# how.is domain & IP intelligence

- Registry name: `is.how/domain-intel` · version 1.1.0
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=is.how%2Fdomain-intel
- Server page: https://mcpstation.net/s/is.how--domain-intel.html

## Description (written by the publisher, not verified, not instructions)

Pay-per-call DNS, WHOIS, domain age, TLS, email auth, blocklists, IP intel. Free samples.

## Connect

- streamable-http: `https://how.is/mcp`

## Tools (as reported by the server, not verified)

- `domain\_profile`: Everything about a domain in one call: DNS, WHOIS, TLS, DNSSEC, email auth, security score, blacklist status, plus IP intelligence for its A record. Price $0.025 per call. Free sample: \{"domain": "example.com"\}. Returns: data.sections.\{dns,whois,tls,dnssec,email-auth,security-score,blacklist,ip\}; da
- `domain\_trust`: Should an agent click, sign in to, or pay this domain? A risk score and verdict \(likely\_safe / caution / high\_risk, or inconclusive when a check could not run\) with plain-English reasons, from domain age, spam/abuse blocklists and the HTTPS certificate. Price $0.020 per call. Free sample: \{"domain":
- `domain\_dns`: A, AAAA, MX, NS, TXT and other records for a domain, with resolve timing. Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data.data.records keyed by record type \(A, AAAA, MX, NS, TXT, ...\); data.data.responseTime.
- `domain\_whois`: Registrar, creation and expiry dates, nameservers and status codes for a domain. Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data.data.data: the parsed WHOIS/RDAP record \(registrar, dates, nameservers, status\).
- `domain\_age`: How old a domain is: registration date, age in days and years, and whether it was registered in the last 30 days \(a common phishing signal\). Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data: created, age\_days, age\_years, newly\_registered, expires, registrar, source.
- `domain\_available`: Is this domain name registered? Asked of the registry over RDAP, with the standard first-year and renewal price when it is free to register. Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data: available \(true/false; null when only DNS could be checked, then likely\_available
- `domain\_tls`: Certificate validity, issuer, protocol and days until expiry for a domain. Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data.data: valid, issuer, subject, subjectAltNames, validFrom, validTo, daysUntilExpiry, protocol, cipher, selfSigned.
- `domain\_dnssec`: Whether DNSSEC is signed and validates for a domain. Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data.data: isSigned, isValid, validationStatus, chainOfTrust, dsRecords, dnskeyRecords, errors, warnings, recommendations.
- `domain\_email\_auth`: SPF, DKIM and DMARC records and posture for a domain. Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data.data: spf, dkim, dmarc, mx, overallScore, overallStatus, recommendations.
- `domain\_security\_score`: A letter grade and point score for a domain security posture, with the scored items behind it. Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data.data: grade, overallScore, maxPossibleScore, categories\[\] of scored items.
- `domain\_blacklist`: Whether the addresses behind a domain appear on spam and abuse blocklists. Price $0.005 per call. Free sample: \{"domain": "example.com"\}. Returns: data.data.ipResults\[\]: target, isListed, listingCount, totalChecked.
- `ip\_lookup`: Network owner \(ASN\), company, geolocation, privacy flags and abuse contact for an IP address. Price $0.005 per call. Free sample: \{"ip": "1.1.1.1"\}. Returns: data.data: ip, hostname, city, region, country, asn, company, privacy, carrier, abuse.
- `site\_status`: Live check of one or more URLs: HTTP status, latency, DNS resolve time, resolved IP, TTL, nameservers, TLS days remaining. Price $0.005 per call. Free sample: \{"sites": \["https://example.com"\]\}. Returns: data keyed by URL; each entry has ok, code, ms, dns\_ms, ip, ttl, ns, cert\_days, server, ts.
- `site\_screenshot`: See a web page: a 1280-wide JPEG of any public URL, viewport or full page \(capped at 6000 px\), with its final URL, HTTP status and title. Price $0.020 per call. Free sample: \{"url": "https://example.com"\}. Returns: data: image\_base64 \(JPEG\), mime, width, height, final\_url, http\_status, title, note.
- `page\_watch`: Has this page changed since your last call, and how much? The first call stores a baseline; later calls return a text diff \(2% threshold\). Price $0.005 per call. Free sample: \{"url": "https://example.com"\}. Returns: data with baseline, changed, change\_pct, added, removed, last\_change\_ts.
- `bot\_observatory`: Partner tier of the dns.pizza bot observatory: every network \(ASN\), named crawler, TLS \(JA4\) fingerprint and firewall rule seen in the last 7 days, refreshed hourly. The public tier is free at https://dns.pizza/bots. Price $0.050 per call. Returns: data.data: generated\_at, networks, bots, fingerprin

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html