io.github.einibaPublished by GitHub account einibav1.1.1Updated Oct 24, 2026
Confidence-scored domain availability checking for AI agents via CanYouGrab.it
Checks domain availability with confidence scores and returns WHOIS registration details and plan usage through the CanYouGrab.it API.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.einiba%2Fcanyougrab/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"canyougrab-it": {
"type": "http",
"url": "https://api.canyougrab.it/mcp"
}
}
}Domain availability lookup API with subscription billing, built on FastAPI + DNS (Unbound resolver).
Live services:
https://api.canyougrab.ithttps://portal.canyougrab.ithttps://auth.canyougrab.it (Auth0 custom domain)Authorization: Bearer cyg_...)Authorization: Bearer cyg_<token>api_keys table (plaintext never stored)cyg_XXXXXXXX...) is stored for display in the portalrevoked_at timestamp, not physically deleted)dev-mqe5tavp6dr62e7uauth.canyougrab.ithttps://api.canyougrab.itDomain availability is checked by querying a dedicated Unbound recursive DNS resolver running on a separate DigitalOcean droplet. The worker sends NS record queries over the VPC private network and interprets the response:
The Unbound resolver caches aggressively (7 days for registered domains, 5 minutes for NXDOMAIN) and queries TLD authoritative servers directly, avoiding public resolver rate limits.
PostgreSQL is used for authentication, usage tracking, and billing — not for domain lookups.
Trigger: Push a git tag matching v* (e.g., v1.0.5)
Pipeline (.github/workflows/deploy.yml):
v* tag pushDEPLOY_HOST secret) using DEPLOY_SSH_KEYgit fetch + git checkout <tag>)/opt/canyougrab-repo/scripts/deploy-host.shTrigger: Push to the dev branch
Pipeline (.github/workflows/deploy-dev.yml):
devDEV_DEPLOY_HOST secret) using same DEPLOY_SSH_KEYdev ref on the server (git fetch + git checkout dev)/opt/canyougrab-repo/scripts/deploy-host.shBoth pipelines use a small inline SSH bootstrap to update /opt/canyougrab-repo to the target ref, then call scripts/deploy-host.sh from that checked-out revision. The repo-managed deploy script handles:
pip install -r requirements.txt for backend dependenciesrsync of backend, portal, and MCP source trees into their runtime directoriesmcp-server package/runtime when the host also runs canyougrab-mcp.serviceIf /mcp is served by the same host as the API, backend-only deploys are not enough. The MCP service must be updated and restarted during the same deploy or the OAuth metadata and live MCP behavior can drift apart.
An existing /opt/deploy.sh can still be kept as a manual compatibility shim if desired, but the automated pipeline should treat the repo copy of scripts/deploy-host.sh as the source of truth.
Requires DNS_RESOLVER_HOST pointing to an Unbound instance (or use 8.8.8.8 for basic testing), plus PostgreSQL and Valkey/Redis (local or tunneled to managed instances).
Or use the configured launch server:
Portal dev server hardcodes API_BASE to https://api.canyougrab.it in portal/docs/src/config.ts. To develop against a local backend, change this to http://localhost:8000.
Because canyougrab.it uses a .it country-code TLD (Italy), all user-facing HTML (portal, docs) must include signals that the content targets English speakers:
<html lang="en"> on every page.<head>:
<link rel="canonical" href="{page_url}" />.This applies to the portal (portal.canyougrab.it), API docs, and any other publicly rendered HTML.
available: null instead of a potentially dangerous false positive. Consumers should treat null as "could not determine."auth0_sub metadata on the Stripe customer object, avoiding a separate mapping table.usage_log_daily) and per-minute (usage_log_minute) usage are recorded for monthly quota and per-minute rate limiting respectively.3abef70). The Zuplo portal/docs framework is still used for the developer portal./mcp is hosted on this server): Serves remote MCP clientsInstall the monitoring stack with: sudo bash scripts/setup-monitoring.sh
All active services on the host must be managed via systemd and restarted during deployments.
All automated deploys should route through scripts/deploy-host.sh, which is responsible for restarting whichever of these services are installed on the host.
Source: README.md at commit 07a9ea8
Check Domain Availability
Use this when the user wants to know whether one or more domains are available to register. Returns confidence, source, cache age, and ambiguous results when the lookup cannot be determined safely.
domainsrequiredCheck API Usage
Use this when the user wants to see their CanYouGrab.it plan, usage, and remaining quota for the current billing period.
Takes no parameters.
