API account at the OAuth prompt — no API-key management on the client side.

Pricing: Tools consume WhoisXML API credits per call. Free trial available at https://whoisxmlapi.com.

License: Apache 2.0

Как подключить

Как подключить WhoisXML API MCP Server к Claude

Адрес сервера, который нужно вставить в настройках Claude:

https://whoisxmlapi--dev-gbg4.run.tools

  1. Откройте Claude (сайт claude.ai или приложение для компьютера).
  2. Перейдите в Настройки → Коннекторы (в английском интерфейсе: Settings → Connectors).
  3. Нажмите Добавить пользовательский коннектор (Add custom connector).
  4. Вставьте адрес сервера, скопированный ниже, в поле URL удалённого MCP-сервера и нажмите Добавить.
  5. В чате нажмите + → Коннекторы и включите новый коннектор.

Пользовательские коннекторы доступны на тарифах Free, Pro, Max, Team и Enterprise. На Free можно добавить только один. В Team и Enterprise коннектор сначала добавляет владелец организации в Настройки организации → Коннекторы.

Авторизация

После нажатия Добавить откроется окно входа в сервис. Войдите под своим аккаунтом и подтвердите доступ. Пароль Claude не видит.

Как подключить WhoisXML API MCP Server к ChatGPT

Адрес сервера, который нужно вставить в настройках ChatGPT:

https://whoisxmlapi--dev-gbg4.run.tools

  1. Откройте ChatGPT в браузере (chatgpt.com). Нужен тариф Plus, Pro, Business, Enterprise или Edu.
  2. Один раз включите режим разработчика: Настройки → Приложения → Дополнительные настройки → Режим разработчика (Settings → Apps → Advanced settings → Developer mode).
  3. Откройте Настройки → Коннекторы и нажмите Создать (Create).
  4. Заполните форму: Название (любое), Описание (одна фраза, что делает сервис), URL MCP-сервера (скопируйте ниже).
  5. В поле Аутентификация выберите OAuth, если сервис требует вход, иначе Нет. Нажмите Создать.
  6. В новом чате откройте + → Приложения/Коннекторы и включите коннектор.

Название раздела у OpenAI менялось (Connectors → Apps/Plugins). Если пункт называется иначе, ищите «режим разработчика» в настройках. В рабочих пространствах Business/Enterprise администратор должен разрешить пользовательские коннекторы.

Авторизация

При первом использовании ChatGPT откроет окно входа в сервис. Войдите и подтвердите доступ.

Как подключить WhoisXML API MCP Server к Cursor

Адрес сервера, который нужно вставить в настройках Cursor:

https://whoisxmlapi--dev-gbg4.run.tools

Быстрый способ: нажмите кнопку Открыть в Cursor ниже, Cursor сам предложит добавить сервер.

Вручную:

  1. В Cursor откройте Settings → Cursor Settings → MCP и нажмите Add new global MCP server.
  2. Вставьте JSON, скопированный ниже, в открывшийся файл ~/.cursor/mcp.json (для одного проекта: .cursor/mcp.json в корне проекта).
  3. Сохраните файл. Сервер появится в списке MCP; при необходимости пройдите авторизацию по кнопке рядом с ним.

Авторизация

Если сервис требует вход, рядом с сервером в списке MCP появится кнопка авторизации.

Список инструментов сервера (27)

Технические названия из tools/list. Нужны только разработчикам.

