Look up domain reputation snapshots and AI crawler policy from Domduck's public store.
MCPpedia last refreshed this data
io.github.CloudCorpRecords/domaintrack is an MCP server that look up domain reputation snapshots and AI crawler policy from Domduck's public store. Its tool list has not been published yet over stdio and http, requires no API key, and scores 59/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"domaintrack": {
"args": [
"-y",
"@reneturcios/domaintrack",
"mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Look up domain reputation snapshots and AI crawler policy from Domduck's public store.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y '@reneturcios/domaintrack' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked @reneturcios/domaintrack against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in browser
Open-source web scraper for AI agents with scrape, crawl, and map tools
Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
MCP Security Weekly
Get CVE alerts and security updates for io.github.CloudCorpRecords/domaintrack and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
domaintrack looks up what is publicly known about a domain: its reputation snapshot, the AI crawler policy its robots.txt sets, and the list of data sources those answers are built from.
It is a forwarding client, not a data store. The answers live in Domduck's public store and are served by its keyless public endpoint; this package carries the endpoint's three-tool surface, serves the tool list locally, and forwards each call upstream, returning the upstream answer exactly as it arrives. There is no account and no API key: the public endpoint is the whole surface. Domduck's authenticated endpoint, with its dated history series, is separate and is not touched here — this client sends no credentials of any kind.
One behaviour is worth knowing before you automate against
it: asking about a domain nobody has looked up yet is not an
error. The snapshot comes back with hasReading set to
false, which is the store honestly saying it holds no reading
for that name yet.
lookup_domain — the stored reputation snapshot for one
domain: Domain Rating, Tranco rank, OpenPageRank,
registration date, TLS certificate state and AI crawler
policy. Requires domain.get_ai_crawler_policy — for each of the eight tracked AI
crawlers, whether the domain's robots.txt allows it, blocks
it, or never mentions it, plus whether an llms.txt is
published. Requires domain.list_sources — the catalogue of sources behind the other
two tools and what each one means. No arguments; read it
first if a snapshot field is unfamiliar.npx @reneturcios/domaintrack lookup_domain '{"domain":"example.com"}'
npx @reneturcios/domaintrack get_ai_crawler_policy '{"domain":"example.com"}'
npx @reneturcios/domaintrack list_sources
npx @reneturcios/domaintrack --version
Each tool subcommand forwards one call and prints the result content as JSON. Exit codes: 0 on success, 1 when the upstream call comes back as an error result, 2 on a usage error (unknown subcommand, malformed JSON argument).
npx @reneturcios/domaintrack mcp
MCP client configuration:
{
"mcpServers": {
"domaintrack": {
"command": "npx",
"args": ["-y", "@reneturcios/domaintrack", "mcp"]
}
}
}
The server answers tools/list itself and forwards every
tools/call to the public endpoint over a Streamable HTTP
session (initialize, then notifications/initialized, then the
call), reusing the session — and its Mcp-Session-Id, when
the endpoint issues one — for the life of the process.
Failures on the wire are reported in this package's own
words, as a text result starting with domaintrack error: —
a JSON-RPC error from upstream, a non-2xx HTTP status, an
unparseable response body, or a failed request each map to
that prefix followed by the detail.
docker run -i ghcr.io/cloudcorprecords/domaintrack # stdio MCP server
docker run --rm ghcr.io/cloudcorprecords/domaintrack lookup_domain '{"domain":"example.com"}'
DOMDUCK_MCP_URL — overrides the upstream endpoint, which
defaults to https://domduck.com/api/mcp/public. (This
override is a reconstruction on our side; the endpoint
itself is the pinned public one.)npm install
npm run build # tsc -> dist/
npm test # node test runner via tsx; stubbed upstream, no network
npm run dev # run the CLI from source
MIT — see LICENSE.