Skip to content
DomainTools Technical Documentation

Connect your AI client to DomainTools threat intelligence with the MCP Server

← All updates ·

Added

The DomainTools MCP Server enables LLM applications to access domain threat intelligence through the Model Context Protocol. DomainTools hosts the server. Connect using your own MCP-compatible client such as Claude Code CLI, VS Code with GitHub Copilot, Cline, or Gemini CLI.

The server provides 15 tools across three product areas:

  • Iris Investigate: Domain lookups, risk scoring, and pivot searches across shared infrastructure, registration, and web properties
  • Farsight DNSDB: Forward and inverse passive DNS lookups with pattern-based search
  • Domain History: Timestamped registration, infrastructure, and website change records

For an investigation walkthrough and SOC integration use cases, see the announcement blog post.

Documentation

Categories: AI, MCP Server