bulk_dns_lookupRun DNS lookups for up to 200 domain names per call. Emulated bulk (no native upstream bulk endpoint): the server fans out single DNS lookups concurrently and returns a unified envelope. Each input consumes 1 credit. For larger jobs, split client-side.
bulk_email_verificationRun email verification for up to 10,000 emails per call. Native bulk (uses WhoisXML's Bulk Email Verification API). Each email consumes 1 credit. Returns inline if completes within 20s, otherwise returns a job_id to poll via bulk_job_status / bulk_job_results.
bulk_ip_geolocationRun IP geolocation lookups for up to 200 IP addresses per call. Emulated bulk (no native upstream bulk endpoint exists; the WhoisXML bulk-IP-geo product is CSV-only via web UI). The server fans out single IP geolocation lookups concurrently and returns a unified envelope. Each input consumes 1 credit. For larger jobs, split client-side.
bulk_job_resultsFetch full per-input results for a completed native bulk job (created by bulk_whois or bulk_email_verification). If the job is still in-flight, returns status=running with progress; caller should retry later. Note: per-input order may differ from the original input order — the polling helper uses upstream's order.
bulk_job_statusCheck progress of an in-flight bulk job created by bulk_whois or bulk_email_verification. Returns status (running|completed) and progress counters. Use bulk_job_results once status=completed.
bulk_subdomain_lookupDiscover subdomains for up to 200 domains per call. Emulated bulk (no native upstream bulk endpoint): the server fans out single subdomain lookups concurrently and returns a unified envelope. Reuses the in-memory cache of subdomain_lookup, so re-querying recently-fetched domains is free. Each input consumes 1 credit when uncached.
bulk_whoisRun WHOIS lookups for up to 10,000 domains per call. Native bulk (uses WhoisXML's Bulk WHOIS API). Each domain consumes 1 credit. Returns inline if completes within 20s, otherwise returns a job_id to poll via bulk_job_status / bulk_job_results.
categorizationClassify a URL or domain into IAB content categories, website groups, and content classifications. Returns category labels with confidence scores for content filtering and brand safety.
dns_historyGet historical DNS records for a domain (forward) or find domains associated with an IP (reverse).
dns_lookupPerform DNS record lookups for a domain. Supports A, AAAA, MX, NS, SOA, TXT, CNAME, PTR, SRV, CAA, DS, and DNSKEY record types, or "all" to retrieve every record type at once.
domain_and_subdomain_discoveryFind newly registered domains and subdomains containing search terms, returning registration dates. Supports wildcard (*) patterns for partial matching — without wildcards the search is exact. Multiple terms use AND logic; use separate API calls for OR logic.
domain_infoGet enriched WHOIS registration information for a domain. Combines current WHOIS data with historical records to fill missing or redacted fields. Works for active and expired domains.
email_verificationVerify an email address via syntax check, DNS MX lookup, and SMTP deliverability test. Also detects disposable/temporary addresses, role-based addresses (e.g. info@, noreply@), free email providers, and catch-all domains.
ip_netblocksLook up IP netblocks by IP address, ASN, or organization name. Returns CIDR ranges, ASN number and name, organization info, and registration/update dates for each matching netblock.
ipgeolocationGet location data for IP addresses, domains, or email addresses. Uses caller's IP if no address provided.
reverse_dnsFind DNS records matching search criteria. Returns domains and DNS record values. Multiple search terms are combined with AND logic - results must match ALL terms. Use separate API calls for OR logic. Must use wildcards in the "term" field for partial matches otherwise the search will be exact.
reverse_ipFind all domains sharing the same IP address and connection dates.
reverse_mxFind all services sharing the same MX server and connection dates.
reverse_nsFind all services sharing the same NS nameserver and connection dates.
reverse_whoisFind domains whose WHOIS records contain specific search terms. Supports wildcard searches with * and partial string matching. Multiple terms use AND logic — domains must match ALL terms. Use separate API calls for OR logic.
reverse_whois_advancedFind domains using advanced field-specific search on WHOIS records. Each search term targets a specific WHOIS field (e.g., RegistrantContact.Organization, DomainName, NameServers) with optional exact match and exclude flags. Up to 4 search terms combined with AND logic.
ssl_certificatesRetrieve TLS certificate details for a domain, including issuer, validity period (not-before/not-after), subject alternative names (SANs), and chain trust status. Optionally returns the full certificate chain.
subdomain_lookupDiscover all known subdomains of a domain, including first-seen and last-seen timestamps for each. Can return thousands of subdomains; use pagination to retrieve large result sets.
threat_intelligenceCheck if an IoC (domain, URL, IP, CIDR, or file hash) appears in known malware, phishing, spam, or botnet databases. Returns threat classification, severity, and source feed details.
typosquattingCheck whether a domain is part of a known typosquatting group, or expand all domains across all groups the queried domain belongs to. Use mode="probe" for a fast triage check (returns inGroup boolean + groupId). Use mode="group" for the heavy follow-up that returns every domain across all groups containing this domain — useful for understanding the full lookalike infrastructure.
whoisGet WHOIS data for a domain, returning registrar name, creation/expiry/updated dates, nameservers, domain status codes, and registrant/admin/tech contact info (when not redacted). Supports both WHOIS and RDAP protocols.
whois_historyGet the full timeline of WHOIS changes for a domain, showing ownership transfers, registrar changes, nameserver updates, and contact modifications over time. Supports pagination for domains with many historical records.