← Back to search

io.github.cyanheads/whois-mcp-server

cyanheads Scanned 1d ago

Domain registration, availability, DNS records, and IP/ASN resolution via RDAP and DNS-over-HTTPS.

B
83.2 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

whois_get_dossier
annotations: verified low

One-call domain triage: fetches registration record (RDAP) and DNS records (A, MX, NS, TXT) in

input object domain string output object registrar string expiry_date string created_date string
readOnlyHint true openWorldHint true idempotentHint true
whois_lookup_asn
annotations: verified low

Resolve an Autonomous System Number (ASN) to its org name, country, and RIR source via RIR RDAP.

asn string type string input object handle string output object org_name string end_autnum number start_autnum number
readOnlyHint true openWorldHint true idempotentHint true
whois_lookup_ip
annotations: verified low

Look up an IP address or CIDR block via RIR RDAP (ARIN, RIPE, APNIC, LACNIC, AFRINIC — auto-routed

ip string type string input object handle string output object org_name string ip_version string abuse_email string end_address string start_address string
readOnlyHint true openWorldHint true idempotentHint true
whois_check_availability
annotations: verified low

Check RDAP registry record status: registered, not_found, or unknown when coverage is absent.

input object domain string output object registrar string expiry_date string rdap_coverage boolean
readOnlyHint true openWorldHint true idempotentHint true
whois_get_dns
annotations: verified low

Fetch DNS records for a domain via DNS-over-HTTPS. Supports A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, PTR.

ttl number data string type enum input object domain string output object
readOnlyHint true openWorldHint true idempotentHint true
whois_lookup_domain
annotations: verified low

Look up a domain's registration record — registrar, created/expiry dates, nameservers, EPP status codes,

input object output object
readOnlyHint true openWorldHint true idempotentHint true

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 24

info
Tool 'whois_get_dossier' annotations are consistent annotation_checker · 80%
info
Tool 'whois_lookup_asn' annotations are consistent annotation_checker · 80%
info
Tool 'whois_lookup_ip' annotations are consistent annotation_checker · 80%
info
Tool 'whois_check_availability' annotations are consistent annotation_checker · 80%
info
Tool 'whois_get_dns' annotations are consistent annotation_checker · 80%
info
Tool 'whois_lookup_domain' annotations are consistent annotation_checker · 80%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: whois_get_dossier manifest_parser · 75%
info
Tool: whois_lookup_asn manifest_parser · 75%
info
Tool: whois_lookup_ip manifest_parser · 75%
info
Tool: whois_check_availability manifest_parser · 75%
info
Tool: whois_get_dns manifest_parser · 75%
info
Tool: whois_lookup_domain manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 12 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-whois-mcp-server-bea1003/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%