Back to Help Center
GETTING STARTED August 21, 2026 · 6 min read

DomainScan MCP Quickstart (Model Context Protocol)

DomainScan's MCP server lets AI assistants like Claude call domain lookups, DNS queries, SSL checks, and email authentication tools directly — no copy-pasting, no switching tabs. Get connected in 5 minutes.

MCP (Model Context Protocol) lets AI assistants call external tools mid-conversation. With the DomainScan MCP server, Claude, Cursor, and other MCP-compatible clients can run domain lookups, DNS queries, SSL checks, blacklist scans, and email authentication analysis — directly, without leaving the conversation.

What You Can Do

Once connected, you can ask your AI assistant things like:

  • “Check if api.example.com has SSL properly configured” → runs SSL check, explains results
  • “Why is email from startup.io going to spam?” → probes SPF, DKIM, DMARC, MX, blacklists in one turn
  • “Who owns competitor-domain.com and when does it expire?” → WHOIS lookup with parsed output
  • “Is this IP address 185.220.101.34 a known threat?” → IP reputation + geolocation + blacklist check
  • “Check DNS propagation for the A record I just changed on staging.example.com” → propagation check from global resolvers

The AI calls the right tools, chains multiple lookups if needed, and explains the results in plain language.

Prerequisites

  • A DomainScan account and API key (get one here)
  • An MCP-compatible AI client (Claude Desktop, Claude Code, Cursor, etc.)
  • Node.js 18+ (for Claude Desktop/Code setup)

Installation

Option 1: npx (No Install)

The fastest way — no global install needed:

npx @domainscan/mcp-server --api-key YOUR_API_KEY

Test it runs correctly before adding to your client config.

Option 2: Global Install

npm install -g @domainscan/mcp-server
domainscan-mcp --api-key YOUR_API_KEY

Option 3: Clone and Run

git clone https://github.com/domainscan/mcp-server
cd mcp-server
npm install
npm start -- --api-key YOUR_API_KEY

Configuration

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "domainscan": {
      "command": "npx",
      "args": ["@domainscan/mcp-server"],
      "env": {
        "DOMAINSCAN_API_KEY": "your_api_key_here"
      }
    }
  }
}

Restart Claude Desktop. You’ll see a hammer icon (🔨) in the input bar — click it to see available DomainScan tools.

Claude Code (CLI)

claude mcp add domainscan \
  --command "npx @domainscan/mcp-server" \
  --env "DOMAINSCAN_API_KEY=your_api_key_here"

Or add to your project’s .claude/settings.json:

{
  "mcpServers": {
    "domainscan": {
      "command": "npx",
      "args": ["@domainscan/mcp-server"],
      "env": {
        "DOMAINSCAN_API_KEY": "your_api_key_here"
      }
    }
  }
}

Cursor IDE

Open Cursor Settings → MCP → Add Server:

{
  "name": "domainscan",
  "command": "npx @domainscan/mcp-server",
  "env": {
    "DOMAINSCAN_API_KEY": "your_api_key_here"
  }
}

Instead of putting your API key directly in config files (which may be committed to git), use an environment variable:

export DOMAINSCAN_API_KEY=your_api_key_here

Then reference it in your config:

{
  "env": {
    "DOMAINSCAN_API_KEY": "${DOMAINSCAN_API_KEY}"
  }
}

Verify the Connection

After configuring, ask your AI assistant:

“Use DomainScan to check if google.com has DMARC configured”

The assistant should call the domainscan_dmarc_check tool, receive the result, and explain it. If it responds from memory without calling a tool, the MCP server isn’t connected.

In Claude Desktop, you can also click the 🔨 icon to see the full list of available tools.

