ScrapeMole Domains

dev.pages.scrapemolePublished by scrapemole.pages.devv1.1.0Updated Oct 24, 2026

Pay-per-call x402 DNS, WHOIS/RDAP, availability, email security, SSL check, CT subdomains.

The publisher's own server: Scrape.ly

Overview

AI-generated overview

A remote MCP server that lets an assistant look up live DNS records, domain registration, availability, email security, SSL certificates and subdomains.

What you can do
Resolve live DNS records over DNS-over-HTTPS, with TTL, response code and DNSSEC status, up to 8 record types per call. Query registry RDAP (modern WHOIS) for registrar, creation and expiry dates, EPP status, nameservers and DNSSEC. Check up to 10 domain names at once for registered, available, likely-available or unknown status. Inspect email security: MX and mail provider, SPF, DMARC, DKIM selectors, MTA-STS, TLS-RPT and BIMI. Check a host's live TLS certificate for trust, expiry and name match. List subdomains seen in public certificate transparency logs, with wildcard flag, first-seen date, expiry and issuer.
When to use it
Useful when naming a product or company and checking which domains are free, auditing a domain's DNS, email anti-spoofing or certificate setup, or mapping a domain's attack surface and asset inventory from public certificate logs.
Requirements
Remote streamable HTTP endpoint; no package, account, API key or header is declared. The server needs outbound access to public DNS, RDAP, certificate transparency and TLS services on your behalf.
Before you install
The registry description says pay-per-call (x402), so calls may incur charges; confirm pricing and payment handling before use. Lookups are sent to third parties including Cloudflare and Google DNS, IANA-bootstrapped registry RDAP servers, crt.sh and Cert Spotter, and target hosts for TLS checks. RDAP results may expose registrant personal data.

Installation

In SourceWeft

  1. Open ScrapeMole Domains in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/dev.pages.scrapemole%2Fdomains/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "scrapemole-domains": {
      "type": "http",
      "url": "https://domains.scrapemole.workers.dev/mcp"
    }
  }
}

Tools

6

dns

ScrapeMole Domains: DNS, WHOIS/RDAP, domain availability, email security, SSL certificates and subdomains for AI agents: DNS lookup

Use when you need the current DNS records of a domain or hostname: resolves the requested record types live over DNS-over-HTTPS (Cloudflare 1.1.1.1 with Google fallback) and returns every answer with TTL, plus the response code (NOERROR/NXDOMAIN) and whether DNSSEC validated. Up to 8 types per call. Paid tool: x402 USDC on Base, $0.001 per successful call; call without payment to receive the PaymentRequired object.

Parametersnamerequiredtype

rdap

ScrapeMole Domains: DNS, WHOIS/RDAP, domain availability, email security, SSL certificates and subdomains for AI agents: WHOIS / RDAP domain registration

Use when you need to know who registered a domain through (registrar), when it was created, when it expires, its EPP status (e.g. clientTransferProhibited), nameservers and DNSSEC: queries the authoritative registry RDAP server (the modern WHOIS) found via the IANA bootstrap. Registrant personal data is never returned. Answers 404 (not charged) when the domain is not registered. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.

Parametersdomainrequired

availability

ScrapeMole Domains: DNS, WHOIS/RDAP, domain availability, email security, SSL certificates and subdomains for AI agents: Domain availability (bulk)

Use when naming a product, company or project and you need to know which domains are free: checks up to 10 domain names in one call against the authoritative registry RDAP servers (DNS delegation as fallback for TLDs without RDAP) and returns registered / available / likely-available / unknown per name, with expiry and registrar for taken ones. Paid tool: x402 USDC on Base, $0.004 per successful call; call without payment to receive the PaymentRequired object.

Parametersdomainsrequired

email_security

ScrapeMole Domains: DNS, WHOIS/RDAP, domain availability, email security, SSL certificates and subdomains for AI agents: Email security audit (SPF, DKIM, DMARC, MTA-STS, BIMI)

Use when you need to check whether a domain is protected against email spoofing or set up for deliverability: reads MX (and guesses the mail provider), SPF (qualifier, lookup count), DMARC (policy, pct, report addresses), DKIM on common selectors, MTA-STS (record and policy mode), TLS-RPT and BIMI, and returns a grade A-F, a score and a list of concrete issues. Paid tool: x402 USDC on Base, $0.003 per successful call; call without payment to receive the PaymentRequired object.

Parametersdomainrequired

ssl

ScrapeMole Domains: DNS, WHOIS/RDAP, domain availability, email security, SSL certificates and subdomains for AI agents: SSL/TLS certificate check

Use when you need to know whether a website or mail server has a valid HTTPS certificate or when it expires: opens a live TLS connection (SNI) to the host and returns whether the chain is publicly trusted (with the exact error, e.g. CERT_HAS_EXPIRED or self-signed), whether the certificate matches the hostname, validity dates and days remaining, subject, issuer, SAN list, key type, TLS protocol, cipher, ALPN and the certificate chain. Answers about the certificate even when it is invalid (that is the point); unreachable hosts are not charged. Hosts served by Cloudflare's own network cannot be probed live from our Workers; for those the response has live:false and shows the newest unexpired certificate logged for the host in Certificate Transparency (trusted:null). Paid tool: x402 USDC on Base, $0.003 per successful call; call without payment to receive the PaymentRequired object.

Parametershostrequiredport

subdomains

ScrapeMole Domains: DNS, WHOIS/RDAP, domain availability, email security, SSL certificates and subdomains for AI agents: Subdomains from Certificate Transparency

Use for attack-surface mapping, asset inventory or competitive research: lists every hostname under a domain that appears in unexpired publicly-logged TLS certificates, deduplicated, with wildcard flag, first-seen date, latest certificate expiry and issuer. Data from crt.sh (Sectigo) with Cert Spotter (SSLMate) as fallback; the response names the source. Only names in public certificates, no DNS brute force. Paid tool: x402 USDC on Base, $0.003 per successful call; call without payment to receive the PaymentRequired object.

Parameterslimitdomainrequired

Version history

1
  1. v1.1.0LatestOct 11, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Scrape integrations