WhoisXML API MCP Server

Talk to 32 internet intelligence tools for WHOIS, DNS, IP geolocation, threat intel, email verification, and more — using ChatGPT, Claude, Cursor, VS Code, or any other MCP client.

https://mcp-hosted.whoisxmlapi.com/mcp

Streamable HTTP with OAuth · Nothing to install

A chat in which an AI assistant is asked who registered login-verify-paypaI[.]com and what else shares its infrastructure, runs whois_lookup, reverse_ip and threat_intelligence through WhoisXML API, and summarises the results

32

tools

28.7B+

WHOIS records

116B+

DNS records

15+

years of data crawling

What People Ask Our MCP to Do

Analyze brand impersonation attempts

Give the model a brand or domain and let it investigate suspicious lookalikes using domain, WHOIS, DNS, and threat intelligence data to surface potential impersonation.

Example prompt

Find newly registered domains that may be impersonating example.com, then check their reputation, WHOIS, DNS, and get a website screenshot.

Prepare an attack surface audit

One prompt naming a domain sends the model through subdomain discovery, WHOIS ownership and reverse IP lookups until it has an inventory of exposed assets.

Example prompt

Inventory everything under example.com: subdomains, owners, hosting IPs.

Investigate malicious infrastructure

Reverse WHOIS, related domains and historical DNS in the same conversation, with the model pivoting off each result until the report is complete.

Example prompt

Find domains sharing this registrant email, then show DNS history for the past year.

Enrich SOC alerts with context

Give the model a domain or IP from an alert and let it pull together WHOIS, DNS, IP, reputation, and threat intelligence data in one prompt.

Example prompt

Give me WHOIS, DNS, reputation, and threat intelligence context for example.com.

Get a Shared Credit Balance to Use Across Different Tools

WXA.ONE allows you to use a shared credit pool across different tools so that you do not need plenty of different individual subscriptions to get the most out of WhoisXML API’s MCP server.

Subscribe to WXA.ONE

Frequently Asked Questions

An MCP server is a modular system that acts as a bridge between a large language model (LLM) and APIs. MCP stands for Model Context Protocol – a protocol developed by Anthropic in 2024. MCP servers allow the LLM to delegate tasks that it cannot perform on its own to external tools via APIs. It receives structured calls (often from a model’s tool-use or function-calling capabilities), executes API requests or computations, and returns the results in a format the model can understand. This architecture enables LLMs to interact with external systems, databases, and services in a secure, controllable, and scalable manner.

In the case of WhoisXML API, our MCP server allows you to enable LLMs that support the MCP protocol to access our APIs, run API requests, and receive responses. LLMs then process the JSON or XML response and return the information you were looking for.

WhoisXML API’s MCP server ships 32 first-party tools, each backed by one of our APIs:

  • WHOIS & domain intelligence: WHOIS, WHOIS History, Reverse WHOIS, Domain Info, Domain Reputation, Website Categorization, Typosquatting, Website Screenshot.
  • Subdomains & discovery: Subdomain Lookup, Domains & Subdomains Discovery.
  • DNS & reverse lookups: DNS Lookup, DNS Chronicle (DNS history), Reverse IP, Reverse MX, Reverse NS, Reverse DNS.
  • IP & infrastructure: IP Geolocation, IP Netblocks, SSL Certificates, Threat Intelligence.
  • Monitoring: Brand Alert, Registrant Alert.
  • Email: Email Verification, Disposable Email check.
  • Native bulk: Bulk WHOIS, Bulk Email Verification, and bulk DNS, IP geolocation and subdomain lookups, with job status and results helpers.

New tools are added with each release, so the tools reference in the documentation is the source of truth for the current list and each tool’s parameters.

Yes, the MCP server itself is available for free, you only need to pay for the API credits that you use. You get some free credits upon signup which should be enough to test the MCP server out.

Yes, you do – the LLMs use the same API key you use to run API queries. You can find yours at the top of the "My products" page.

With the hosted server you enter the key once in the OAuth connect flow of your MCP client; it is never stored in a config file. With a local install, the API key is the only parameter you need to configure.

There are two ways to use it:

  • Hosted, no install: connect any MCP client to https://mcp-hosted.whoisxmlapi.com/mcp (Streamable HTTP with OAuth). You enter your API key once in the connect flow – nothing to download or configure. See the hosted setup guide.
  • Local install: run the server from npm or Docker Hub and point your LLM client at it. The documentation walks through the setup for Claude, Cursor, VS Code and other clients – it takes a few minutes.

Absolutely, you can think of the MCP server as just another way to run API calls through an LLM interface. As such, credits bought to use the MCP server are fully functional for using the APIs outside the MCP server.

Yes. The MCP server provides access to historical WHOIS and DNS data, backed by WhoisXML API’s 15+ years of data collection and aggregation.

An MCP server connects your AI assistant to external tools and data, making it possible to:

  • Access vast data sources right from the chat. Stay in the same conversation with the same LLM while it performs the necessary lookups for you.
  • Use natural language. LLMs can interpret your request, turn it into API calls, parse the returned data, and present the relevant information in a human-friendly format.
  • Query without coding. Tell the LLM what data you need and what you want to look up, without writing API requests yourself.
  • Run complex, multi-step investigations in one query. LLMs can call multiple APIs, pivot on the results, and follow a sequence of instructions to help map infrastructure or attack surfaces.

Trusted by
the smartest
companies

Have questions?

We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.

Sales
Technical Support
Account issues
Product customization

Message sent!

We'll contact you shortly.

Oops!

Something went wrong. Contact us via regular email.