All questions
Q & A Domains · September 3, 2026

Can I use the API from a browser or does it require a backend?

CORS is enabled for calls from browsers only when you use a scoped key configured with an allowed-origin. The default API key format is server-only — do not embed it in JavaScript shipped to end users. For client-side use, generate a scoped key in the dashboard, set its allowed origins, and treat it like a public token.

Read the full guide
DomainScan API + MCP: The Developer Guide
One JSON envelope across every tool. One API key. One MCP server. Everything the platform runs on is the same interface your code and your AI agent can hit — WHOIS, DNS, DMARC, SSL, blacklist, subdomain enumeration. Copy-paste examples in 8 languages, MCP config for Claude Code and Cursor, and the credit model explained in one page.
Related questions
How is the credit model calculated? What is MCP and why does DomainScan ship an MCP server? What is the DomainScan API base URL? What is the rate limit? Which languages have official code examples?