Skip to content
clusters: prooflayer · edgemarket · edgefinance · synthforge · mediakit · wordmint · webprobe · locale · comppoint · rollforge · bestiary · statline · matchpoint · retail · agentops · browserworkflow · modelrouter · compose
$ man whois-lookup

/whois-lookup

agentutility / web-probe / whois-lookup
PRICE / CALL
$0.02
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobe
CATEGORY
utilities
STATUS
live
NAME
whois-lookup looks up whois registration data for a domain via the iana-mandated rdap endpoint for its tld
SYNOPSIS
POST https://x402.agentutility.ai/whois-lookup
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }
↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.
DESCRIPTION

Looks up WHOIS registration data for a domain via the IANA-mandated RDAP endpoint for its TLD. Returns registration date, age in days, expiration date, days-until-expiry, last-changed and transfer dates, registrar (name + IANA id), registrant/admin/tech contacts, nameservers, DNSSEC-signed flag, EPP status codes, and risk flags (newly-registered, expiring-soon, locked). Optionally appends a crt.sh certificate-transparency summary. Use it as a whois API, RDAP domain lookup, domain age check, registrar finder, expiration checker, nameserver inspector, DNSSEC verifier, domain transfer history source, TLD registration record, or brand-protection + phishing triage tool.

INPUTrequest schema
propertytypedescriptionreq?
domainstringApex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain before query.required
include_certificatesbooleanIf true, fetch a crt.sh certificate-transparency summary (issuer counts, first/last seen, total certs). Default false.optional
OUTPUTresponse shape
fieldtypedescription
domainstringQueried domain name in canonical lowercase form.
rdap_serverstringRDAP server URL that answered the lookup for this TLD.
registered_datestringDomain creation timestamp in ISO 8601 format.
expiration_datestringCurrent registration expiration timestamp in ISO 8601 format.
age_daysnumberDays elapsed since the domain was first registered.
days_until_expirynumberDays remaining until the current registration expires; negative if already expired.
registrarobjectRegistrar record with name, IANA ID, and abuse contact email and phone.
contactsobjectRegistrant, admin, and tech contact roles with any unredacted name, org, email, and country.
nameserversarrayAuthoritative nameserver hostnames listed on the domain record.
dnssec_signedbooleanTrue if the domain has a signed DNSSEC delegation at the TLD.
statusesarrayEPP status codes on the domain such as clientTransferProhibited or pendingDelete.
flagsarrayDerived risk flags like newly-registered, expiring-soon, redacted-whois, or pending-transfer.
cert_summaryobjectCertificate-transparency summary with first-seen date, recent issuers, and active cert count.
EXAMPLEStwo ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.agentutility.ai/whois-lookup \
  -H 'Content-Type: application/json' \
  -d '{ }'
first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.
EXAMPLE 2 · mcp
# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the whois-lookup tool from your MCP-aware agent.
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
tags
whoisrdapdomaindnssecurity
methods
POST
cluster
webprobe
price
$0.02 USDC per call
ADJACENTother endpoints in webprobe
endpointdescriptionprice
archive-snapshotFinds the closest archived snapshot of a public URL, like a Wayback Machine API.$0.02
archive-snapshot-apiFinds archived snapshots of public web pages, returning the closest Wayback Machine captures with timestamps, status codes, and replay URLs.$0.02
archive-urlLooks up the archived copy of a public URL closest to a given timestamp and can fetch cleaned archived page text.$0.02
brand-domain-checkChecks whether a brand or company domain is established, expiring, registrar-locked, or newly registered, on the same RDAP backend as who…$0.02
brand-watch-domain-riskChecks new or suspicious brand-adjacent domains for age, registrar, expiry, DNSSEC, and transfer/lock statuses.$0.02
creator-domain-checkChecks creator, newsletter, podcast, and community domains for age, expiry, registrar, DNSSEC, and suspicious new-registration flags.$0.02
dmarc-checkAudits a domain's email authentication posture: DMARC, SPF, and DKIM in one check.$0.02
dns-lookupFull DNS lookup over Cloudflare 1.1.1.1 DNS-over-HTTPS.$0.02
SEE ALSO
agentutility · webprobe · x402 · mcp · llms.txt · registry.json · bazaar.x402.org