Domain Lab

app.domainlabPublished by domainlab.appOfficial publisherv1.1.1Updated Oct 24, 2026

Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.

VerifiedStreamable HTTPWeb executableCloud & Infrastructure Security & Monitoring

Server details

Identifier: app.domainlab/domain-lab
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Oct 14, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to domainlab.app, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/app.domainlab%2Fdomain-lab.svg)](https://sourceweft.com/mcp/app.domainlab%2Fdomain-lab?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Hosted Domain Lab server that lets an assistant check domain expiry, DNS, SSL and email security, and explain what changed.

What you can do: Review your account: overview, digests, domain lists and details, history, events, alerts, AI reviews, registrar connections and inbox.
Explain changes: describe what changed on a domain and list event types.
Manage monitored domains: add, update, remove, rescan, set alerts, request AI reviews, sync registrars and mark inbox items read.
Check any domain, monitored or not: status, email authentication (SPF, DKIM, DMARC), DNS lookup and propagation, SSL, lookalike domains and estimated release dates.
When to use it: Useful when you track domains across several registrars and want to ask in plain language what expires soon, what changed this week, whether alerts fired, or whether SPF and DMARC are configured correctly. Also handy for one-off DNS, SSL and lookalike checks on domains you do not monitor.
Requirements: A remote hosted endpoint; nothing to install. Requires a Domain Lab account and OAuth sign-in with approval on domainlab.app. No API keys or environment variables. Works with assistants that support remote HTTP MCP servers.

Before you install

The connection sees your whole Domain Lab account, limited by your plan. Write tools can add, update, remove, rescan and sync domains, change alert settings and mark inbox items read; remove_domain is destructive and asks for confirmation. Connecting read-only disables the change tools. Domain checks are sent to Domain Lab's service.

Installation

In SourceWeft

Open Domain Lab in the dashboard and add it to a workspace.
Connect the required credentials. They are stored privately and never shown on public pages.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/app.domainlab%2Fdomain-lab/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "domain-lab": {
      "type": "http",
      "url": "https://mcp.domainlab.app/mcp"
    }
  }
}

README

Domain Lab MCP server

Connect Claude, ChatGPT, Copilot and other AI assistants to Domain Lab, so you can ask about your domains in plain English instead of digging through registrar dashboards.

Domain Lab watches domains across every registrar and tells you what changed: expiration dates, DNS records, security certificates, and email security (SPF, DKIM, DMARC).

Server URL: https://mcp.domainlab.app/mcp

This is a hosted (remote) server. There is nothing to install. You sign in to your Domain Lab account and approve the connection; no API keys to copy.

What you can ask

"What expires this month?"
"Did anything change on our client's site this week?"
"Were we actually alerted when the certificate changed?"
"Is our SPF and DMARC set up right?"
"Has my DNS change spread yet?"
"Is anyone registering lookalikes of our domain?"
"When could this expiring domain become available?"

Connect

Claude (Claude.ai, Desktop, mobile): Settings → Connectors → Add custom connector → https://mcp.domainlab.app/mcp, then sign in and approve.

ChatGPT: Settings → Connectors → Advanced → Developer mode on → Create → https://mcp.domainlab.app/mcp, Authentication: OAuth.

Claude Code

VS Code (GitHub Copilot): .vscode/mcp.json

Cursor: ~/.cursor/mcp.json

Gemini CLI

Full setup guide, including Windsurf: https://www.domainlab.app/help/articles/mcp-server

Tools

Your account get_overview, get_digest, list_domains, get_domain, get_domain_history, list_events, explain_change, list_alerts, get_ai_reviews, get_account, list_event_types, get_notification_rules, list_registrar_connections, check_inbox

Changes (ask first; can be turned off by connecting read-only) add_domain, update_domain, remove_domain, rescan_domain, request_ai_review, set_domain_alerts, sync_registrar, mark_inbox_read

Any domain, monitored or not (public information only) check_domain_status, email_auth_check, dns_lookup, dns_propagation_check, ssl_check, find_lookalike_domains, estimate_release_date

Read tools are marked read-only. remove_domain is marked destructive and asks for confirmation.

Security and privacy

Sign-in is OAuth 2.1 with PKCE. You approve each connection on domainlab.app and can disconnect it any time from Preferences → API → Connected AI assistants.
A connection sees only your own account, with the same limits as your plan.
The server reads only what each tool is asked for. It does not see your chat history.
Privacy policy: https://www.domainlab.app/privacy

Support

[email protected]

Source: README.md at commit 07700fa

Tools

This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

v1.1.1LatestOct 14, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts
Declare a license in the repository or the registry entry.