Domain intelligence tools for AI agents
A hosted MCP server that gives Claude, Cursor, VS Code and other MCP clients WHOIS, DNS, SSL, subdomain and email-security lookups. It uses your RapidAPI key; the free plan covers 1,000 calls a month.
https://oti-labs.com/mcp
Connect
Replace YOUR_KEY with your RapidAPI key. Each tool call counts as one API call on your plan.
claude mcp add --transport http domain-intelligence https://oti-labs.com/mcp --header "X-RapidAPI-Key: YOUR_KEY"
// ~/.cursor/mcp.json
{
"mcpServers": {
"domain-intelligence": {
"url": "https://oti-labs.com/mcp",
"headers": { "X-RapidAPI-Key": "YOUR_KEY" }
}
}
}
// .vscode/mcp.json
{
"servers": {
"domain-intelligence": {
"type": "http",
"url": "https://oti-labs.com/mcp",
"headers": { "X-RapidAPI-Key": "${input:rapidapi-key}" }
}
},
"inputs": [
{ "type": "promptString", "id": "rapidapi-key", "description": "RapidAPI key", "password": true }
]
}
// ~/.codeium/windsurf/mcp_config.json
{
"mcpServers": {
"domain-intelligence": {
"serverUrl": "https://oti-labs.com/mcp",
"headers": { "X-RapidAPI-Key": "YOUR_KEY" }
}
}
}
// claude_desktop_config.json (uses mcp-remote)
{
"mcpServers": {
"domain-intelligence": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://oti-labs.com/mcp", "--header", "X-RapidAPI-Key:${RAPIDAPI_KEY}"],
"env": { "RAPIDAPI_KEY": "YOUR_KEY" }
}
}
}
Also listed in the official MCP Registry as com.oti-labs/domain-intelligence. Clients that support Authorization: Bearer can send the key that way instead.
Tools
All read-only. Results are JSON, with long lists trimmed so one big domain doesn't fill the model's context.
domain_lookup
Everything below in one call. Use it to triage a suspicious domain or profile a company.
whois_lookup
Registrar, created, updated and expiry dates, nameservers and status. RDAP first, port-43 WHOIS fallback.
dns_records
A, AAAA, MX, TXT, NS, CAA and SOA records.
ssl_certificate
Live TLS handshake: issuer, validity dates, days until expiry, SANs and signature algorithm.
subdomains
Live hosts with their IPs, every name found (live first) and collapsed infrastructure pools.
email_security
SPF and DMARC records, and DKIM keys found on about 29 common selectors.
Things to ask
Domain age
"How old is example.com and who is the registrar?"
Phishing triage
"Is this domain suspicious? Check its age, SSL issuer and SPF/DMARC."
Attack surface
"List the live subdomains of example.com with their IPs."
Certificate expiry
"When do the SSL certificates for these 10 domains expire?"
Get a key
Subscribe to the free plan on RapidAPI: 1,000 calls a month, no card. PRO is $9.99/mo for 50,000.