Domain Information Lookup
Use this when the user wants WHOIS or registration information about a specific domain — such as who owns it, when it was registered, when it expires, or what nameservers it uses.
domainrequired100% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
┌──────────────────────────────────────────────────────────────────┐│ Developer Portal ││ (Zudoku/React on portal.canyougrab.it) ││ Usage Dashboard · API Keys · Pricing · API Reference (OAS) │└──────────────────┬───────────────────────────────────────────────┘ │ Auth0 JWT (portal) / Bearer API key (API) ▼┌──────────────────────────────────────────────────────────────────┐│ FastAPI Backend (v5.0.0) ││ api.canyougrab.it:8000 ││ ││ ┌─────────────┐ ┌──────────┐ ┌──────────┐ ┌─────────────┐ ││ │ app.py │ │ keys.py │ │billing.py│ │ auth.py │ ││ │ /check/bulk │ │ /keys │ │/billing │ │ API key + │ ││ │ /usage │ │ CRUD │ │/stripe │ │ JWT auth │ ││ │ │ │ rotate │ │ webhook │ │ │ ││ └──────┬──────┘ └──────────┘ └────┬─────┘ └─────────────┘ ││ │ │ │└─────────┼────────────────────────────┼───────────────────────────┘ │ │ ▼ ▼┌─────────────────┐ ┌─────────────────┐│ Valkey (Redis) │ │ Stripe API ││ Job queue + │ │ Subscriptions ││ Rate limiting │ │ Webhooks │└────────┬────────┘ └─────────────────┘ │ ▼┌─────────────────┐ ┌──────────────────────────────┐│ RQ Worker │──DNS──▶ │ Unbound Resolver ││ (worker.py) │ │ (dedicated droplet) ││ ThreadPool(10) │ │ NS queries via VPC ││ via RQ queue │ └──────────────────────────────┘└─────────────────┘ ┌──────────────────────────────┐ ───────────────────▶│ PostgreSQL │ (auth, usage, │ API keys + Usage logs │ billing only) └──────────────────────────────┘zuplo/├── backend/ # Python FastAPI backend│ ├── app.py # Main API: /check/bulk, /usage, /health│ ├── auth.py # API key auth (SHA-256) + Auth0 JWT auth (RS256)│ ├── billing.py # Stripe checkout, portal, webhooks, card-on-file, usage details│ ├── keys.py # API key CRUD: create, list, rotate, revoke (+ Turnstile)│ ├── antifraud.py # Anti-fraud: Turnstile, device fingerprints, risk scoring│ ├── email_utils.py # Email normalization + disposable email detection│ ├── dns_client.py # DNS-based domain availability checking via Unbound│ ├── queries.py # PostgreSQL queries: usage tracking, auth, billing│ ├── valkey_client.py # Redis/Valkey job queue client (RQ-backed)│ ├── rq_tasks.py # RQ task function: process_domain_job()│ ├── worker.py # RQ worker process (ThreadPoolExecutor per job)│ ├── migrations/ # SQL migrations│ │ └── 001_free_tier_antifraud.sql│ └── requirements.txt # Python dependencies├── portal/ # Developer portal (Zuplo + Zudoku)│ ├── config/│ │ ├── routes.oas.json # OpenAPI 3.1 spec (public API documentation)│ │ └── policies.json # Zuplo policies (empty — all routing is direct)│ ├── docs/ # Zudoku documentation portal│ │ ├── src/│ │ │ ├── config.ts # API_BASE, Turnstile site key, Stripe PK│ │ │ ├── UsageDashboard.tsx # Usage + billing dashboard component│ │ │ ├── PricingPage.tsx # Plan selection + Stripe checkout│ │ │ ├── PricingPlans.tsx # Pricing card grid component│ │ │ └── CardSetupPage.tsx # Stripe Elements card-on-file for Free+│ │ ├── public/ # Static assets (logos, banners, CSS overrides)│ │ ├── zudoku.config.tsx # Portal config: theme, nav, Auth0, API key mgmt│ │ └── package.json # Frontend dependencies (React 19, Zudoku)│ ├── package.json # Workspace root (Zuplo v6, TypeScript v5)│ └── README.md # Zuplo boilerplate (not project-specific)├── mcp-server/ # MCP package for ChatGPT, Claude, and remote MCP clients│ ├── pyproject.toml # MCP package metadata + version│ ├── server.json # MCP registry/server metadata│ ├── uv.lock # Locked MCP runtime dependencies│ └── src/canyougrab_mcp/│ ├── __init__.py│ └── server.py # stdio + streamable-http MCP