# dev.domainee/domainee Custom domains API for SaaS: connect, verify, and manage customer domains, SSL, and DNS - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.2 - **Author:** dev.domainee - **License:** Unknown - **Endpoints:** streamable-http https://mcp.domainee.dev/mcp - **Source:** https://domainee.dev/mcp - **Endpoint health:** reachable (last checked 2026-09-25T07:43:47.874Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 20 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-15T05:23:07.059Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - injection-shaped content (note) in the `tools_http_header_checker` tool: Links to undeclared domain: example.com ## Tools 18 declared. Observed from a live `tools/list` probe. - `tools_ssl_check` — Free public API. Check the TLS certificate of any public hostname. Returns issuer, subject, validity dates, days until expiry, full chain, cipher, protocol, and - `tools_dns_provider_lookup` — Free public API. Identify which DNS provider actually serves a domain, fingerprinted from its public NS records. Returns the record name written the way that pr - `tools_domain_connect_checker` — Free public API. Check whether a domain's DNS provider implements the Domain Connect protocol, read live from the _domainconnect TXT record and the provider's s - `tools_dns_record_lookup` — Free public API. Look up DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA) for any domain. - `tools_whois_lookup` — Free public API. WHOIS / RDAP lookup for a domain — registrar, status, created/updated/expires dates, nameservers. - `tools_cname_lookup` — Free public API. Resolve a hostname's CNAME chain. Useful for debugging custom-domain CNAME setups. - `tools_http_header_checker` — Free public API. Fetch a URL and return its response headers + security grade based on common security headers. - `tools_dns_propagation_checker` — Free public API. Query the same hostname across ~10 public DNS resolvers worldwide and report which ones return the same answer. Useful right after a DNS change - `tools_redirect_checker` — Free public API. Follow a URL's redirect chain and return every hop with status code, response time, final destination. - `tools_spf_record_checker` — Free public API. Look up and validate the SPF record for a domain. Counts void/total DNS lookups, flags syntax issues, validates against RFC 7208's 10-lookup li - `tools_domain_age_checker` — Free public API. Returns a domain's registration date, age in days + years, last-updated date, and expiration. - `tools_subdomain_finder` — Free public API. Enumerate subdomains for a target domain via Certificate Transparency logs + DNS resolution. - `tools_reverse_ip_lookup` — Free public API. Reverse-DNS (PTR) lookup for an IP address. Returns one or more hostnames if configured. - `tools_dmarc_record_checker` — Free public API. Look up the DMARC record at _dmarc., parse policy/alignment/reporting tags, flag missing or too-permissive settings. - `tools_txt_record_lookup` — Free public API. Fetch all TXT records on a domain, classifying each as SPF, DKIM, DMARC, BIMI, verification token, or general. - `tools_website_status_checker` — Free public API. Check if a website is up or down. Returns HTTP status, response time, final URL after redirects, basic SSL info. - `tools_dkim_record_checker` — Free public API. Look up the DKIM record at ._domainkey., parse the public key, flag issues. - `tools_domain_availability_checker` — Free public API. Check availability of a name across one or more TLDs. Pass a `name` (no TLD) and an optional `tlds` array. ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"domainee\": {\n \"type\": \"http\",\n \"url\": \"https://mcp.domainee.dev/mcp\"\n }\n }\n}" ``` ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/dev.domainee%2Fdomainee - Install plan: https://forgeregistry.com/api/v1/packages/dev.domainee%2Fdomainee/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/dev.domainee%2Fdomainee - HTML page: https://forgeregistry.com/registry/dev.domainee%2Fdomainee - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.