🌐 Domain Intelligence MCP Server — WHOIS, DNS, SSL & Subdomain Recon for AI Agents

MCP (Model Context Protocol) server that surfaces domain-infrastructure intelligence — WHOIS / RDAP, DNS records (A, AAAA, MX, NS, TXT, CAA), SSL certificate chains, subdomain enumeration, and basic port intel — to any MCP-compatible AI agent (Claude Desktop, Cursor, Cline). Built as a drop-in alternative to DomainTools API, SecurityTrails, Censys, and Shodan for AI-agent-friendly domain recon at pay-per-event pricing.

Why Domain Intelligence MCP Beats DomainTools, SecurityTrails, Censys & Generic LLMs

Feature	NexGenData Domain Intel MCP	DomainTools API	SecurityTrails	Censys	Generic LLM (no tools)
Cost	$0.002 / event, pay-per-event	$99+ / month base	$50+ / month base	$99+ / month base	Free (stale, hallucinated)
MCP-native	Yes — Claude / Cursor / Cline	No	No	No	No tools
WHOIS / RDAP	Yes (post-GDPR aware)	Yes	Yes	No	Hallucinated
DNS records (all types)	Yes	Yes	Yes	Limited	None
SSL certificate chain	Yes	Plan-gated	Plan-gated	Yes	None
Subdomain enumeration	Yes	Plan-gated	Yes	Yes	None
AI-agent integration	Native MCP — any client	Build it yourself	Build it yourself	Build it yourself	N/A
Auth	Apify token	License + plan	API key + plan	API key + plan	None
Monthly minimum	None	$99+	$50+	$99+	None

Most security / DevOps teams pick this MCP server because it is cheaper than DomainTools / SecurityTrails / Censys for ad-hoc agent traffic, the only MCP-native alternative to stitching WHOIS + DNS + SSL + subdomain tooling into a custom agent stack, and ships verified infra data that base Claude / GPT-4 simply cannot fetch. A security agent answers "is example.com using Cloudflare, what's its cert chain, and what subdomains exist?" with one tool flow instead of four separate logins.

Tools Exposed via MCP

• whois_lookup — registrar, dates, name servers, status codes (RDAP + WHOIS fallback)
• dns_records — A / AAAA / MX / NS / TXT / CAA / SOA records for any domain
• ssl_cert_chain — full leaf + intermediate + root cert details (issuer, SANs, validity)
• enumerate_subdomains — passive subdomain discovery from CT logs + public sources
• dns_propagation_check — query the same record across N global resolvers
• port_check — which common ports respond (80, 443, 22, 25, plus configurable list)

Use Cases

• Security / SOC agents — instant domain triage during incident response
• Brand protection — typo-squat sweep across a watch list weekly
• DevOps audits — verify DNS / SSL hygiene across a fleet of properties
• M&A due diligence — full infra map of a target company's domain estate
• Phishing investigation — cross-check sender domain against SPF / DKIM / DMARC
• Compliance — DNSSEC + CAA + SPF coverage audit across regulated subdomains
• Migration planning — pre-cutover DNS propagation watch across regions

Connect to Claude Desktop

{
  "mcpServers": {
    "nexgendata-domain": {
      "url": "https://nexgendata--domain-intelligence-mcp-server.apify.actor/mcp",
      "headers": { "Authorization": "Bearer YOUR_APIFY_TOKEN" }
    }
  }
}

Quick Start (Python)

from apify_client import ApifyClient
client = ApifyClient("YOUR_APIFY_TOKEN")
run = client.actor("nexgendata/domain-intelligence-mcp-server").call(run_input={
    "tool": "whois_lookup",
    "params": {"domain": "anthropic.com"}
})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

Pricing — Pay Per Tool Call

• Actor start: $0.0001
• Tool call: $0.0020

A daily 200-domain audit = $0.40/day. No monthly minimum.

Related NexGenData MCP Servers & Domain / Infra Actors

Use case	Actor
Web-scraping MCP (any URL)	web-scraping-mcp-server
SEO web analysis MCP (Lighthouse + tech stack)	seo-web-analysis-mcp-server
Developer tools MCP	developer-tools-mcp-server
News MCP (security headlines)	news-mcp-server
26-server gateway (domain + 25 more)	enterprise-mcp-gateway
Premium B2B data MCP (company enrichment)	premium-data-mcp-server
WHOIS replacement (RDAP-powered)	whois-replacement
DNS records lookup	dns-records-lookup
DNS propagation checker	dns-propagation-checker
DMARC / SPF / DKIM bulk auditor	dmarc-bulk-auditor
IP geolocation replacement	ip-geolocation-replacement
Wappalyzer / BuiltWith replacement	wappalyzer-replacement

FAQ

Q: Is RDAP supported? A: Yes — RDAP (RFC 7480-7484) is the primary path, with legacy port-43 WHOIS as automatic fallback for long-tail ccTLDs.

Q: How fresh is DNS data? A: Each tool call queries authoritative or recursive resolvers live — no stale caching.

Q: Does subdomain enumeration use brute force? A: No — we use passive sources (Certificate Transparency logs, public records). No noisy DNS brute force.

Q: Can my agent receive alerts on domain changes? A: Pair this MCP with an Apify schedule + webhook for periodic re-runs and dataset diff alerts.

Q: Does it support DNS over HTTPS (DoH)? A: Internal resolution can run via DoH where available; output schema is identical.

Q: Is bulk querying rate-limited? A: Apify proxy rotation absorbs upstream limits. Parallelize for >5k domain batches.

---

How NexGenData Pricing Works

Every NexGenData actor uses pay-per-event pricing — you only pay for results that actually land in your dataset. No monthly minimum, no seat fees, no surprise overage bills.

• Actor Start: a single-event charge each time you spin the actor up (scaled to memory size)
• Result / tool call: charged per item written to the default dataset or per MCP tool call
• No charge for retries, internal proxy rotation, or failed sub-requests — those are absorbed by the platform

Apify Platform Bonus

New to Apify? Sign up with the NexGenData referral link — you get free platform credits on signup (enough for several thousand free results) and you help fund the maintenance of this actor fleet.

Integration Surface

Every actor in the NexGenData catalog can be triggered from:

• Apify console — point-and-click run
• Apify API — REST + webhooks
• Apify Python / JS SDKs — programmatic batch
• Zapier, Make.com, n8n — official integrations
• MCP — many actors are exposed as MCP tools for Claude / ChatGPT / Cursor agents
• Schedules — built-in cron for daily / weekly / monthly runs
• Webhooks — POST results to any HTTPS endpoint on dataset write

Support

NexGenData maintains 260+ Apify actors and ships updates regularly. Bug reports via the Apify console issues tab get a response within 24 hours. Roadmap requests are welcome — high-demand features ship in the next version.

Home: thenextgennexus.com Full catalog: apify.com/nexgendata