entrypoint├── .github/workflows/│ ├── deploy.yml # Production deploy (on tag push v*)│ └── deploy-dev.yml # Dev deploy (on push to dev branch)├── .claude/│ └── launch.json # Local dev server config (port 9200)└── package.json # Root workspace configClient FastAPI Valkey Worker Unbound │ │ │ │ │ │ POST /api/check/bulk │ │ │ │ │ { domains: [...] } │ │ │ │ │─────────────────────────▶│ │ │ │ │ │── validate key ──────────│ │ │ │ │── check minute rate ────▶│ INCR ratelimit:id:min │ │ │ │── check monthly quota ──▶│ (PostgreSQL) │ │ │ │── record usage ─────────▶│ (PostgreSQL) │ │ │ │── create_job() ─────────▶│ HSET job:{uuid} │ │ │ │ │ RQ enqueue (with retry) │ │ │ │ │ │ │ │ │ │◀── RQ Worker dequeues ───│ │ │ │ │ │ │ │ │ │──── claim_job() ────────▶│ │ │ │ │ │── ThreadPool(10) │ │ │ │ │── check_domain_dns() │ │ │ │── NS query ───────▶│ │ │ │ │◀── NOERROR/NXDOMAIN│ │ │ │◀── complete_job() ───────│ │ │ │ │ │ │ │ │◀─ poll get_job_status() ─│ │ │ │ │ (0.3s interval, 30s │ │ │ │ │ max timeout) │ │ │ │◀─────────────────────────│ │ │ │ │ { results: [...] } │ │ │ │User → Pricing Page → Select Plan → Auth0 login → POST /api/billing/checkout (JWT auth) → Find/create Stripe customer (linked by auth0_sub metadata) → Stripe Checkout Session created → redirect to Stripe → User pays → Stripe fires webhook → POST /api/stripe/webhook (HMAC-SHA256 verified) → checkout.session.completed → fetch subscription → get price ID → Map price to plan → UPDATE api_keys SET plan, lookups_limitgit tag v1.0.5 && git push origin v1.0.5git push origin dev# DNS Resolver (Unbound on dedicated droplet)DNS_RESOLVER_HOSTNAME=unbound.canyougrab.internal # VPC internal hostname (resolved via socket.gethostbyname)DNS_RESOLVER_PORT=53DNS_QUERY_TIMEOUT=5.0 # Per-query timeout in seconds
# PostgreSQL (DigitalOcean Managed Database — auth, usage, billing only)POSTGRES_HOST= # DB cluster hostnamePOSTGRES_PORT=5432POSTGRES_DB=canyougrabPOSTGRES_USER=canyougrabPOSTGRES_PASSWORD= # DB passwordPOSTGRES_SSLMODE=require
# Valkey / Redis (DigitalOcean Managed Database)VALKEY_HOST= # Valkey cluster hostnameVALKEY_PORT=25061VALKEY_USERNAME=defaultVALKEY_PASSWORD= # Valkey password
# Auth0AUTH0_DOMAIN=dev-mqe5tavp6dr62e7u.us.auth0.comAUTH0_AUDIENCE=https://api.canyougrab.it
# StripeSTRIPE_SECRET_KEY= # sk_live_... (prod) or sk_test_... (dev)STRIPE_WEBHOOK_SECRET= # whsec_... (per-environment)STRIPE_PRICE_BASIC= # price_... (live price ID for Basic plan)STRIPE_PRICE_PRO= # price_... (live price ID for Pro plan)STRIPE_PRICE_BUSINESS= # price_... (live price ID for Business plan)
# Cloudflare Turnstile (bot prevention on key creation)TURNSTILE_SECRET_KEY= # 0x4AAAA... (from Cloudflare dashboard)
# PortalPORTAL_URL=https://portal.canyougrab.it
# WorkerBATCH_CONCURRENCY=10 # Thread pool size for domain checksVALKEY_QUEUE_NAME=canyougrab-jobs # RQ queue name (default: canyougrab-jobs)
# Monitoring (optional — only if monitoring stack is installed)SLACK_ALERTS_WEBHOOK_URL= # Slack incoming webhook for AlertmanagerRQ_METRICS_PORT=9122 # Prometheus metrics exporter port
# Auto-scaler (optional — only on API host with autoscaler enabled)DO_API_TOKEN= # DigitalOcean API tokenDO_WORKER_SNAPSHOT_ID= # Snapshot ID for new worker dropletsAUTOSCALER_MIN_WORKERS=1AUTOSCALER_MAX_WORKERS=5AUTOSCALER_SCALE_UP_THRESHOLD=50AUTOSCALER_SCALE_DOWN_IDLE_MINUTES=10cd backendpip install -r requirements.txt
# Start API serveruvicorn app:app --reload --port 8000
# Start worker (separate terminal)python worker.pycd portal/docsnpm installnpm run dev # Starts Zudoku dev server (via zuplo)# From repo rootnpx zuplo dev # Starts on port 9200<link rel="alternate" hreflang="en-US" href="{page_url}" /><link rel="alternate" hreflang="en" href="{page_url}" /><link rel="alternate" hreflang="x-default" href="{page_url}" />