Name: whois
Price: 0.02 USDC
Availability: InStock

$ man whois

agentutility / web-probe / whois

PRICE / CALL

$0.02

USDC · base mainnet · scheme: exact

METHOD

POST

CLUSTER

webprobe

CATEGORY

utilities

STATUS

● live

NAME

whois — looks up a domain's whois/rdap registration record: age, expiry, registrar, and nameservers

SYNOPSIS

POST https://x402.agentutility.ai/whois
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }

↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.

DESCRIPTION

Looks up a domain's WHOIS/RDAP registration record: age, expiry, registrar, and nameservers. Short alias of whois-lookup; queries the IANA-mandated RDAP endpoint and returns registered_date, age_days, expiration_date, days_until_expiry, last_changed, registrar (name + IANA id), contacts, nameservers, dnssec_signed, EPP statuses, and risk flags, optionally appending a crt.sh certificate-transparency summary. Use it for domain age and domain expiry checks, as a registrar finder, nameserver lookup, DNSSEC check, TLD registration record, or brand-protection triage.

INPUT — request schema

property	type	description	req?
domain	string	Apex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain.	required
include_certificates	boolean	If true, attaches a crt.sh certificate-transparency summary. Default false.	optional

OUTPUT — response shape

field	type	description
domain	string	Queried domain name in canonical form (lowercased, punycode for IDNs).
rdap_server	string	RDAP service URL that answered the query, or the WHOIS host if RDAP was unavailable.
registered_date	string	Domain creation date in ISO 8601 (UTC) as reported by the registry.
expiration_date	string	Domain expiration date in ISO 8601 (UTC) as reported by the registry.
age_days	number	Days elapsed since the registered_date, rounded down.
days_until_expiry	number	Days remaining until expiration_date; negative if already expired.
registrar	object	Registrar record with name, IANA ID, abuse contact email, and URL.
contacts	object	Registrant, admin, and tech contact handles with any fields the registry exposes (often redacted).
nameservers	array	Authoritative nameserver hostnames listed at the registry for the domain.
dnssec_signed	boolean	True if the registry reports a signed delegation (DS records present) for the domain.
statuses	array	EPP status codes from the registry (clientTransferProhibited, serverHold, pendingDelete, etc.).
flags	array	Derived risk flags such as newly_registered, expiring_soon, redacted_contacts, or locked.
cert_summary	object	TLS certificate snapshot for the apex: issuer, notBefore, notAfter, SANs count, days_to_expiry.

EXAMPLES — two ways to call

EXAMPLE 1 · curl

curl -X POST https://x402.agentutility.ai/whois \
  -H 'Content-Type: application/json' \
  -d '{ }'

first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.

EXAMPLE 2 · mcp

# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the whois tool from your MCP-aware agent.

MCP server handles payment automatically — your coding agent just calls the tool by name.

METADATA

tags: whoisrdapdomaindnssecurity
methods: POST
cluster: webprobe
price: $0.02 USDC per call

ADJACENT — other endpoints in webprobe

endpoint	description	price
archive-snapshot	Finds the closest archived snapshot of a public URL, like a Wayback Machine API.	$0.02
archive-snapshot-api	Finds archived snapshots of public web pages, returning the closest Wayback Machine captures with timestamps, status codes, and replay URLs.	$0.02
archive-url	Looks up the archived copy of a public URL closest to a given timestamp and can fetch cleaned archived page text.	$0.02
brand-domain-check	Checks whether a brand or company domain is established, expiring, registrar-locked, or newly registered, on the same RDAP backend as who…	$0.02
brand-watch-domain-risk	Checks new or suspicious brand-adjacent domains for age, registrar, expiry, DNSSEC, and transfer/lock statuses.	$0.02
creator-domain-check	Checks creator, newsletter, podcast, and community domains for age, expiry, registrar, DNSSEC, and suspicious new-registration flags.	$0.02
dmarc-check	Audits a domain's email authentication posture: DMARC, SPF, and DKIM in one check.	$0.02
dns-lookup	Full DNS lookup over Cloudflare 1.1.1.1 DNS-over-HTTPS.	$0.02