$ man whois-lookup
/whois-lookup
PRICE / CALL
$0.02
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobeCATEGORY
utilities
STATUS
● live
NAME
whois-lookup — looks up whois registration data for a domain via the iana-mandated rdap endpoint for its tld
SYNOPSIS
POST https://x402.agentutility.ai/whois-lookup
Content-Type: application/json
X-PAYMENT: <signed-transferWithAuthorization>
{ ... }↳ first call →
402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.DESCRIPTION
Looks up WHOIS registration data for a domain via the IANA-mandated RDAP endpoint for its TLD. Returns registration date, age in days, expiration date, days-until-expiry, last-changed and transfer dates, registrar (name + IANA id), registrant/admin/tech contacts, nameservers, DNSSEC-signed flag, EPP status codes, and risk flags (newly-registered, expiring-soon, locked). Optionally appends a crt.sh certificate-transparency summary. Use it as a whois API, RDAP domain lookup, domain age check, registrar finder, expiration checker, nameserver inspector, DNSSEC verifier, domain transfer history source, TLD registration record, or brand-protection + phishing triage tool.
INPUT — request schema
| property | type | description | req? |
|---|---|---|---|
| domain | string | Apex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain before query. | required |
| include_certificates | boolean | If true, fetch a crt.sh certificate-transparency summary (issuer counts, first/last seen, total certs). Default false. | optional |
OUTPUT — response shape
| field | type | description |
|---|---|---|
| domain | string | Queried domain name in canonical lowercase form. |
| rdap_server | string | RDAP server URL that answered the lookup for this TLD. |
| registered_date | string | Domain creation timestamp in ISO 8601 format. |
| expiration_date | string | Current registration expiration timestamp in ISO 8601 format. |
| age_days | number | Days elapsed since the domain was first registered. |
| days_until_expiry | number | Days remaining until the current registration expires; negative if already expired. |
| registrar | object | Registrar record with name, IANA ID, and abuse contact email and phone. |
| contacts | object | Registrant, admin, and tech contact roles with any unredacted name, org, email, and country. |
| nameservers | array | Authoritative nameserver hostnames listed on the domain record. |
| dnssec_signed | boolean | True if the domain has a signed DNSSEC delegation at the TLD. |
| statuses | array | EPP status codes on the domain such as clientTransferProhibited or pendingDelete. |
| flags | array | Derived risk flags like newly-registered, expiring-soon, redacted-whois, or pending-transfer. |
| cert_summary | object | Certificate-transparency summary with first-seen date, recent issuers, and active cert count. |
EXAMPLES — two ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.agentutility.ai/whois-lookup \
-H 'Content-Type: application/json' \
-d '{ }'first response =
402 Payment Required with payment requirements; sign + retry with X-PAYMENT.EXAMPLE 2 · mcp
# Install the MCP package for this endpoint's cluster npx -y @agentutility/mcp-<cluster> # Required: EVM private key with USDC on Base export X402_PRIVATE_KEY=0x... # Then call the whois-lookup tool from your MCP-aware agent.
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
- tags
- whoisrdapdomaindnssecurity
- methods
- POST
- cluster
- webprobe
- price
- $0.02 USDC per call
ADJACENT — other endpoints in webprobe
| endpoint | description | price |
|---|---|---|
| archive-snapshot | Finds the closest archived snapshot of a public URL, like a Wayback Machine API. | $0.02 |
| archive-snapshot-api | Finds archived snapshots of public web pages, returning the closest Wayback Machine captures with timestamps, status codes, and replay URLs. | $0.02 |
| archive-url | Looks up the archived copy of a public URL closest to a given timestamp and can fetch cleaned archived page text. | $0.02 |
| brand-domain-check | Checks whether a brand or company domain is established, expiring, registrar-locked, or newly registered, on the same RDAP backend as who… | $0.02 |
| brand-watch-domain-risk | Checks new or suspicious brand-adjacent domains for age, registrar, expiry, DNSSEC, and transfer/lock statuses. | $0.02 |
| creator-domain-check | Checks creator, newsletter, podcast, and community domains for age, expiry, registrar, DNSSEC, and suspicious new-registration flags. | $0.02 |
| dmarc-check | Audits a domain's email authentication posture: DMARC, SPF, and DKIM in one check. | $0.02 |
| dns-lookup | Full DNS lookup over Cloudflare 1.1.1.1 DNS-over-HTTPS. | $0.02 |
SEE ALSO