Domain MCP

---
name: domain-mcp
category: osint-technical-infrastructure
cost: free
api_key_required: no
repo: https://github.com/rinadelph/domain-mcp
paired_skills: ["seed-discovery-from-domain", "domain-and-whois-research", "ssl-certificate-pivoting", "dns-history-and-passive-dns", "crt-sh-and-certificate-transparency-pivoting"]
capabilities: ["dns-whois", "ssl-certificate", "crt-sh", "domain-recon"]
---

# Domain MCP — WHOIS, DNS, SSL, crt.sh, no API keys

Covers the core domain-pivoting toolkit: RDAP/WHOIS lookups, DNS-over-HTTPS records, SSL certificate parsing, and crt.sh certificate-transparency queries.

## Install

```
npm i -g domain-mcp
```

## Configuration

```json
{
  "mcpServers": {
    "domain": {
      "command": "domain-mcp"
    }
  }
}
```

## What it adds

Claude pulls registration data, resolves DNS records (A, MX, TXT, NS, SPF, DKIM), parses SSL certificates for SANs, and queries crt.sh to enumerate subdomains from certificate transparency logs — all in one tool call. The crt.sh integration is particularly valuable: it finds subdomains that don't appear in DNS brute-force, because they're disclosed in publicly-logged TLS certificates.

## Pairs with skills

- 006 `seed-discovery-from-domain`
- 041 `domain-and-whois-research`
- 043 `ssl-certificate-pivoting`
- 044 `dns-history-and-passive-dns` (partial)
- 442 `crt-sh-and-certificate-transparency-pivoting`

## Cost

Free. No API key required.