Available Tools

The DomainScan MCP server exposes these tool groups:

Domain Tools

ToolWhat It Does
domainscan_domain_lookupWHOIS/RDAP — ownership, registrar, expiry, age
domainscan_dns_queryDNS records (A, MX, TXT, CNAME, NS, SOA, CAA, SRV, ALL)
domainscan_dns_propagationGlobal propagation status from multiple resolvers
domainscan_nameserversNameserver health, response times, consistency
domainscan_trust_scoreComprehensive domain trust (blacklists + DNS + SSL + email auth)
domainscan_spf_checkSPF record validation and lookup count
domainscan_dmarc_checkDMARC policy, alignment, and reporting config
domainscan_dkim_checkDKIM key presence, strength, DNSSEC
domainscan_ai_seo_checkAI search visibility (llms.txt, robots.txt, structured data)

Network & IP Tools

ToolWhat It Does
domainscan_ip_lookupGeolocation, ISP, ASN, hostname, trust score
domainscan_ip_blacklistIP reputation across 130+ blocklists
domainscan_pingConnectivity and latency test
domainscan_tracerouteNetwork path with per-hop latency
domainscan_reverse_ipDomains hosted on an IP
domainscan_port_scanPort status and associated services
domainscan_subnet_calcSubnet range, broadcast, usable hosts

Security Tools

ToolWhat It Does
domainscan_ssl_infoCertificate details, expiry, trust chain, grade
domainscan_security_headersHTTP security headers analysis and score
domainscan_email_authFull email authentication stack (SPF+DKIM+DMARC+BIMI+MTA-STS)
domainscan_mac_lookupMAC address manufacturer identification

Example: Full Email Deliverability Investigation

Prompt:

“Why is email from newsletter.company.com going to spam? Check everything.”

What happens behind the scenes:

  1. domainscan_email_auth → checks SPF, DKIM, DMARC, BIMI, MTA-STS
  2. domainscan_ip_blacklist → checks the MX server IPs against blacklists
  3. domainscan_trust_score → checks overall domain reputation
  4. Claude synthesizes all results into a plain-English diagnosis with specific fixes

That chain of lookups — which would take 5+ minutes manually — completes in seconds, and the AI explains exactly what to do.

Example: Pre-Launch Domain Checklist

Prompt:

“We’re launching newproduct.io next week. Run a full pre-launch check — DNS, SSL, email auth, blacklists, security headers.”

Result: a structured report covering everything that needs to be in place before launch, with specific issues and remediation steps.

Using Environment Variables in Claude Code

In Claude Code, you can reference the MCP server in .claude/settings.json at your project root. This makes DomainScan available automatically for any domain-related work in that project without a global install:

{
  "mcpServers": {
    "domainscan": {
      "command": "npx",
      "args": ["-y", "@domainscan/mcp-server"],
      "env": {
        "DOMAINSCAN_API_KEY": "your_api_key_here"
      }
    }
  }
}

The -y flag auto-confirms the npx install prompt so it runs non-interactively.

Troubleshooting

Tools not appearing in the AI client

  • Restart the AI client after editing the config
  • Check the config file JSON is valid (no trailing commas)
  • Verify the API key is correct and active

“Tool call failed” errors

  • Check your API key has not expired
  • Verify you have network access to api.domainscan.in
  • Try the npx command directly in terminal to see raw errors

Rate limit errors during multi-tool chains

  • The MCP server handles rate limiting internally with backoff
  • For very intensive use, contact DomainScan about higher-rate API access

For additional help, use Prism AI on the DomainScan website or contact support.

Common Questions

01

What is MCP and why does it matter?

Model Context Protocol (MCP) is an open standard from Anthropic that lets AI assistants call external tools and data sources directly during a conversation. Instead of you running a DNS lookup and pasting the results into the chat, the AI does it automatically in context — then reasons about the results as part of its answer. DomainScan's MCP server exposes all 50+ tools as callable functions.

02

Which AI assistants support MCP?

Claude Desktop, Claude Code (CLI), Cursor IDE, VS Code with Copilot (via MCP extension), Zed editor, and other tools implementing the MCP specification. The list is growing rapidly as MCP adoption expands. Check your AI assistant's documentation for MCP configuration instructions.

03

Do I need a DomainScan API key to use the MCP server?

Yes — the MCP server authenticates your tool calls using a DomainScan API key. Get one from your DomainScan account dashboard → Profile → API Keys. Free tier API access covers basic usage.

04

What's the difference between using Prism AI on the website vs MCP?

Prism AI at domainscan.in/chat is a standalone AI assistant that has built-in access to DomainScan tools. MCP lets your existing AI assistant (Claude, Cursor, etc.) call DomainScan tools without leaving your workflow. Use Prism for ad-hoc investigations; use MCP when you want DomainScan capabilities inside your IDE or existing AI setup.