dev.domainee/domainee

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Custom domains API for SaaS: connect, verify, and manage customer domains, SSL, and DNS

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "domainee": {
      "url": "https://mcp.domainee.dev/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (18)

• tools_ssl_check read-only

  Free public API. Check the TLS certificate of any public hostname. Returns issuer, subject, validity dates, days until expiry, full chain, cipher, protocol, and SAN list. No Bearer required.

  Parameters:

  • host (required) — string — Hostname to check. Optionally with port, e.g. example.com:443.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_dns_provider_lookup read-only

  Free public API. Identify which DNS provider actually serves a domain, fingerprinted from its public NS records. Returns the record name written the way that provider's form expects it (providers disagree about whether the apex is '@', blank, or the full domain, and getting it wrong is the most common way a correct record lands in the wrong place), whether the provider can point a zone apex at a hostname, where its record editor lives, and the provider-specific settings that silently break custom domain setups. Use this before telling someone what DNS record to add. No Bearer required.

  Parameters:

  • domain (required) — string — Domain or hostname. Subdomains are walked up to the zone holding the NS records.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_domain_connect_checker read-only

  Free public API. Check whether a domain's DNS provider implements the Domain Connect protocol, read live from the _domainconnect TXT record and the provider's settings endpoint. Reports the provider and whether it offers the synchronous flow (a signed redirect with no token exchanged, the one that works in practice) or only the asynchronous OAuth flow. Note that provider support is necessary but not sufficient for one-click setup: the service being connected must also have a template the provider has synced and enabled, which many providers do only after a per-service onboarding. No Bearer required.

  Parameters:

  • domain (required) — string — Domain to check, e.g. example.com.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_dns_record_lookup read-only

  Free public API. Look up DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA) for any domain.

  Parameters:

  • domain (required) — string — Domain to query, e.g. example.com.
  • type — string — Restrict to one record type. Default: all common types.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_whois_lookup read-only

  Free public API. WHOIS / RDAP lookup for a domain — registrar, status, created/updated/expires dates, nameservers.

  Parameters:

  • domain (required) — string — Domain to look up.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_cname_lookup read-only

  Free public API. Resolve a hostname's CNAME chain. Useful for debugging custom-domain CNAME setups.

  Parameters:

  • host (required) — string — Hostname to resolve, e.g. www.example.com.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_http_header_checker read-only

  Free public API. Fetch a URL and return its response headers + security grade based on common security headers.

  Parameters:

  • url (required) — string — Full URL with scheme, e.g. https://example.com.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_dns_propagation_checker read-only

  Free public API. Query the same hostname across ~10 public DNS resolvers worldwide and report which ones return the same answer. Useful right after a DNS change.

  Parameters:

  • host (required) — string — Hostname to check.
  • type — string — Record type. Default: A.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_redirect_checker read-only

  Free public API. Follow a URL's redirect chain and return every hop with status code, response time, final destination.

  Parameters:

  • url (required) — string — Starting URL.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_spf_record_checker read-only

  Free public API. Look up and validate the SPF record for a domain. Counts void/total DNS lookups, flags syntax issues, validates against RFC 7208's 10-lookup limit.

  Parameters:

  • domain (required) — string — Domain to check SPF for.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_domain_age_checker read-only

  Free public API. Returns a domain's registration date, age in days + years, last-updated date, and expiration.

  Parameters:

  • domain (required) — string — Domain to check.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_subdomain_finder read-only

  Free public API. Enumerate subdomains for a target domain via Certificate Transparency logs + DNS resolution.

  Parameters:

  • domain (required) — string — Apex domain to enumerate.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_reverse_ip_lookup read-only

  Free public API. Reverse-DNS (PTR) lookup for an IP address. Returns one or more hostnames if configured.

  Parameters:

  • ip (required) — string — IPv4 or IPv6 address, e.g. 8.8.8.8.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_dmarc_record_checker read-only

  Free public API. Look up the DMARC record at _dmarc.<domain>, parse policy/alignment/reporting tags, flag missing or too-permissive settings.

  Parameters:

  • domain (required) — string — Domain to check DMARC for.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_txt_record_lookup read-only

  Free public API. Fetch all TXT records on a domain, classifying each as SPF, DKIM, DMARC, BIMI, verification token, or general.

  Parameters:

  • domain (required) — string — Domain to fetch TXT records for.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_website_status_checker read-only

  Free public API. Check if a website is up or down. Returns HTTP status, response time, final URL after redirects, basic SSL info.

  Parameters:

  • url (required) — string — URL to check (include scheme).

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_dkim_record_checker read-only

  Free public API. Look up the DKIM record at <selector>._domainkey.<domain>, parse the public key, flag issues.

  Parameters:

  • domain (required) — string — Domain to check DKIM for.
  • selector (required) — string — DKIM selector — `google`, `k1`, `mxvault`, `s1`, etc.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• tools_domain_availability_checker read-only

  Free public API. Check availability of a name across one or more TLDs. Pass a `name` (no TLD) and an optional `tlds` array.

  Parameters:

  • name (required) — string — Bare name without TLD, e.g. `mybrand`.
  • tlds — array — Optional list of TLDs to check, e.g. ['com', 'io', 'dev']. Default: a standard SaaS set.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.